Privacy Policy

App: Aura Care (Patient App) · Effective date: 29 July 2026

At Aura Care we respect your privacy. This policy explains what information we collect when you use the patient app, how we use, protect and share it, and the rights you have over it.

1Information we collect

We collect only what is needed to run the app and connect you to your clinic:

• Account & identity: phone number (for OTP sign-in), name, email (optional), date of birth, and gender.
• Appointment & health data: your appointments and booking requests, the doctors and clinics linked to your account, invoices and payments, and reminders.
• Device & technical: push notification token (Expo Push Token), device model, OS and app version, and basic crash diagnostics.
• Camera: used only to scan a clinic's QR code to link it to your account. We do not capture or store any photos or video.

2How we use your information

• Create your account and sign you in securely via OTP.
• Show your appointments and invoices and link you to the clinic you choose.
• Send notifications and reminders about appointments and offers from your clinic.
• Improve app performance and fix crashes.

3Legal basis & consent

We process your data based on your consent when using the app and to deliver the service you requested (managing your appointments with the clinic). You may withdraw consent at any time by deleting your account or contacting us.

4How we share data

• With the clinic you link: your data (name, phone, appointments) is shared with the clinic to provide your medical and administrative service.
• Service providers: push notifications (Expo) and cloud hosting — only as needed to operate the app.
• Legal requirements: we may disclose data where required by law.
• We do not sell your data and do not share it for advertising.

5Data retention

We keep your data while your account is active or as needed to provide the service and meet legal obligations. When you delete your account, your personal data is deleted or anonymized within a reasonable period, subject to records the clinic may retain for medical/legal reasons.

6Account & data deletion

You can request deletion of your account and data at any time by emailing us at the address below. We will action the request within a reasonable period.

7Security

We use appropriate technical and organizational safeguards (encrypted connections and secure on-device storage of access tokens). No method of transmission or storage is 100% secure, but we make reasonable efforts to protect your data.

8Your rights

You have the right to access, correct and delete your data and to withdraw consent. To exercise any of these rights, contact us.

9Children's privacy

The app is not directed to children under 13 and we do not knowingly collect their data. Children's accounts are managed with a guardian's knowledge through the clinic.

10Permissions

Camera (QR scanning), Notifications (appointment reminders), and Internet / network state (connecting to the server). You can control these from your device settings.

11International data transfer

Your data may be processed or stored on servers outside your country by our hosting and notification providers, with appropriate safeguards in place.

12Changes to this policy

We may update this policy from time to time and will post the updated version at this link with a revised effective date.