Privacy Policy

This Policy explains what personal and health information HamNabz collects, why we use it, who can see it, which service providers process it, how long we keep it, how we protect it and how you can exercise your rights.

Last updated: 7 November 2026

Text in square brackets is information the operator will complete before launch.

Contents

1.Who we are and what this Policy covers
2.Summary
3.Information we collect
4.How we use your information and why
5.Who can see your information
6.Service providers (processors)
7.International transfers
8.How we protect your information
9.How long we keep information
10.Your rights
11.Closing your account
12.Exporting your information
13.Children
14.Cookies and browser storage
15.Changes to this Policy
16.Contact

1. Who we are and what this Policy covers

[Operator legal name], registered at [Registered address], is responsible for the personal information processed through HamNabz (the “controller”). You can contact our data protection contact at [Data protection contact].

This Policy covers the HamNabz website and platform, including accounts, bookings, video visits, written consultations, messages, medical documents, the wallet, reports, reviews, notifications and emails. Doctors who consult through HamNabz may also be responsible for the medical records they create under the rules of their profession.

2. Summary

We collect what we need to create your account, connect you with doctors, run visits and payments, and keep the platform secure.
Your health information is shared only with the doctors you consult and only to the extent the platform needs for that care.
Video visits are not recorded. Medical files are stored in private storage and can be opened only by people with access to them.
We do not sell your information, do not use it for advertising and do not use analytics or advertising trackers.
Patients can download a copy of their information and delete their account in their account settings. Anyone can ask to access, correct, export or delete their information, subject to the records we must keep.

3. Information we collect

Account information, which you give when you sign up:

first and last name, username and email address;
your password, which we never store in readable form: only a one-way cryptographic hash is kept;
date of birth, and the number and issuing country of your identity document or passport, used to identify you and to prevent duplicate accounts;
your language and notification preferences, including whether you want visit-reminder and new-message emails;
the versions of these legal documents you accepted, the language and the time.

Health information, which you or your doctors add:

your health summary, such as long-term conditions, allergies and other notes for your doctor;
medical documents you create or upload, with their versions and attachments (PDF or image files);
information you give for a visit or a written consultation, and the documents you choose to share for it;
visit notes, prescriptions, written answers and corrections prepared by your doctors;
messages and attachments exchanged with your doctors.

Service information, created when you use HamNabz:

appointments: doctor, date and time, status, cancellations and their timing, rescheduling, and visit outcomes such as no-shows;
video visit records: when the room started and ended and when each participant joined or left. The audio and video themselves are not recorded or stored;
wallet and ledger entries: top-ups, reservations, charges, refunds and reversals, with amounts in TJS for patients and IRR for doctors, and the reference recorded by the administrator;
visit reports and their outcome, reviews and their edit history, and in-app notifications;
records of the emails queued or sent to you: type, time and delivery status, without the email text;
for doctors: professional profile (display name, names in other languages, biography, education, experience, languages, city, specialties), availability, agreed rates and settlements.

Technical information:

sign-in sessions, with the IP address and browser information (user agent) of the device used;
whether your email address is confirmed, and temporary links for confirming your email address (valid for 24 hours) and resetting your password (valid for one hour);
a security log of sign-ups, sign-ins and failed sign-in attempts (including second-factor checks), with the IP address and browser information (user agent) of each request, and short-lived request counters used for rate limiting;
server logs and traces kept by our hosting provider, which record requested addresses without query strings, response status and timing.

We do not collect payment card details, precise location, contacts or information from social networks.

4. How we use your information and why

We use your information to:

create and secure your account and confirm your identity;
show doctor profiles and let you book, reschedule, cancel and attend visits;
let your doctors see the information needed for your care and record their notes and prescriptions;
reserve, charge and refund payments, keep an accurate ledger and settle with doctors;
send in-app notifications and service emails, such as booking confirmations and reminders;
handle reports, reviews, support requests and disputes;
detect and prevent fraud, abuse and security incidents, and keep audit records;
comply with legal obligations and respond to lawful requests.

We send two kinds of email. Account and security emails: a link to confirm your email address after sign-up, password-reset links you request, and a notice whenever your password is changed. Service emails: about bookings, cancellations, reschedules and no-shows, written consultations, report outcomes and corrected records, a visit reminder the day before a visit, and notices of unread new messages (at most one per conversation a day). Service emails are sent only to a confirmed email address. You can turn off visit reminders and new-message emails in your account settings; the other emails are part of the service and are always sent. Emails never contain medical details, message text or document names.

Depending on the law that applies to you, our legal bases are: performing our contract with you (the Terms of Service); your explicit consent for processing health information, given when you create your account and when you choose to share documents; our legal obligations, for example on financial and medical records; and our legitimate interests in keeping the platform secure and preventing abuse. [Legal bases under applicable law to be confirmed].

You can withdraw your consent to processing health information at any time by closing your account. Withdrawal does not affect processing that already took place or records we must keep by law.

5. Who can see your information

Your doctors: a doctor you book or consult sees your name, date of birth and the details needed for the visit or consultation, your health summary, the documents you choose to share, and messages in your conversation. Doctors do not see your wallet or your identity document.
Other doctors and patients: they cannot see your information. Public reviews show the rating, comment and date, but not your name.
Administrators: a small number of authorised staff can see account, booking, financial, report and audit information needed to run the platform, verify payments, handle support and resolve reports. The platform does not give them a view of your medical documents, messages or clinical notes.
Public: doctor profiles (name, specialties, experience, languages, city, prices and review summaries) are public.
Service providers: the processors listed in the next section, only to provide their service to us.
Authorities: when we are legally required to disclose information, or to protect someone’s life or safety. We will tell you where the law allows.

We do not sell personal information and do not share it for advertising.

6. Service providers (processors)

We use the following providers. Each may process information only on our instructions and under a contract that requires confidentiality and security [Data processing agreements to be confirmed].

Neon (PostgreSQL database): stores the account, health, appointment, financial, report, review and notification records described above. Database region: [Neon region to be confirmed].
Cloudflare (website hosting on Cloudflare Workers, network security and R2 object storage): processes every request to the website, including your IP address; stores medical files, consultation files and message attachments in a private R2 bucket; keeps server logs and traces. Storage location: [R2 location to be confirmed].
LiveKit (video): carries the live audio and video of your visit between you and your doctor. The LiveKit server receives your IP address, a random participant identifier and your role (patient or doctor); it does not receive your name. Calls are not recorded. Server operator and location: [Video server hosting provider and location to be confirmed].
Resend (email delivery): receives your email address, your name and the content of the emails described in Section 4, such as visit times, the other participant’s name and links to the relevant page. Emails do not contain medical documents, message text or notes.

7. International transfers

HamNabz connects patients, mainly in Tajikistan, with doctors in Iran, so information about your care is made available to doctors in Iran when you book or consult them. Our service providers may store or process information in other countries, such as the United States or member states of the European Union.

Where the law requires it, we rely on your consent or other recognised safeguards for these transfers [Transfer mechanisms for Tajikistan and Iran to be confirmed]. By using HamNabz you understand that your information will be processed outside your country.

8. How we protect your information

All connections to HamNabz use HTTPS (TLS encryption in transit), with HSTS and a strict content security policy. Our providers encrypt stored data at rest [Encryption at rest to be confirmed with each provider].
Passwords are stored only as one-way hashes. Session cookies are HttpOnly and Secure, and sessions expire after 24 hours. You can see the devices signed in to your account and sign out any of them; resetting your password signs out every device, and changing it signs out your other devices.
The application reaches the database only through a fixed list of database functions that check the session, role and ownership on every call. A database role used by the application has no direct table access.
Medical files are stored in a private bucket, served only after an access check, and are never publicly addressable.
Rate limits on sign-in, sign-up, bookings, messages, uploads, reviews and other operations protect against abuse.
Financial entries, medical record versions, review changes and administrator actions are kept in append-only or audit records.
Requests that change data are accepted only from our own website, to prevent cross-site request forgery.

No system is completely secure. If a security incident affects your information, we will notify you and the authorities where required by law.

9. How long we keep information

Account and profile information: while your account is open; on closure, it is anonymised as described below.
Medical records (visit notes, prescriptions, shared documents): [Medical record retention period to be confirmed], as required by the rules that apply to doctors.
Financial ledger and payment records: [Financial record retention period to be confirmed]; they are kept after account closure with your personal details anonymised.
Messages, consultations and video visit records: while your account is open or as long as they form part of a medical record.
Sign-in sessions: until they expire (24 hours) or you sign out. Rate-limit records: up to the end of their time window. Security log: one year, including after account closure, to investigate unauthorised access.
Server logs and traces: according to our hosting provider’s retention settings [Log retention period to be confirmed].

10. Your rights

Subject to the law that applies to you, you have the right to:

access your information and receive a copy of it;
correct inaccurate information. You can update much of it yourself; finalised medical records are corrected by your doctor as a new version;
delete your information, except where we must keep it;
object to or restrict certain processing;
receive your information in a portable format;
withdraw consent at any time, without affecting earlier processing;
complain to a data protection or health authority [Competent supervisory authority to be confirmed].

To exercise a right, use your account settings or contact [Data protection contact]. We may need to verify your identity. We will reply within [Response time: to be confirmed].

11. Closing your account

If you are a patient, you can delete your account yourself in your account settings by entering your password and confirming. Deletion is possible only when you have no upcoming visits, open written consultations, visit reports under review or payments still being settled; the page shows what must be resolved first. Doctor and administrator accounts cannot be deleted this way; they are closed on request by contacting us.

Deletion takes effect immediately and cannot be undone. We anonymise the account: your name, username, email address, date of birth, identity document, password, sessions, preferences, favourite doctors, notifications and pending emails are removed, and you are signed out on every device; your health summary is deleted; your uploaded files are deleted from storage; documents you did not share are deleted, and documents you shared for a visit or consultation keep only a record without content; the text of messages and consultation entries you wrote is erased; and your review comments are erased and published reviews are withdrawn.

We keep the records that we or your doctors must keep, without your identifying details: the financial ledger, appointments and their outcomes, consultations and visit reports (shown as “Deleted user”), the records written by your doctors, your consent records and an audit entry that the account was deleted. A remaining wallet balance is not refunded automatically: ask support for a refund before you delete your account, as described in the Terms of Service, because afterwards we can no longer identify you.

12. Exporting your information

If you are a patient, you can download a copy of the information in your account as a JSON file, or open a printable report that you can save as PDF, from your account settings. The export includes your account and profile details, preferences, favourite doctors, health summary, documents and their versions, appointments and prescriptions, written consultations, messages, wallet balance and history, reviews, visit reports, notifications and consent records. Uploaded files are listed by name and size and can be downloaded from their own pages. For your security, the download and the report are available only within 12 hours of signing in. Doctors’ private clinical notes are not part of the export; you can ask your doctor for them. Doctors can ask us for a copy of their information.

13. Children

HamNabz is intended for adults, and we do not verify age at sign-up. A minor’s account must be created and managed by a parent or legal guardian, who is responsible for its use and for the information provided. Care for minors remains subject to the treating doctor’s judgement and applicable law. If we learn that a minor is using an account without a parent or guardian, we may restrict or close it.

Controller: [Operator legal name], [Registered address]
Data protection contact: [Data protection contact]
General enquiries: [Contact email]