Privacy Policy
How Tashkheesa collects, stores, and protects your personal and medical data.
Last updated: 6 October 2026
Tashkheesa is a telemedicine second opinion platform operated by MedTec, part of Shifa Hospital Group, Egypt. This Privacy Policy explains how we handle your information when you use our website, mobile application, and services.
1. Information We Collect
To provide our medical second opinion services, we collect the following information:
Personal information — your name, email address, phone number, and country of residence. This is collected when you create an account.
Medical files — imaging studies (X-rays, MRIs, CT scans), laboratory results, clinical documents, and any written clinical questions you submit alongside your case.
Payment information — payment transactions are processed securely by Kashier. We do not store your credit or debit card numbers on our servers. We retain only transaction references for accounting and refund purposes.
Usage data — pages visited, features used, and device information to help us improve the platform experience.
Product analytics — our servers record a small set of usage events (for example: account created, case started, case submitted, case paid, and whether this happened on the website or in the app), linked only to an internal account ID — never your name, contact details, or any medical content — and send them to our analytics provider, PostHog. The mobile app also sends anonymous usage events that contain no medical content, and information about where the app was installed from (such as the campaign or link that led to the install from Google Play).
2. How We Use Your Information
We use your information to provide and improve our services. Specifically, we use it to:
Deliver our core service — matching you with a specialist doctor and facilitating a written second opinion on your medical case. Process payments for the services you purchase. Send you case status updates and important notifications via WhatsApp, email, and push notifications. Improve the quality, reliability, and user experience of our platform.
We do not use your personal or medical data for advertising or marketing to third parties.
3. Medical Data
We treat your medical data with the highest level of care and security.
All medical files are encrypted in transit using HTTPS (TLS 1.2+) and encrypted at rest on Cloudflare R2 storage. Access to your medical files is restricted to your assigned specialist doctor and the Tashkheesa administrative team — no one else can view them.
Your medical data is retained for the duration of your case plus 12 months after case completion for quality assurance and regulatory purposes. After that period, data is eligible for deletion.
You may request deletion of your medical data at any time from your profile, using the account deletion feature in the app, or by contacting us. We handle data deletion in line with Egypt's Personal Data Protection Law No. 151 of 2020 (PDPL).
4. Data Sharing
We share your medical files only with the specialist doctor assigned to review your case. This is essential to providing the service you requested.
We do not sell, rent, or trade your personal or medical data to any third party.
Payment processing is handled by Kashier — their own privacy policy applies to the payment data they process on our behalf. Medical files you upload are stored on Cloudflare R2 with server-side encryption, and our website and files are delivered through Cloudflare's network. Files uploaded before our move to this system were processed by Uploadcare, and some of those legacy files are still held there. The platform and its servers are hosted on Render. App notifications are sent through Expo's push notification service, which delivers them to your device via the Apple Push Notification service (APNs) on iPhone or Google's Firebase Cloud Messaging (FCM) on Android. Product analytics are processed by PostHog, which receives only the internal-ID events described in section 1. Meta receives the advertising-measurement data from the Meta Pixel on our public marketing pages described in section 6. Each provider's own privacy terms apply to the data they process on our behalf.
We may disclose information if required by law or to protect the safety of our users.
5. Your Rights
You have the right to access the personal and medical data we hold about you at any time through your patient portal. You may correct any inaccuracies in your profile information directly from your account settings.
You may request deletion of your account and all associated data. You can do this yourself from your profile, in the mobile app, or by contacting us. You can also download a copy of everything we hold about you from the same page, at any time, without asking. Under Egypt's Personal Data Protection Law No. 151 of 2020 (PDPL), you additionally have the right to withdraw consent for data processing at any time and to lodge a complaint with the competent Egyptian data protection authority.
When you delete your account we remove your profile, your files, your messages, your reports, your appointments and your notifications — from our records and from our storage. We keep an anonymous financial record of each payment and refund, with your name removed and no way to link it back to you, because Egyptian accounting rules require it.
6. Cookies
We use minimal, essential cookies for session management on the web portal. These cookies are necessary for authentication and keeping you logged in during your session.
On our public marketing pages (such as the home, services and information pages) — not on the patient portal pages where you manage your cases — we use the Meta Pixel to measure how our advertising performs. It sets a cookie in your browser and sends Meta information about your visit, such as the page viewed and browser details; it never receives medical information. Apart from this, we do not use advertising or third-party tracking cookies.
Our product analytics are recorded on our servers and set no cookies in your browser. If you dismiss the "get the app" banner on our website, your browser remembers that locally on your device for 30 days; this is never sent to us.
7. Children
Our services are not intended for individuals under 18 years of age without the consent and supervision of a parent or legal guardian. If you are under 18, a parent or guardian must create and manage the account on your behalf.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. When we make significant changes, we will notify you via email or an in-app notification. We encourage you to review this page periodically.
9. Contact Us
If you have questions about this Privacy Policy or how your data is handled, please contact us:
Email: privacy@tashkheesa.com
WhatsApp: +20 110 200 9886
Address: N Teseen, New Cairo 1, Cairo Governorate 4730131, Egypt
10. Consultants and the Tashkheesa Doctor app
Consultants who review cases use a separate app, Tashkheesa Doctor. For a consultant we hold the account details needed to run their practice on the platform: name, phone number, email, specialty and sub-specialties, medical licence number, biography and photo, the drawn signature that is stamped on delivered reports, availability settings, notification preferences, and a record of the cases reviewed and the fees earned. The app sends us the phone's push-notification token so that case offers and deadlines reach the consultant; the token is removed when they sign out. Problem reports sent from the app include the device model, operating-system version and app version, and never any patient content. Consultants see patient files only for the cases assigned to them, under the confidentiality obligations of their agreement with us and their professional duty. A consultant can pause their account from the app and can ask us to close it from Help → Close my account or through the account deletion page; closure is handled by our operations team because delivered reports form part of the patient's medical record and are retained as described in section 3.
Prevailing Language
This page is provided in both Arabic and English. In the event of any inconsistency between the two texts, the Arabic text shall prevail.