Privacy policy
Last updated:
This policy explains what data the DawaScout app processes, why, and who can see it. The texts are available in Arabic and English.
1. Who we are and how to contact us
DawaScout helps patients in Egypt send a medicine request to nearby verified pharmacies, compare their replies and choose a pharmacy themselves. DawaScout is not a pharmacy, does not sell medicine and does not give diagnosis or treatment advice.
Operated by DawaScout, Minya, Egypt.
Privacy contact: support@dawascout.com
2. Data we collect and why
- Account data: email address and display name, an optional mobile number and an optional profile photo. We use them to create your account, sign you in and run reservations. If you sign up with Google, we receive your name and email address from Google.
- Request contents: the medicine names you type, a prescription photo if you attach one, and any notes you add, so the request can be sent to nearby pharmacies.
- Request location: your device location or a point you pick on the map (see section 3).
- Pharmacy data: for pharmacy accounts, the pharmacy name, business details, phone number, location and staff details, used to review, verify and show the pharmacy to patients.
- Replies, reservations and ratings: pharmacy replies (availability, price and any alternatives entered by pharmacy staff), reservation status, and ratings after a completed order.
- Notifications: your device's push token and your in-app notification inbox.
- Analytics and crash data: see section 5.
3. Location
You can share your device location or pick a point on the map; location permission is not required. We use the request location to find nearby verified pharmacies and show distance. Pharmacies do not see your exact coordinates, only the distance. Location is not used for advertising.
4. Prescriptions
- Prescription photos are compressed before upload, and files larger than 1 MB are rejected.
- Photos are kept in private, non-public storage and are shown only through signed links that expire within 5 minutes.
- They can be viewed only by you, staff of the pharmacies your request was sent to, the pharmacy you choose during the reservation, and authorized administrators.
- After a request is completed, cancelled or expired, its prescription photo is queued for deletion after a 24-hour grace period, and an automatic hourly cleanup job deletes due photos from storage.
5. Analytics and crash reports
We use Firebase Analytics and Firebase Crashlytics for all users to understand app reliability, fix crashes and improve the app. Recorded events are anonymous and never include medicine names, prescriptions, notes, phone numbers, addresses or exact location. Advertising ID collection is disabled in the app.
6. Push notifications
We send notifications through Firebase Cloud Messaging to alert you about replies and reservation changes. Notifications are alerts only and do not contain medicine names, your personal details or reservation codes; the app shows the current status when opened. You can delete notifications from your inbox and turn notifications off in your device settings.
7. Who we share data with
- Nearby pharmacies your request is sent to: see the request contents (medicines and any prescription photo), the distance and, after at least three ratings, your average rating, without your name or phone number.
- The pharmacy you choose: sees your name and phone number (if you added one) only during an active reservation, to contact you about the order.
- Administrators: authorized DawaScout staff, to review pharmacies, handle disputes and protect the service.
- Service providers: listed in section 8, only to run the service.
We do not sell your data, we show no ads, and there are no payments in the app.
8. Service providers
- Supabase: database, authentication and storage, in the EU (Frankfurt) region.
- Firebase (Google): push notifications (Cloud Messaging), analytics (Analytics) and crash reports (Crashlytics).
- Brevo: sends account emails (such as email confirmation and password reset) from no-reply@dawascout.com.
- Google Sign-In: optional.
9. Retention
- Prescription photos are deleted as described in section 4.
- A request that is not reserved expires after 24 hours.
- We keep account data and request and reservation history while your account is active, or until you delete your account (see Delete account).
- Invalid push tokens are deactivated.
10. Security
We apply database-level access rules that decide who can see each item, keep prescriptions and profile photos in private storage served through short-lived links, and never put server keys in the app. No system is perfectly secure, so please protect your password.
11. Your rights
You can view and edit your details from the profile screen in the app.
Account deletion: you can permanently delete your account and data yourself in the app: Settings → Profile → Delete account. See what is deleted and what is kept on the account deletion page. If you cannot access the app, or yours is a pharmacy account, email support@dawascout.com from the address registered to your account.
To request a copy of your data or a correction, email support@dawascout.com from the address registered to your account.
12. Children
DawaScout can be used by people of any age. We recommend that children use the app with the knowledge of a parent or guardian. We collect only the same limited data described above from every user and never use it for advertising. A parent or guardian can delete a child's account in the app or by emailing support@dawascout.com.
13. Changes to this policy
We may update this policy from time to time; the date of the latest update appears at the top of this page.
14. Contact
For any privacy question: support@dawascout.com