TabibiQ helps clinics in Iraq and the Kurdistan Region manage appointments, and helps patients book them. It comes as two apps — TabibiQ for patients and TabibiQ Clinic for clinic staff — and a website at tabibiq.app. This policy covers all of them. It explains what we hold about you, why, who can see it, and what you can do about it.

Your phone number. This is how you sign in: we send a code by SMS and you type it in. If you work at a clinic, the clinic owner may also set a password on your staff account so you can sign in without waiting for a text. The password is a second way to prove the same phone number, not a separate login, and patients are never asked for one.

Your name, so clinic staff know who is arriving, and the language you chose in the app, so notifications reach you in it.

A profile photo, if you choose to add one. You pick it from your photo library or take it with your camera at that moment; the app asks for permission only when you tap to add a photo and does not otherwise read your photos or use your camera. The photo is stored in our file storage at an address that is not listed anywhere but can be opened by anyone who has it, so do not upload a picture you would not want seen.

Your appointments: the clinic, the doctor, the date and time, the service, the fee and whether it was paid, who the visit is for (you or a family member you added), any reason for the visit, and any questions you write down for the doctor beforehand. We also keep your waitlist requests, the doctors you mark as favourites, and any request you send to a clinic’s shop.

Health information you enter yourself, if you choose to. The patient app has a health profile — blood type, date of birth, height and weight, allergies, chronic conditions, current medications, an emergency contact, blood pressure, blood sugar, smoking and activity. You may also add family members, including children, with a name, phone number, relationship and a health record of their own. Everything in this record is treated as medical information.

Health information your clinic enters about you. During or after a visit a doctor can record vitals (blood pressure, blood sugar, weight, height, temperature, pulse, oxygen level), a diagnosis, diet and lifestyle guidance, special instructions and a recommended follow-up, and can issue a prescription listing medicines, doses, quantities and notes. Clinics can also record the fee you paid and items you bought at the clinic, under your name.

Your location, at one moment only. When you tap “I have arrived” for today’s appointment, the app asks your phone for its position once and sends it to our server, which checks that you are within 250 metres of the clinic’s pinned address. The position is compared and discarded — it is not stored, and the app never reads your location in the background or at any other time. A clinic owner who pins their clinic on a map may use the phone’s position to place the pin; what is stored is the clinic’s address, not a person’s movements, and that pin is shown to patients.

A push notification token. If you allow notifications, your phone issues a device token through Expo’s push service, and we store it on your profile so we can tell you when an appointment changes, a prescription is issued, or a waitlist place opens. Turning notifications off in your phone’s settings stops them.

If you work at a clinic, we also hold your role, which clinic or clinics you work at, and what you are permitted to do in the app. A doctor’s public listing — name, photo, specialty, degrees, biography, fee and a contact number the doctor chooses — is shown to patients; the number a doctor signs in with is not. A clinic owner applying for approval uploads photos of the clinic’s business registration, the doctor’s medical work permit and the owner’s national ID or passport, chosen from the photo library or camera and stored in a private area that only the clinic’s owner and the platform administrator can open.

We do not collect your contacts, your email address, or anything from your microphone, and the apps contain no advertising or analytics software. The app asks our server for the current time so appointments show correctly even when a phone’s clock is wrong; that request carries nothing about you.

We do not take payments in the app, so we never see card or bank details.

To let you sign in and prove it is you.

To show a clinic the appointments it needs to run its day, and to show you yours.

To give the doctor treating you the health information you and your clinic have recorded, and to give you a copy of what your clinic recorded.

To let a pharmacy confirm that a prescription is genuine before dispensing it.

To let a clinic keep its own records — its services, prices, stock and sales.

To tell you when something about your care changes.

We do not sell your information, and we do not use it for advertising.

A clinic sees only its own patients and its own appointments. This is enforced by the database itself, not only by the app, so a mistake in a screen cannot expose another clinic’s records.

Inside a clinic, what each staff member sees is set by the clinic owner. Visit notes and prescriptions are open to doctors and to staff the owner has allowed to view patient history. Your own health profile is different: only a doctor you have an appointment with at that clinic can read it — never reception — and a doctor at a clinic you have not visited gets nothing.

A family member you add is seen by the clinic when you book for them, together with their health record. If the family member has their own TabibiQ account, you may ask to link it; nothing is shared until that person accepts, and either of you can unlink at any time.

A doctor who works at more than one clinic sees one clinic at a time. Switching clinics changes what the database will return, so one clinic can never see another’s patients.

A prescription comes with a short code and a QR image so a pharmacy can check it. Anyone who has that code can open the verification page — without an account — and see the patient’s name, the doctor and clinic, the dates, the medicines and any notes, and can mark the prescription as dispensed by entering the pharmacy’s name. Show the code only to the pharmacy you want to fill it.

The platform administrator can see and correct records across clinics, including the documents a clinic uploads for approval. This is needed to approve clinics and recover accounts, and every administrative action is written to a log the administrator cannot edit or erase.

These companies handle data on our behalf. None of them is permitted to use your information for anything else.

Supabase hosts the database (PostgreSQL), handles sign-in, and stores uploaded files such as profile photos and clinic documents. Everything described in this policy lives there.

OTPIQ delivers the SMS sign-in codes inside Iraq and therefore receives your phone number for that purpose.

Expo’s push notification service receives your device token and the text of each notification, and hands the message to Apple or Google to deliver to your phone.

Cloudflare serves our website, tabibiq.app, and sees the ordinary details of a web request, such as your IP address.

In the web version of the clinic app, the map a clinic owner uses to pin the clinic is drawn from OpenStreetMap, whose servers see the map area being viewed, as with any web map.

Every request is checked against the signed-in account by the database, so what you may read is decided by the server and not by the app on your phone.

In the iOS and Android apps your sign-in is stored in the device keychain (the iOS Keychain or the Android Keystore), not in ordinary storage, so it is not readable from a backup or by another app. The web version keeps it in the browser’s own storage, like any website you stay signed in to.

A staff password is held by Supabase in hashed form; we cannot read it back, and only you or the clinic owner can set or reset it.

Each prescription carries a signature that is re-checked every time it is opened, so the verification page can warn a pharmacy if the record has been altered.

Connections use HTTPS.

No system is perfect. If we ever discover that records have been exposed, we will tell the clinics and people affected.

Appointment records, visit notes and prescriptions stay while the clinic needs them for its own records and to meet its obligations as a medical provider.

Everything under your own control — your profile, health profile, family members, favourites, notifications and waitlist requests — stays until you change it or delete your account.

You can delete your account from inside the app. In the patient app it is on the Profile screen; in the clinic app it is in Settings, under Account. Deletion is immediate and cannot be undone.

Deleting removes your login, so you are signed out everywhere and the phone number can be used to register afresh. It removes your profile details — name, photo, health profile, language and notification token — together with the family members you added and their health records, your favourites, your notifications, your waitlist requests and any requests you sent to a clinic’s shop. Any upcoming appointments you booked are cancelled and the clinic is told. If you work at a clinic, your staff membership, invitations, availability and saved phrases are removed as well.

Clinics keep their own records of past visits, visit notes, prescriptions and sales under the name and number recorded at the time, as medical-record law requires. Those records no longer link to a login.

A clinic owner cannot delete their account while they still own a clinic, because that would leave the clinic without anyone in charge. Transfer ownership to another doctor first; the app will say so if you try.

If you use the same phone number for a patient account and a clinic account, they are separate accounts. Each is deleted from its own app.

A copy of what we hold about you.

Correction of anything that is wrong. Your name, photo, health profile and family members can be edited in the app; for anything else, ask us.

Deletion of your account, if you would rather not do it in the app.

Write to ahmad.zandieh@yahoo.com or call +964 750 205 8457 and we will answer within 30 days.

TabibiQ accounts are for adults, and we do not knowingly open an account for a child. A parent or guardian may add a child as a family member and book for them; the child’s name, date of birth and health record are then held under the adult’s account, are edited only by that adult, and are shown to the doctor treating the child for that visit.

This policy was last updated on 6 September 2026. If we change it in a way that affects what we collect or who sees it, we will say so in the app rather than change this page quietly.