MudawyBack to home

Privacy Policy

Last updated: 4 November 2026

This policy explains what data Mudawy (“we”) collects when you use mudawy.com and the Mudawy clinic management app (doctor and reception stations), and how we use and protect it. The core principle: patient data belongs to the clinic, is stored only on the clinic's device, and is never visible to us.

1. Patient data stays on the clinic's PC

Mudawy works offline. All patient data (personal details, visits, diagnoses, prescriptions, attachments and invoices) is stored in an encrypted database on the doctor's PC. It is never sent to our servers or to any cloud service.

The reception station connects to the doctor's PC over the clinic's local network only; this data does not travel over the internet.

The doctor or clinic is responsible for their patients' data, including obtaining consent and keeping it confidential under the law and medical ethics. We do not access or process this data on the clinic's behalf.

Backups are files the doctor keeps wherever they choose. They carry what is needed to restore the data on another device, so keep them somewhere safe. When you send an appointment reminder through WhatsApp, the message opens and is sent from the clinic's own WhatsApp account and is subject to WhatsApp's privacy policy.

2. Doctor and clinic data we collect

To activate and manage your subscription we collect what you enter when you register, edit your profile or renew:

  • The doctor's name and titles, mobile number, clinic phone, clinic address and specialty.
  • The password you choose to protect your account.
  • Your plan: modules, add-ons, specialty packs and term, plus subscription status and expiry date.
  • A technical device identifier used to bind the licence to the clinic's PC. It is never shown in the app or used for anything else.
  • Renewal or upgrade requests and any notes you write in them.

3. When the app goes online

The app connects to the internet only to check the licence and subscription, and to check for and download new versions from Mudawy's public release page on GitHub. It contains no analytics, tracking or advertising tools.

If the clinic PC has no internet, you can activate with a QR code from your phone through app.mudawy.com. The code carries the same licence request in encrypted form; it never contains your password or any patient data.

4. Website visitors

  • Contact form: name, phone, clinic name, specialty and message, used only to reply to you.
  • IP address: used briefly to rate-limit the contact form and not stored with your details.
  • Vercel Analytics and Speed Insights: aggregate, cookie-free statistics on visits and page speed.
  • Meta Pixel: a Meta tool that uses cookies to measure our Facebook and Instagram ads, recording events such as page views and download or contact clicks. You can control this in your Meta ad settings or your browser settings.
  • WhatsApp links: tapping one moves the conversation to WhatsApp, under its own policy.

5. How we use data

  • Activating the free trial and subscription, checking the licence, and enabling the modules and packs you bought.
  • Contacting you about your account, requests, support and renewal.
  • Printing the clinic's details (name, titles, address, phone) on prescriptions inside the app.
  • Preventing misuse, such as running one subscription on several devices without a licence.
  • Improving the website and measuring ad performance.

6. Service providers

We do not sell your data or use it for purposes unrelated to the service.

We rely on trusted providers to run the service, and their servers may be outside Egypt: Supabase (account and subscription database), Vercel (website hosting and statistics), Cloudflare (hosting the phone activation page), GitHub (downloads and updates) and Meta (ad measurement). We share data with no one else unless required by law or a competent court.

7. Retention

We keep account and subscription data while your account exists, then for as long as the law or resolving a dispute requires. Contact-form messages are kept until they have served their purpose. We hold no patient data because it never reaches us, and the app does not delete clinic data when a subscription ends.

8. Security

The clinic database is encrypted on the device, and the app can be locked with a PIN. Account data reaches our servers over an encrypted connection (HTTPS), and access is limited to the relevant Mudawy team. The security of the clinic's PC, network, backups and passwords remains the clinic's responsibility.

9. Your rights

You may ask to access, correct or delete your data, or withdraw your consent to its use, under Egypt's Personal Data Protection Law No. 151 of 2020. Email us at ⁦info@mudawy.com⁩ and we will respond within a reasonable time. Deleting account data may make licence checks impossible and end the subscription.

10. Age

The website and app are intended for doctors and clinics, not for anyone under 18.

11. Changes to this policy

We may update this policy when the service or the law changes. We will change the “last updated” date at the top and notify subscribers of material changes.

12. Contact us

For any privacy question: email ⁦info@mudawy.com⁩, or phone and WhatsApp ⁦+20 150 307 3555⁩.