Privacy Policy

Information we collect

Account details: your email address, and the name and phone number you add to your profile. If you sign in with Apple or Google, we receive your name and email from them.

Activity at your clinics: the clinics you open, the appointments you book, change or cancel, the services and prices involved, your reward points, redeemed rewards, referral codes and promo codes.

Payments: when you pay in the app, your card is entered into Stripe, the clinic's payment provider. We never see or store your full card number; we receive the payment amount and status.

Device information: if you allow notifications, a push token so we can send appointment reminders. We do not use advertising identifiers and we do not track you across other apps or websites.

We do not ask for or store medical records, diagnoses or treatment notes in the app. Please don't put health details in booking notes or messages.

How we use it

To run the service: sign you in, show each clinic's app, book and manage appointments, process payments, keep your points and rewards, and send confirmations and reminders.

To keep the service safe and working: preventing fraud and abuse, fixing problems, and meeting legal obligations.

We do not sell your personal information and we do not share it for targeted advertising.

Who we share it with

The clinics you use: when you open or book with a clinic, that clinic sees your name, contact details, appointments, payments and points with them. Each clinic only sees its own patients. Clinics are responsible for how they use your information under their own privacy practices.

Service providers that run the app for us, under contracts that limit their use of your data: hosting and database (Convex), payments (Stripe), email (Resend), push notifications (Expo, Apple, Google) and sign-in (Apple, Google).

Authorities, when the law requires it, or to protect the rights and safety of our users and others.

Why we may use it (legal bases)

We use your information to provide the service you signed up for (our contract with you), to meet legal obligations such as accounting rules, and for our legitimate interest in keeping the app safe and working. Where the law requires your consent, for example for push notifications, we ask for it and you can withdraw it at any time.

Where your data is processed

We are based in Switzerland. Our service providers store and process data in the United States (hosting and database, payments, push notifications, sign-in) and in the European Union (email). Where a country doesn't have data protection that Switzerland or the EU considers adequate, we rely on safeguards such as the European Commission's standard contractual clauses (as recognised in Switzerland) or the Swiss-US and EU-US Data Privacy Frameworks.

How long we keep it

We keep your account information while your account is open. Records of appointments and payments are kept as long as clinics and tax or accounting rules require, then deleted or anonymized.

Your choices and rights

You can view and edit your name and phone number in the app at any time.

You can delete your account in the app under Account → Delete account. This deletes your profile, points, rewards and sign-in. Clinics keep their own records of your past visits, without your contact details.

Under the Swiss Federal Act on Data Protection (FADP), and the EU General Data Protection Regulation (GDPR) if you are in the EU or EEA, you can ask us for access to your personal data, to correct or delete it, to receive a copy in a common format, and to object to or restrict certain uses. Residents of some US states (for example California, Virginia or Colorado) have similar rights. We won't treat you differently for using them.

To make a request, contact us by email at support@patientrewards.app. We will confirm who you are and answer within the time the law requires (usually 30 days). You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your local data protection authority.

You can turn off push notifications in your phone's settings.

Security

We protect your information with encryption in transit, access controls and trusted providers. No system is perfectly secure, so please keep access to your email and phone safe.

Children

The app is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

Changes and contact

We may update this policy. If the changes are significant, we will tell you in the app or by email before they take effect.

Questions or requests: contact Patient Rewards by email at support@patientrewards.app.