Privacy Policy — DOCTOR AIC

Version 1.2 • Last updated: 15 October 2026.

Dr Ahmed Kareem Al-Hassani is responsible for operating DOCTOR AIC and managing the information provided through the service. Privacy enquiries: doctoraicu@gmail.com. UK contact number: +44 7925 259465. The telephone number does not indicate where the service is established or where data is stored.

1. Scope of the service

DOCTOR AIC supports appointment requests, communication with the clinic, and follow-up of measurements and care plans approved by a doctor. Patient, doctor, secretarial and administrative functions depend on account permissions. Creating a personal account does not require booking an appointment. This policy covers the DOCTOR AIC application; articles and information pages on Blogger are also subject to Blogger's settings and policies.

2. Information you provide

• Your name, telephone number and country code, account credentials, medical/account number, and account-related information.
• Where needed for a clinical service: date of birth, medical profile, authorised representative details, requested specialty, initial description of your condition and appointment details.
• Symptoms, vital signs and other measurements, questionnaire answers, medical information, messages and attachments such as reports and laboratory results that you choose to submit.
• Records created by authorised clinicians, including test requests, result reviews, prescriptions, dietary plans, follow-up instructions and visit summaries.
• Consent confirmations, operation times and administrative and clinical audit records needed to track activity within the service.

Please provide only information needed for the service or your care. Do not send passwords for other accounts, bank card details or unrelated documents. Creating an account does not by itself verify ownership of a telephone number or establish a person's identity.

3. How we use information

We use information to create and protect accounts, arrange and confirm appointments or propose alternatives, connect patients with the appropriate clinic team, support clinical follow-up, display approved instructions, investigate faults and handle requests concerning information. Relevant submission forms ask you to confirm the information and agree to sending it. Submitting an appointment request does not mean it has been accepted.

4. Who can access information?

Patients can access information available to their own account or an authorised linked beneficiary. Authorised doctors can access information needed for cases assigned to them. Secretarial access is limited to coordination, appointments and the information needed for those tasks; it does not provide access to the full clinical record or private medical conversations. The manager portal manages accounts and permissions and does not grant unrestricted clinical access.

The operator owns the storage account and can technically access records and backups. Separate application portals do not remove the storage owner's technical access. Medical files are not published through public links or made available to other users merely because they have an account.

5. Storage and service providers

The production system uses Google Cloud to run the server, and Google Apps Script and Google Drive to hold records, attachments and backups in private storage managed by the operator. Google Secret Manager holds connection credentials. Cloud infrastructure may also process request and error logs and connection information needed for operation and security.

Data may be stored or processed in different countries according to Google's infrastructure and policies. We do not promise that all data remains in London, the United Kingdom or the server's selected region. Google describes encryption of Drive data in transit and at rest. This is not end-to-end encryption that prevents technical access by the operator or storage provider.

Further information: Google Privacy Policy and Google Drive privacy and security.

Private review versions are labelled as such and use synthetic information only. Review data may be held in memory and lost when the server restarts; they must not be used for real patient information.

6. Sessions and your device

The application uses an essential session cookie to protect access. Sessions currently last approximately 30 minutes; you may need to sign in again after expiry or a server restart. The current application does not provide offline copies of medical records. Downloading a report or taking a screenshot creates a copy on your device; you are responsible for protecting access to that copy.

The application package does not currently include advertising trackers or marketing analytics. Blogger and sign-in services may use their own cookies and operational processes under their settings and policies.

7. Artificial intelligence and external communications

Sending medical information to an external AI provider is not enabled in the current production configuration. If this changes, the provider, information and purpose will be explained before activation. Treatment instructions and clinical decisions require approval by the doctor.

Automatic appointment confirmations and verification codes through SMS or WhatsApp are not currently connected. Patients can choose their own password during registration. Account recovery and linking an existing record are handled separately by the operator with appropriate identity checks. Appointment status is shown within the application; submitting a request does not guarantee a telephone message.

If you choose a WhatsApp contact link, you leave the application and use WhatsApp under its own terms and privacy policy. Information you send there is handled through that separate channel. The educational library links to published articles on the clinic's blog.

8. Children and authorised representatives

A child's clinical information, or information for a beneficiary who needs a representative, must be provided by an authorised person after the relationship and authority have been checked. Registering a telephone number alone does not grant access to another person's record. Representative relationships can be reviewed, corrected or deactivated through the operator.

9. Retention and backups

The current system does not automatically delete records after a fixed period. Records and backups remain stored until the operator reviews the need to retain them and takes appropriate action. Deactivating an account or cancelling an appointment does not automatically delete the medical record or its backups.

You may request a retention or deletion review through the privacy email address. After checking identity, the operator will explain what can be deleted, what needs to be retained and why, and how backups will be handled. There is currently no comprehensive self-service deletion function or promise of immediate deletion from every backup.

10. Requests and enquiries

You may contact us to request access to or a copy of your information, correction, a review of representative access, account deactivation or a review of deletion. Requests are currently handled manually. Send the type of request and your medical/account number, if available, to doctoraicu@gmail.com. Do not include your full medical record or login password in the initial email. We may request an appropriate identity check before disclosing or changing information.

11. Safety and changes to this policy

The application is not an emergency service or continuous medical monitoring service. An abnormal reading does not mean that the clinic has seen it immediately. In an emergency, seek local emergency medical assistance directly. We use access controls and backups, but no system can be guaranteed completely secure.

This policy is reviewed when collection, access, storage or providers change. Updated versions display their revision date, and appropriate confirmation will be requested before a function requiring new consent is used.