Privacy Policy

Sihati360 (صحتي 360) — platform and its iOS and Android apps · Last updated: 24 October 2026

Who we are

Sihati360 is a clinic-management platform and patient portal used by independent clinics. The Sihati360 iOS and Android apps are published by TayseerulQuran Professional Inc. and give access to the same platform at sihati360.com.

Each clinic is responsible for its patients' medical records. Sihati360 processes that data on the clinic's behalf, only to provide the service.

Data we process

• Identity and contact: name, phone / WhatsApp number, the health number printed on the patient card, and clinic staff account details.
• Health information: appointments, visits, reports, prescriptions and files entered by the clinic or uploaded by you (for example photos of reports or scans).
• Messages: sign-in codes and reminders sent over WhatsApp, and your messages with the clinic or the "Find a doctor" assistant.
• Technical data: server logs (IP address, device type, time) and the cookies needed for sign-in and security.

What the app (iOS and Android) does on your device

• Camera: to scan the QR code on your patient card and to photograph a report or scan you choose to upload. Nothing is recorded or sent unless you choose it. On Android, QR scanning uses the Google code scanner built into the system, so the app does not ask for camera permission for it.
• Photos: the photo library opens only when you pick a photo to upload.
• Microphone: only if you record a video to attach.
• The app stores your clinic address, your role (patient / clinic staff) and your sign-in session on the device. Deleting the app deletes them.
• No advertising, no tracking across apps or websites, and no third-party analytics SDKs in the app.

Why we use data

To provide care, booking and the patient portal, to verify your identity at sign-in, to send reminders, to keep accounts secure, and to meet the clinic's legal obligations. We do not sell data or use it for advertising.

Who we share it with

• Your clinic and its authorised staff, each according to their role.
• Service providers acting only for us: hosting (IONOS servers in Europe), WhatsApp by Meta for codes and messages, and an AI provider that powers the assistant and some tools, with phone numbers masked where possible.
• Authorities, when the law requires it.

Retention and security

Medical records are kept for as long as the clinic needs them under the law. Connections are encrypted (HTTPS), access is role-based, sensitive keys are encrypted, and backups are taken daily.

Your rights and deleting your data — Sihati360

You can ask to access, correct, delete or receive a copy of your data. The Sihati360 app does not create accounts by itself: patient and staff accounts are created by the clinic.

To request deletion of your account and data:

1. Email info@tayseerulquran.com with the subject "Delete my Sihati360 data", or ask your clinic's reception.
2. Include your clinic's name, your health number (or username for staff) and your registered phone number.
3. We verify your identity within 7 days, then delete the account, contact details, messages and files you uploaded within 30 days, and confirm to you.

What is kept: medical records the law requires the clinic to keep (visits, prescriptions, invoices) stay with the clinic for the legally required period and are then deleted. Backups are purged within 30 days. Uninstalling the app only deletes what it stored on your phone.

Minors

Records of patients who are minors are managed by the clinic together with a parent or guardian.

Medical notice

The AI assistant does not diagnose or prescribe. In an emergency, go to the nearest emergency department.

Contact and changes

Questions or privacy requests: info@tayseerulquran.com (TayseerulQuran Professional Inc.). Any change will be published on this page with its update date.