Last updated: August 2026
Clynexa (‘we’, ‘us’) operates a clinic appointment and AI pre-screening platform. This policy explains what personal data we process, why, and the rights you have under Egypt's Personal Data Protection Law (Law No. 151 of 2020, ‘PDPL’).
Account data: your name, email, phone number, and role.
Health data: symptoms you report, AI pre-screening results, appointments, prescriptions, vitals, and clinical notes created by your care providers.
Technical data: IP address, device/browser information, and audit logs of access to your records.
To provide the service: booking appointments, running AI pre-screening, and maintaining your medical records.
To keep the platform safe and accountable: authentication, fraud prevention, and audit logging as required by law.
We do not sell your personal data. We do not use your health data for marketing.
Our AI screening provides preliminary, non-diagnostic guidance to help route you to an appropriate specialty. It is not a diagnosis and does not replace a consultation with a licensed physician.
We process your health data on the basis of your explicit consent, captured at registration and recorded with a timestamp. You may withdraw consent at any time, though some withdrawals may prevent us from providing the service.
Your health data is visible only to you and the clinic/clinicians involved in your care. We use vetted sub-processors (cloud hosting, email, SMS, and payment providers) under data-processing agreements, and never share more than necessary.
We retain clinical records for the period required by applicable medical-records regulations, and audit logs for three years. When you delete your account, we anonymize your personal identifiers while retaining de-identified clinical records where the law requires.
You have the right to access, correct, export, and delete your personal data, and to withdraw consent. You can export your data or delete your account from your profile settings, or by contacting our Data Protection Officer.
We protect your data with encryption in transit and at rest, strict access controls, service isolation, and continuous audit logging. See our Security & Compliance documentation for details.