Legal
Privacy Policy
In effect from July 29, 2026Last updated July 29, 2026
This policy explains, in plain language, what Chat Docto does with your personal and health data — what we collect, why, who sees it, how long we keep it and how you get it back or get it erased.
Jump to a section
1.Who is responsible for your data
Chat Docto operates this platform and is the data controller for everything described here. Our data protection officer answers at [email protected]; for anything else about your data, [email protected] reaches the same team.
Each doctor or clinic you book with is a separate controller for the medical record they keep about you. This policy covers our half; their own duties as practitioners cover theirs.
2.What we collect
We ask for as little as a booking can work with, and we tell you what each field is for at the moment we ask.
| What | Examples | Where it comes from |
|---|---|---|
| Identity | First and last name, the family members you book for | You |
| Contact | Email, phone number, preferred language | You |
| Booking | Doctor, date and time, the reason you typed for the visit | You |
| Account | Password (hashed, never readable), sign-in method, sessions | You and your device |
| Sina | The symptoms you describe to the assistant | You |
| Technical | IP address, device and browser type, pages viewed, error logs | Your device, automatically |
The reason you type for a visit and anything you tell Sina are health data — the most protected category there is. We treat them accordingly, and the section below is about them specifically.
3.Why we use it
| Purpose | Legal basis |
|---|---|
| Creating and running your account | Performance of our agreement with you |
| Sending a booking request to a practice and confirming it | Performance of our agreement with you |
| Reminders and messages about a visit you booked | Performance of our agreement with you |
| Matching your symptoms to a specialty through Sina | Your explicit consent, given when you describe them |
| Keeping the service secure and preventing abuse | Our legitimate interest in a safe platform |
| Counting usage so we know what to fix | Our legitimate interest, on aggregated data |
| Answering a complaint or a legal request | Compliance with a legal obligation |
We do not build advertising profiles, we do not run behavioural ad networks on this site, and no advertiser is ever told what you searched for.
4.Sina and your symptoms
When you describe symptoms to Sina, that text is processed to suggest a specialty and nearby practitioners. It is attached to your account only if you are signed in, and it is never shown to a doctor unless you send it yourself as the reason for a visit.
Sina is not a diagnosis
Sina points you at the right kind of doctor. It does not examine you, it does not read your file and it cannot tell you what you have. A practitioner does that.
You can clear your conversations from your account at any time, and doing so removes them from our systems within thirty days.
5.Who can see it
- You, in your account, at any time.
- The practice you booked with — the doctor and the staff who run their calendar see your name, contact details and the reason you gave. Nothing from any other booking.
- Our engineers, only when a named person needs access to fix a specific incident, and every access is logged.
- Service providers who host, send email and text messages for us, bound by contract and never allowed to use your data for their own purposes.
We never sell your data and we never share it with an insurer, an employer or a data broker. If a court or a lawful authority in Tunisia compels disclosure, we comply with the narrowest response the request permits and tell you unless we are forbidden from doing so.
Our servers and providers may sit outside Tunisia. Where they do, the transfer is covered by contractual guarantees that keep the protection described here attached to the data.
6.How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | As long as the account exists, then 30 days |
| Booking history | 3 years after the visit, for proof and disputes |
| Sina conversations | 12 months, or until you clear them |
| Technical and security logs | 12 months |
| Invoices and accounting records | 10 years, as Tunisian law requires |
The medical file your doctor keeps is theirs, under the retention rules that apply to practitioners. Deleting your Chat Docto account does not erase it — ask the practice directly.
7.Your rights
- See everything we hold about you, and get a copy.
- Correct anything that is wrong — most of it you can edit yourself.
- Delete your account and the data attached to it.
- Export your data in a portable, machine-readable file.
- Object to a use based on our legitimate interest, and withdraw a consent you gave, at any time and without giving a reason.
- Complain to Instance Nationale de Protection des Données à Caractère Personnel (INPDP), whether or not you wrote to us first.
Write to [email protected] and we answer within thirty days. We will ask you to prove who you are first — the alternative is handing your health data to whoever asks for it.
9.How we protect it
Everything travels over encrypted connections and is stored encrypted at rest. Passwords are hashed, never stored in a readable form — not even we can read yours. Access to production data is limited to named engineers, logged, and reviewed.
If a breach ever puts your data at real risk, we notify Instance Nationale de Protection des Données à Caractère Personnel (INPDP) and we tell you directly. No quiet fixes.
10.Children and family members
An account belongs to an adult. You may book for a child or a relative by adding them as a family member, and you are responsible for having the right to share their information with the practice.
A minor's data is only ever processed through the account of the adult who added them.
11.Changes and how to reach us
When this policy changes in a way that matters, we tell you in the product before the new version takes effect — a new date at the top is not, on its own, notice. The Terms of Use sit alongside this document.
Questions: [email protected]. Data protection officer: [email protected]. Anything else: [email protected].
Chat Docto is a booking platform, not a healthcare provider. Your care — and the medical record that comes with it — belongs to you and the practitioner you chose.