Doctera (“we”, “us”) operates the Doctera platform for booking doctors and for doctors to run consultations. This policy explains what personal data we handle, why, and the choices you have. We are based in Beirut, Lebanon.
1. What we collect
Account data: name, email, phone/WhatsApp, password (stored hashed), and your role (patient, doctor, staff).
Health data: appointments, clinical notes, prescriptions, lab orders, vaccines, documents and any information a doctor records or you provide. This is sensitive data and we treat it with extra care.
Usage data: basic logs needed to keep the service secure and working (e.g. sign-in events, IP address for rate-limiting).
2. Why we use it (lawful basis)
To provide the service you asked for (booking, reminders, consultations, records) on the basis of our agreement with you.
To process health data, on the basis of your explicit consent and for the provision of care. You can withdraw consent at any time.
To keep the platform safe and meet legal obligations (security, fraud prevention, record-keeping).
We do not use your data for advertising, and we never sell it.
3. Who can see your data
The doctor(s) you choose. A patient grants a specific doctor access to their records and can revoke it at any time. A doctor only ever sees their own patients.
Service providers we rely on (secure hosting, speech-to-text and AI) each under a data-protection agreement and only to deliver the service. They do not reuse your data for their own purposes, and your medical data is not used to train public AI models. If you opt in to WhatsApp messages, WhatsApp (Meta) processes the delivery of those messages under its own terms.
We disclose data to authorities only where strictly required by law.
4. AI features
When a doctor uses Doctera’s dictation or note assistance, the consultation is processed securely to help the doctor, who reviews everything before it is saved. The AI only analyses records you have consented to share.
5. Keeping it safe
We encrypt data in transit (TLS) and at rest, isolate each account, log access, and rate-limit abuse. See our Security & privacy page for details.
6. How long we keep it
We keep your data for as long as your account is active and as needed to provide care and meet medical record-keeping requirements. When you delete your account we remove your data, except anything we must retain by law.
7. Your rights
You can access, correct, export or permanently delete your data, and withdraw consent at any time, from your account or by contacting us. We respond within a reasonable time.
8. Cookies
We use only essential cookies, to keep you signed in and the site secure. We do not use tracking or advertising cookies.
9. Children
Accounts are for adults. A parent or guardian may manage bookings and records for a child as a family member (beneficiary) on their own account.
10. International transfers
Some providers process data outside Lebanon. Where they do, we use providers that apply appropriate safeguards under their data-protection agreements.
11. Lebanese data-protection law (Law No. 81/2018)
Doctera processes personal data in line with Lebanon’s Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data (Part V — Personal Data Protection). In particular:
We collect data fairly, for specified and legitimate purposes, keep it accurate, and retain it no longer than needed (Arts. 87 & 90).
Health data is processed to provide care and on your explicit consent, as permitted by Art. 91, and only by, or for, the treating healthcare professional.
You may access, correct, complete, update and delete your data, and object to processing (Arts. 92 & 99–101); we act on such requests free of charge and within the legal time-limits.
We apply technical and organisational measures to keep your data secure and confidential (Art. 93).
Where the law requires it, the processing is declared to or authorised by the competent authority (the Ministry of Economy and Trade, or the Ministry of Public Health for health data); you may also lodge a complaint with it.
12. Contact
For any privacy request or question, contact us. If you believe we have not handled your data properly, you may also contact the competent authority.
We may update this document; material changes are announced in the app. Questions? Contact us.