Privacy
Last updated: 27 October 2026
Draft. This text is waiting for review by a lawyer and the company details are not complete yet.
Who we are
- Chara is a platform that helps patients in the Kurdistan Region find doctors and book appointments. In this text, "we" means the company that runs Chara: [Company legal name and registered address: to be completed].
- You can reach us at contact@characlinic.com.
What we collect
- Your account: your email address, your name and your preferred language.
- Your bookings: the doctor, the time, and any note you choose to write for the doctor.
- Family members you add: their name and their relation to you, so you can book for them.
- If you are a doctor, clinic or lab: your name, speciality, city, address, phone number, working hours, price, the position of your clinic, and the documents you or our team upload to verify you (for example your licence).
- Technical data needed to run the service, such as error logs.
Why we use it
- To let you search, book, change or cancel appointments.
- To show doctors the bookings made with them.
- To check that doctors are real and licensed before patients see them.
- To keep the service safe, prevent abuse and fix problems.
- We do not sell your data and we do not show advertising based on your data.
Your location
- If you tap "Nearest to me" or open a map, the app asks permission to use your phone's location. You can refuse and still use Chara.
- Your position is used on your phone to work out distances. It is not saved in our database.
- When you open a route on the map, your position and the clinic's position are sent to a free routing service (the OpenStreetMap community routing servers) so that it can draw the walking, driving or cycling route. The map pictures come from MapTiler. These services see your network address and the two positions. They do not receive your name or account.
- The "Start driving" button opens Google Maps. Google then handles the data under its own privacy policy.
- Doctors and our team can save the position of a clinic. This is the clinic's public position, not a personal one.
Who else handles your data
- Supabase, which hosts our database and sign-in.
- Cloudflare, which hosts this website.
- MapTiler and the OpenStreetMap community routing servers, for maps and routes, as described above.
- We choose these providers carefully and give them only what they need.
Who can see what
- A doctor can see the patients who book with that doctor, and the booking details.
- Our moderators can register doctors and see the profiles they registered. They cannot see patients or bookings.
- Our administrators and the owner can see doctor profiles and documents to verify them. For support and safety reasons they may also be able to reach other data, and we limit this to what is necessary.
- We may share data if the law requires it.
How long we keep it
We keep your account while you use Chara. You can ask us to delete your account from the app or by email. When we delete it, we remove your personal data, except what we must keep by law or for accounts and disputes, and only for as long as needed.
Your rights
- You can ask to see the data we hold about you, correct it, or delete it. Write to contact@characlinic.com. We will answer within a reasonable time.
- The rules that apply to you may depend on where you live. This text will be updated with the exact legal rights after legal review.
Children
Parents and guardians can add their children as family members and book for them. Chara is not meant for children to use alone.
Security
Data travels over encrypted connections. Access to data is limited by role. No system is perfectly safe, so please keep your password private and tell us at once if you think your account has been used by someone else.
Changes to this text
If we change this text in an important way, we will tell you in the app or on this website before the change takes effect.