Last updated: Effective date: to be confirmed
Who we are
Clinica Store (the app and this website) is operated by operator legal name and address: to be confirmed. For any privacy question, write to [email protected].
What we collect
- Your account
- Name, email address, account type (dentist, student, clinic, technician or other), the professional details you enter, and your phone number if you add one. Your password is stored only as a one-way hash; nobody at Clinica Store can read it.
- Sign in with Google
- When you continue with Google, Google confirms your email address and name to us through Firebase Authentication. We never receive your Google password.
- Delivery addresses
- The addresses you save: recipient name and phone, governorate, city, district, street, building, landmark, notes, and a map location if you set one.
- Orders
- The products, quantities and prices, coupons, the payment method, the delivery address at the time of the order, its status history, and its invoice.
- Store credit
- Cashback earned and store credit used.
- Shopping
- Your cart, favourites and recently viewed products.
- Dental tools
- The endodontic notes you choose to save (tooth and canal measurements). Do not enter patient names or other patient details in them.
- Codes
- One-time codes for verifying your email or resetting your password, stored only as hashes.
- Technical data
- Your IP address, used to limit repeated sign-in, verification and recovery attempts; the app's version and build number, sent with each request so we can tell you when an update is needed; and the request logs our hosting provider keeps.
Search terms are counted per day without being linked to you or your account.
Some things stay on your phone and are not sent to us: your language, currency and appearance settings, recent searches, and the email address you last signed in with. Your sign-in session is kept in the phone's secure storage.
What we do not do
We do not sell your data, show advertising, or use analytics or advertising trackers, and we do not track you across other apps or websites.
Why we use it
- To run your account and sign you in.
- To take, prepare and deliver your orders, and to issue invoices.
- To answer you when you contact support.
- To keep the service secure and prevent abuse.
- To meet our legal and accounting obligations.
Legal basis for each use under the applicable law: to be confirmed by legal review.
Who receives it
Only the people and services needed to provide the store:
- DigitalOcean
- hosts our servers, database and stored files.
- Google (Firebase Authentication)
- handles Sign in with Google.
- Resend
- sends our emails, such as verification and password-reset codes.
- Twilio
- sends text messages, only if we send you a code by SMS.
- Delivery
- the people delivering your order receive the recipient name, phone and address on it.
- Marketplace sellers
- a seller who ships an order to you directly sees its delivery address; other sellers see only the governorate.
We disclose data to authorities only when the law requires it. Where providers process data outside Iraq, and the safeguards used: to be confirmed by legal review.
How long we keep it
We keep your account data while your account exists. When you delete your account, we remove your name, email address, phone number, professional details, saved addresses, cart, favourites, recently viewed products, dental-tool notes and, if you signed in with Google, the link to your Google account; we deactivate the account and sign it out everywhere.
Orders, invoices, payments and store-credit records are kept, because accounting and tax law require it, for retention period: to be confirmed by legal review. They keep the delivery details recorded on each order.
Your choices and rights
- See and correct your details in the app, under Account.
- Delete your account in the app, under Account, or see Delete your account.
- Ask us for a copy of your data, or ask any question about it, at [email protected].
Rights under the applicable law, and the authority you can complain to: to be confirmed by legal review.
Security
Connections to our servers are encrypted. Passwords and one-time codes are stored only as hashes, and your session on the phone is kept in its secure storage. No system is perfectly secure; if something goes wrong that affects your data, we will tell you as the law requires.
Children
Clinica Store is meant for dental professionals and students. It is not intended for anyone under 18.
Changes
If we change this policy we will update the date above, and tell you in the app before an important change takes effect.