Privacy

Effective 19 October 2026

Who we are

radeef is provided by RADEEF FOR DIGITAL SERVICES, a company in the Arab Republic of Egypt ("radeef", "we", "us"). This policy explains how we handle personal data on radeef.health, in the radeef app at app.radeef.health, on clinics’ pages at clinics.radeef.health, and in the WhatsApp, Messenger and Instagram conversations radeef answers for clinics.

You can reach us about anything in this policy at support@radeef.health.

Who controls the data

We decide how personal data is used, and are its controller, for visitors to radeef.health, for people who sign up, and for clinic staff who use the radeef app.

For patients, the clinic is the controller. When a patient books with a clinic, writes to a clinic’s WhatsApp number, Facebook Page or Instagram account, or opens an appointment link, we process that data on the clinic’s behalf and on its instructions, under our Terms. If you are a patient, please contact your clinic first; we will help the clinic answer you.

What we collect

Visitors to radeef.health. Nothing beyond what is strictly necessary until you choose in the cookie settings. With your consent we collect:

  • Analytics: the pages you view, where you click and scroll, and recordings of your visit in which anything you type is masked.
  • Error reports: technical details of a fault in the page.
  • Marketing: that you viewed the site and started signing up, sent to Meta to measure our advertising.
  • The campaign that brought you to the site, so we know which advertising works.

Clinic accounts and staff

When you sign up or are invited to a clinic, we collect your name, email address and mobile number, each confirmed with a code, your clinic’s name and time zone, and the version of our Terms and this policy you accepted. While you use the app we record your sign-ins, the actions you take (each is recorded with who took it and when), how you use the app’s screens with on-screen text masked, and error reports. Questions you ask Support, and its answers, are kept with your account.

Patients, on behalf of clinics

For a clinic, we hold a patient’s name and phone number and their appointments: the time, the doctor, the service, the site, whether it was held or booked, and when they arrived. When a patient writes to the clinic on WhatsApp, Messenger or Instagram, we hold the identifier that channel gives us (a phone number, or the id Meta assigns to the person for that Page or account), the messages exchanged with radeef’s assistant, and whether the person has asked not to receive further messages.

We do not keep photos, voice notes or files a patient sends; we do not keep the text of messages a patient exchanges directly with clinic staff, only that a message was sent; and we do not keep the chat history Meta shares when a clinic connects its WhatsApp Business app. radeef holds appointments, not medical records: please do not send medical details in a booking conversation.

How we use it

We use personal data to provide radeef: to book, hold, confirm and change appointments, to send a clinic’s messages to its patients, to sign people in and keep accounts secure, to answer support requests, to understand and improve our website and app, to measure our advertising when you have allowed it, and to meet our legal obligations.

We rely on the contract with the clinic or with you, on your consent for analytics and marketing cookies, on our legitimate interest in keeping radeef secure and working, and on legal obligations, as Egypt’s Personal Data Protection Law No. 151 of 2020 and other applicable law allow. We do not sell personal data, and we do not use patients’ data to advertise to them.

Automated reading of messages

Where a clinic’s plan includes radeef’s assistant, the text a patient types in a conversation, and the questions staff ask Support, may be sent to a language-model provider, Anthropic, PBC, so that radeef can understand the request and suggest the next step. The provider processes this text for us and does not decide anything: an appointment is made only within the clinic’s own schedule and rules, and Support carries out an action only after the staff member confirms it.

Who we share it with

We share personal data only with the service providers that run radeef for us, each bound to use it only for that service, with the clinic the data belongs to, and with public authorities where the law requires it. Our providers are:

  • Hetzner Online GmbH, Germany: the servers radeef runs on.
  • Cloudflare, Inc.: network delivery, security and encrypted backup storage.
  • Okta, Inc. (Auth0): sign-in and account verification.
  • Twilio Inc.: text messages that carry verification codes.
  • Meta Platforms, Inc. and Meta Platforms Ireland Ltd: the WhatsApp Business Platform, Messenger and Instagram messaging that carry clinics’ conversations; and, with your marketing consent, the Meta Pixel and Conversions API, which receive a page view, the start of a sign-up and, for a completed sign-up, your email address and phone number in hashed form, with your browser’s IP address and user agent.
  • Anthropic, PBC: the language model described above.
  • PostHog, Inc., in its EU region: website and app analytics.
  • Functional Software, Inc. (Sentry), in its EU region: error reports.
  • Google LLC (Google Workspace): our email.
  • Slack Technologies, LLC: notices to our team that a new clinic has signed up.

Where it is stored

radeef’s servers are in the European Union, in Germany. Some of our providers process data in the United States and other countries; where data leaves Egypt or the European Union, we rely on our providers’ contractual and technical safeguards and on what applicable law permits.

How long we keep it

  • The text of conversations on WhatsApp, Messenger, Instagram and Support: 90 days by default, or the period the clinic sets, then deleted. A record that a message was exchanged, without its text, is kept with the appointment history.
  • Appointments and the record of who did what: for as long as the clinic’s account exists. When a clinic stops using radeef, its account is suspended and its data kept until the clinic asks us to delete it or the law requires otherwise.
  • Sign-ups that are not finished: 24 hours.
  • Server logs: up to 14 days. Backups: up to 30 days.
  • Analytics and error reports: for the period set with our analytics and error-reporting providers.

Your rights, and deleting your data

You may ask to see the personal data we hold about you, to correct it, to delete it, or to object to its use, and you may withdraw your consent to cookies at any time from Cookie settings at the foot of every page on radeef.health.

To ask us to delete your data, including data received through WhatsApp, Messenger or Instagram, email support@radeef.health from the address on your account, or tell us the phone number, Page or Instagram account you wrote from. We will confirm the request and reply within 30 days, telling you what we deleted and anything we must keep, such as records a clinic is required to keep. If you are a patient, we will pass your request to your clinic, which decides on its records.

To stop receiving messages from a clinic on WhatsApp, send "stop" or "توقف" in the conversation.

Cookies

radeef.health sets one necessary cookie, rdf_consent, which remembers your cookie choice for 180 days. With your consent it also sets rdf_ft and rdf_lt, which remember the campaign that first and last brought you to the site, for 90 days; the cookies of our analytics provider; and, for marketing, the Meta Pixel’s cookie. The radeef app uses what it needs to keep you signed in and, if you allowed marketing on radeef.health, the Meta Pixel’s cookie when you finish signing up.

Security

Data travels encrypted. Access tokens and similar secrets are stored encrypted, the links that open an appointment page are stored encrypted, and access to our servers is limited to the people who run radeef. If a breach affects your data, we will tell the clinic, and you where we are the controller, without undue delay.

Requests from public authorities

We disclose personal data to a public authority only where the law requires it. We review the legality of every request, challenge a request we consider unlawful, disclose only the minimum the request requires, and keep a record of each request, our response, our legal reasoning and the people involved.

Children

radeef.health and the radeef app are for adults. A child’s appointment is made by a parent or guardian, and the clinic is responsible for it.

Changes to this policy

We will publish any change on this page with a new date, and tell clinics’ administrators by email before a significant change takes effect.

Contact

RADEEF FOR DIGITAL SERVICES, Arab Republic of Egypt. support@radeef.health