Privacy policy
Last updated: 2026-10-21
Kushufat is an online service for running medical places, operated by Kushufat. The place (clinic, center, hospital, lab, radiology center or pharmacy) owns and is responsible for its patients' data; we store and process it on the place's behalf and only to run the service, in line with Egypt's Personal Data Protection Law No. 151 of 2020.
What we store
Account details (name, email, mobile), the place's details, and everything its staff record: patients, visits, prescriptions, results, reports, invoices and uploaded files. Health data is sensitive data, and the place is responsible for its patients' consent to record it.
Who sees it
Only the place's staff, each according to the permissions the owner sets, and every change is logged with who made it. We do not sell data, use it for advertising or share it with anyone, unless the law requires us to.
Services we use
- Cloudflare: hosting, the database (in Europe), file storage and speech-to-text for dictation.
- Anthropic: processing dictation and smart commands, only if the place turns them on. It does not use the data to train models.
- Meta (WhatsApp): confirmations and reminders, only if the place connects its own WhatsApp Business account.
- Egyptian Tax Authority: e-receipts, only if the place is registered.
A place that runs the system on its own server keeps the data on its own machine.
Retention and deletion
We keep the data while the place is subscribed. The owner can download all of it in one file from Settings at any time, and if they ask us to delete it we do so within 30 days; backups expire on their own after that.
If there is a breach
If a security incident affects a place's data, we tell the place as soon as we can, with what happened and what we did.
Patients' rights
Patients who want to see, correct or delete their data contact the place that treats them, which does it from the system.
Cookies
We use cookies only to keep you signed in and to remember your language. No advertising or tracking cookies.