Privacy Policy

Last updated: February 9, 2026

Clinfly ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our mobile application and website.

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and authentication data when you sign in with Apple.
• Health Information: Medical preferences, treatment interests, and consultation details you provide voluntarily.
• Communication Data: Messages, images, and documents shared through our in-app chat.
• Device Information: Device type, operating system, and push notification tokens for delivering notifications.
• Usage Data: App usage patterns, feature interactions, and crash reports to improve our service.

2. How We Use Your Information

• Connect you with verified clinics and healthcare providers in Turkey
• Facilitate consultations, quotes, and appointment bookings
• Send you relevant notifications about your appointments and messages
• Improve our app and services
• Provide customer support

3. Data Storage and Security

Your data is stored securely using Google Firebase infrastructure. We use industry-standard encryption for data in transit and at rest. Chat messages and uploaded files are stored in Firebase Firestore and Firebase Storage with access controlled by authentication rules.

4. Data Sharing

We share your information only with:

• Partner Clinics: Only the information necessary to facilitate your consultation and treatment.
• Service Providers: Firebase (Google) for infrastructure, Apple for authentication.

We do not sell your personal information to third parties.

5. Tracking & Analytics

We use Firebase Analytics to understand how users interact with our app. This helps us improve features and fix issues. We do not use third-party advertising trackers or share analytics data with advertisers. We do not track you across other apps or websites. Our app respects Apple's App Tracking Transparency (ATT) framework and does not use the IDFA (Identifier for Advertisers).

6. Cookies & Local Storage

Our website may use essential cookies to ensure proper functionality. Our mobile app uses local device storage to cache preferences and improve performance. We do not use cookies for advertising or cross-site tracking purposes.

7. International Data Transfers

Clinfly operates between the United States and Turkey. Your data may be transferred to and processed in the United States (where our Firebase infrastructure is hosted) and shared with partner clinics in Turkey for treatment facilitation. By using our services, you consent to these transfers. We ensure appropriate safeguards are in place to protect your data during international transfers.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Delete your account and associated data through the app
• Opt out of push notifications at any time
• Withdraw consent for data processing
• Request a copy of your data in a portable format
• Opt out of marketing communications

9. For California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at admin@clinfly.com.

10. For European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and to object to processing. Our legal basis for processing your data is your consent (which you can withdraw at any time) and legitimate interest in providing our services. To exercise your rights, contact us at admin@clinfly.com.

11. Marketing Communications

We may send you notifications about your appointments, messages, and service updates. You can opt out of promotional communications at any time by adjusting your notification preferences in the app or by contacting us. Essential service notifications (such as appointment confirmations) will continue to be sent.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable laws. We will provide information about what data was affected and steps we are taking to address the situation.

13. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your personal data, messages, appointments, and notification history. Some data may be retained in anonymized form for analytics purposes.

14. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect information from minors.

15. Medical Disclaimer

Clinfly is a platform that connects patients with healthcare providers. We do not provide medical advice, diagnosis, or treatment. All medical decisions should be made in consultation with qualified healthcare professionals. The information provided through our app is for informational purposes only and should not be considered a substitute for professional medical advice.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email.

17. Contact Us

If you have questions about this Privacy Policy, contact us at:

• Email: admin@clinfly.com
• WhatsApp: +1 (862) 423-1244