MetaDoc & Alkoot @ Home

1. Introduction

MetaDoc (operating as "At Home Doc") and its affiliated programs including Alkoot @ Home ("we", "our", "the Company") are committed to protecting the privacy, confidentiality, and integrity of personal and health information.

We operate in compliance with:

• Qatar Personal Data Privacy Protection Law (Law No. 13 of 2016)
• MOPH Qatar healthcare data regulations
• Applicable insurance confidentiality standards
• International healthcare data security best practices (HIPAA-aligned principles where applicable)

This Privacy Policy explains how we collect, use, store, and protect your information.

2. Scope

This policy applies to:

• MetaDoc mobile applications
• Alkoot @ Home program
• Website and patient portal
• Telemedicine platforms
• Call center interactions
• Home visit clinical services
• Lab integrations
• Pharmacy integrations
• Insurance claim integrations

3. Information We Collect

A. Personal Information

• Full name
• QID / Passport (where required)
• Date of birth
• Gender
• Address & location
• Contact details
• Insurance details (Alkoot membership number)

B. Health & Medical Information

• Medical history
• Chronic disease data
• Laboratory results
• Vital signs (including glucometer integrations)
• Prescriptions
• Physician notes
• Care navigation records
• Telemedicine recordings (where legally permitted)

C. Technical Information

• Device information
• IP address
• App usage data
• Authentication logs

4. Purpose of Data Use

We process data to:

• Deliver home medical services
• Provide teleconsultations
• Manage chronic care programs
• Coordinate lab testing & medication delivery
• Submit and manage insurance claims
• Verify insurance eligibility
• Monitor health outcomes
• Improve service quality
• Comply with legal and regulatory obligations

5. Legal Basis for Processing

Data is processed under:

• Patient consent
• Healthcare service necessity
• Insurance claim processing requirement
• Regulatory compliance
• Public health obligations where mandated

6. Data Sharing

We may share limited data with:

• Licensed physicians
• Nurses and care coordinators
• Partner laboratories
• Licensed pharmacies
• Alkoot Insurance (for claims and eligibility)
• Regulatory authorities (when legally required)

7. Data Security

We implement:

• Encrypted cloud infrastructure
• Role-based access control
• Audit logs
• Secure API integrations
• Multi-factor authentication
• Data minimization principles
• Incident response protocol

8. Data Retention

Medical records are retained as required by:

• Qatar MOPH regulations
• Insurance audit standards
• Applicable jurisdictional law

After retention period, data is securely archived or anonymized.

9. Patient Rights

Patients may:

• Request access to records
• Request correction of inaccurate data
• Withdraw consent (where legally permissible)
• Request data portability (where applicable)
• File complaints with relevant authority

10. Cross-Border Data Transfers

Where cloud hosting or group-level infrastructure is used outside Qatar, data transfer complies with:

• Qatar PDPPL safeguards
• Contractual data protection clauses
• Encryption standards

11. Children's Privacy

For minors, consent is obtained from legal guardians.

12. Amendments

Policy may be updated. Users will be notified via app.