Privacy and Data Protection Policy

This policy explains how Dawajo collects, uses, stores and protects personal data when you use the platform.

It applies to the website, the app and all the platform's services, and forms an integral part of the Terms and Conditions.

Data you give us:

• Account data: your full name, email, phone number, and password, stored encrypted.
• Professional data: your workplace and university if you enter them, and profile photo if you add one.
• Pharmacy data: the name, the owner's or manager's name, the licence number, the city, area, address and map location, the phone, the number of staff, and team members.
• Payment data: the plan, amount, payment method, transfer reference and date, and the proof-of-payment image.
• What you send: price and missing-product reports, barcode suggestions, adverse-reaction reports, support messages, and questions to the AI assistant.

Data collected automatically:

• The searches you make, their results and their time.
• The features you use, and how often.
• Device and session data: your device and browser type, whether you use the installed app, visit times, and a session identifier.
• Technical data needed to run and secure the platform, such as error logs.

Data from others: if you signed up through an invitation link, we know who invited you.

We do not collect bank card details, and do not ask for any data identifying patients.

We use data to:

• create and manage your account and verify your professional standing;
• provide and personalise the service and remember your preferences;
• review payments, activate subscriptions and issue receipts;
• send notices about your account and subscription, and answer support requests;
• improve the medicine database and search, for example by adding products people search for and cannot find, and correcting prices;
• grant rewards and run the referral programme;
• protect the platform and prevent abuse and misuse;
• produce internal statistics and analysis to develop the platform;
• comply with legal obligations.

We may use usage data in aggregated form that does not identify you, for research, development and statistics, and do not publish the names of users or pharmacies when doing so.

By creating an account or using the platform, you expressly consent to the collection, processing, storage and use of your data under this policy.

You may withdraw your consent by deleting your account from Account settings, which ends your ability to use the platform.

Authorised Dawajo administrators, as far as their work requires. Administrators receive internal alerts, including through Telegram, with the names of new signups, payments, reports, and a summary of searches and who made them.

The service providers we rely on to run the platform, such as hosting, database, storage, authentication, AI services, and email and message delivery, only as far as needed to provide the service.

Your pharmacy's team members, within the shared work data the pharmacy workspace makes available.

The person who invited you, when the invitation succeeds; they see only your first name.

Official or judicial authorities, where the law or a court order requires it, or to protect our rights, our users or public safety.

Whoever the platform is transferred to, in a transfer or merger, on the same terms.

We do not sell your data, or share it for advertising.

Data may be processed or stored on service providers' servers outside the Hashemite Kingdom of Jordan, with appropriate safeguards.

We use cookies and the browser's local storage for essential purposes, including:

• keeping you signed in;
• remembering the invitation link you arrived through, for 30 days;
• remembering your preferences and choices, such as hiding the install suggestion and your agreement to the terms;
• running the app offline from saved copies of some pages.

We use tools that measure visits and page performance, and do not use advertising trackers.

You can clear cookies and storage in your browser's settings; some features may then stop working, or you may be asked to sign in again.

We keep account data while the account exists.

We keep payment records, receipts and proofs of payment for as long as financial and legal rules require.

When an account is deleted, we delete its data or unlink it from you, except what the law requires us to keep, such as payment records, or what we need to resolve a dispute or prevent abuse.

We may keep aggregated statistics that do not identify you without time limit.

We apply reasonable administrative and technical measures, including encrypted connections, limiting each user to their own data, keeping proofs of payment in private storage opened only by temporary links, and logging administrative actions.

No method of transmission or storage over the internet is completely secure, and we do not guarantee absolute security of data.

To the fullest extent the law allows, we are not liable for any loss or unauthorised access caused by circumstances beyond our reasonable control, such as cyberattacks, service-provider failures, or a user's failure to protect their password.

You have the right to:

• view and edit your data on your account page;
• ask for a copy of your data;
• ask for inaccurate data to be corrected;
• delete your account yourself from Account settings, or ask us to;
• object to a particular use of your data.

Send requests to Dawajohealth@gmail.com from the email registered to your account; we answer within a reasonable time not exceeding 30 days, and may ask for proof of identity first.

The platform is designed for professional use without needing data that identifies patients. Do not enter a patient's name, national number, phone or any identifying data in search, the AI assistant, reports or support messages.

If you do enter such data, you are responsible for obtaining the necessary consent and for complying with the law.

The platform is not intended for anyone under 18; we do not knowingly collect their data, and delete it if we learn of it.

We may change this policy at any time, and will tell you about material changes in the platform or by email, and may ask for your agreement.

Continuing to use the platform after a change is published means you accept it.

Questions or requests about your data: Dawajohealth@gmail.com.