Privacy and data
Privacy policy
This policy explains what Shekwa processes, why it is needed, and the controls available to users.
Last updated: 1 August 2026
Data we process
Account data may include your name, email, mobile number, account role and profile information. Appointment data includes the selected doctor, date, time and an optional visit note. Doctor profiles may include professional, hospital and verification information.
Symptom descriptions and AI processing
When you submit symptoms to the analyzer, the text may be sent to an external AI provider to suggest urgency and the relevant ophthalmology subspecialty. Do not include your name, national ID, medical record number or other unnecessary identifiers. The output is not a diagnosis.
Storage and security
Authentication and application data are stored through Supabase with row-level access controls. Transport uses HTTPS in production. Access is limited by account role. No online service can guarantee absolute security.
Retention and user controls
Data is retained while needed to provide the service, meet legal obligations, resolve disputes and prevent abuse. Users may update profile information through the application and may request account or data deletion through the official support channel once published.
Saudi data protection
Shekwa is being designed with Saudi Personal Data Protection Law principles in mind, including purpose limitation, data minimization, access control and transparency. A final legal review is required before commercial or institutional launch.