Privacy & medical data
Last updated: 2026-07-20
You are sending us the most sensitive data there is: a medical report. This page tells you exactly what happens to it. If anything here is unclear, do not upload anything — call us instead.
Who is responsible
A&K Worldwide Enterprises FZCO, DWTCA Free Zone, Dubai, UAE — hello@pinkdolphin.app
What we collect
- Medical documents you upload (doctor's letters, scans, lab results)
- Case details: the procedure, who the patient is, urgency
- Contact details: phone number or email address
- Payment status (never your card number — that stays with the payment provider)
Why we may process health data
Health data is special-category data. We process it only on your explicit consent, which you give when you tick the box before uploading. You can withdraw it at any time by writing to hello@pinkdolphin.app — we then delete your case.
Who sees your medical documents
- Our medical coordination team — to understand and route your case.
- Only the hospitals you approve — so they can quote a fixed price. They never see your passport or payment data.
- An AI system (Anthropic Claude) may help structure your report for the team. It is used as a triage aid; a human always reviews the result. Anthropic does not train on this data.
We never sell your data. We never share it with advertisers.
Where it is stored
Encrypted in transit and at rest with Supabase (EU region). Documents live in a private bucket that is not publicly reachable; access is enforced per case at database level.
How long we keep it
- Case without treatment: deleted 12 months after last contact.
- Case with treatment: kept as long as legally required, then deleted.
- You can request deletion at any time — see below.
Your rights
Access, correction, deletion, restriction, portability, objection, and withdrawal of consent. Write to hello@pinkdolphin.app — we answer within 30 days and delete on request unless the law requires us to keep a record.