Privacy Policy

Who we are

Drsahar Pediatrics provides online pediatric consultations and health education. This policy explains what we collect, why, and the choices you have. It covers our website, the parent and doctor dashboards, and any integration you choose to enable.

Information we collect

• Account details — your name, email address and phone number, so we can identify you and contact you about bookings.
• Child profiles — the details you add about your child, used to provide care and shown to the treating doctor.
• Consultation records — appointment times, the reason for the visit you provide, and clinical notes written by your doctor.
• Payment information — processed by Stripe. We store only a payment reference, never your card number.
• Technical data — basic log data needed to keep the service secure and working.

Google user data and Google Calendar

Connecting your Google Calendar is optional. If you do not connect it, you simply receive calendar invitations by email instead, and we never access your Google account.

If you choose to connect it, we ask Google for:

• Your email address (openid, email) — only so we can show you which Google account is connected.
• Calendar events (calendar.events) — to add your Drsahar Pediatrics appointments and live sessions to your calendar, and to keep them accurate when a booking is rescheduled or cancelled.

We only create and manage the events we place there ourselves. We do not read, analyse, export or store the other events in your calendar, and we do not build any profile from your calendar.

Limited Use. Drsahar Pediatrics's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We never sell Google user data, never use it for advertising, and never allow humans to read it except where required for security, to comply with the law, or with your explicit consent.

We store the access credential Google issues so we can keep your calendar up to date without asking you again. It is held encrypted at rest, is never shared, and is deleted the moment you disconnect. You can disconnect at any time from your profile page, or revoke access directly at myaccount.google.com/permissions.

How we use your information

To provide consultations, take bookings and payments, send you confirmations and reminders, keep records your doctor needs to treat your child safely, and to secure and improve the service. We do not sell your personal information, and we do not use health information for advertising.

Who we share it with

Only with the providers that make the service work — Supabase (database and authentication), Stripe (payments), Daily.co (video calls), Resend (email) and, if you connect it, Google Calendar. Each receives only what it needs. We also disclose information where the law requires it.

Keeping and deleting data

Medical records are kept for as long as applicable healthcare regulations require. Other data is kept while your account is active. You can ask us to delete your account at any time; we will remove what we are not legally required to retain. Disconnecting Google Calendar deletes the stored Google credential immediately.

Your rights

You can access, correct, export or delete your information, withdraw consent for any optional integration, and object to certain processing. Contact us and we will respond within the period the law allows.

Security

Data is encrypted in transit and at rest. Access is restricted to the people who need it to deliver care or support the service. Video consultations use private rooms that require a per-participant token to join.

Children's privacy

Accounts are for parents and guardians. Information about a child is provided by, and remains under the control of, their parent or guardian.

Changes and contact

If this policy changes materially we will say so here and, where appropriate, notify you. Questions or requests: contact us through the details on our website.