Privacy Policy

At medy, our top priority is giving you access to the best possible care. To do that, we need to collect and use some information about you, and we want to be straight with you about how we handle it.

This policy explains, in plain language, what we collect, why we collect it, who we share it with, and the choices you have. It covers our website, app, assessments, orders, and any messages you send us. medy is for adults aged 18 and over.

By using medy, you agree to this policy, so if you are not comfortable with it, please do not use our services.

medy is a Saudi technology platform. We build and run the service that connects you with licensed Saudi physicians and pharmacies, and we are responsible for the information you give us through the platform, including your account, contact, and order details.

Where we provide your details to the independent medical team, they will keep their own clinical records to be able to give you the best care.

We collect a few kinds of information, depending on how you use medy:

Some of what you share, such as your medical history, assessment answers, and consultation notes, is sensitive health data, and we treat it with extra care. We use it only to assess whether treatment is suitable for you, to coordinate your care with clinicians and pharmacies, to prescribe safely, and to follow up with you.

We ask for your explicit consent before processing it, and we never use it for advertising.

Most of it comes directly from you when you sign up, complete an assessment, place an order, or message us.

We also collect some information automatically, such as device and cookie data, and receive information from partners involved in your care, like clinicians, pharmacies, payment providers, and delivery partners.

We use your information to:

Under Saudi Arabia's Personal Data Protection Law, we rely on: your explicit consent, mainly for health data and marketing; performing the contract we have with you, for your account and orders; our legal obligations, for records we are required to keep; and our legitimate interests, for security, fraud prevention, and improving our services. Where we rely on legitimate interests, we make sure they do not override your rights.

We do not sell your personal information. We share it only where it is needed:

We use widely accepted technical and organisational safeguards, including encryption, access controls, and limiting access to those who genuinely need it. That said, no system online is completely secure, so we cannot guarantee absolute security. We also ask you to keep your login details safe and private.

Your information is stored primarily inside Saudi Arabia. Some of our service providers may process it outside the Kingdom. When that happens, we make sure appropriate safeguards are in place, in line with Saudi requirements.

We keep your information for as long as needed for the purposes described above, and for any longer period required by Saudi law, for example medical and financial records. When we no longer need it, we delete it or make it anonymous.

With your consent, we may send you updates, offers, and health tips. You can opt out at any time from your account or by contacting us. Opting out of marketing does not stop important service messages about your account or treatment.

You have the right to:

We may update this policy from time to time. When we do, we will change the 'last updated' date at the top. If we make a significant change, we will make it clear on the platform. If you keep using medy after a change, it means you accept the updated policy.

Have a question or want to make a privacy request? Email us at hello@getmedy.com and we will be happy to help.

If you are unhappy with how we have handled your information, please contact us first, and we would like the chance to put it right. You also have the right to complain to the Saudi Data and AI Authority (SDAIA).