Privacy Policy

1. Who we are

CareFlow Technologies (“CareFlow”, “we”) develops software that connects patients with hospital workflows.

When Masarak is used by a hospital, the hospital decides which patient information is shared and why. In that role the hospital is responsible for the patient data, and CareFlow processes it only on the hospital’s instructions.

2. Information Masarak processes for hospitals

Masarak shows the stages of a hospital stay, not medical results. It processes only:

• Patient name, hospital admission reference, ward and bed
• Mobile numbers of the patient and of one companion, entered by hospital staff
• Stage status and timing, for example admission, pre-operation, recovery, discharge
• Practical actions needed from the patient or companion, such as a document, medicines to collect, or a payment to settle
• Records of messages sent and their delivery status

Masarak does not receive or store clinical values such as test results, diagnoses, prescriptions or medical notes.

3. WhatsApp messages

With the patient’s agreement, the hospital can send the patient and their companion a private link to follow the stay. These messages are sent through Meta’s WhatsApp Business Platform.

To deliver a message, Meta processes the recipient’s mobile number and the message content under WhatsApp’s own terms and privacy policy. Meta tells us whether a message was sent, delivered, read or failed, and passes on any reply, such as tapping “Stop updates”.

We use this delivery information only to make sure updates reach the right person and to stop messages when someone opts out.

4. Information from this website

If you request a demo, we collect the details you enter: name, job title, organisation, work email, phone number, country and area of interest.

We use these details only to reply to your enquiry and discuss CareFlow with your organisation. We do not sell them or use them for unrelated marketing.

5. How we use information

• To show patients and companions the current stage of the stay and any action needed from them
• To send the updates the hospital has set up, and to stop them on request
• To give the hospital operational measures such as time spent in each stage
• To keep the service secure, fix problems and keep an audit trail of who changed what, and when

We do not sell personal information, and we do not use patient information for advertising.

6. Who we share information with

We share information only with service providers we need to run the service, under agreements that require them to protect it:

• Meta (WhatsApp Business Platform), to deliver messages
• Our hosting and database providers, to run the website and store data securely

We may also disclose information where the law requires it.

7. How we protect information

Information is sent over encrypted connections. Access is limited to people who need it for their role. Messages from Meta are checked with a security signature before we accept them, and phone numbers are masked in our technical logs.

8. How long we keep information

Patient journey information is kept only for as long as the hospital needs it for the stay and for the retention period agreed with that hospital. It is then deleted or anonymised so it can be used only for statistics.

Website enquiries are kept while we are in discussion with your organisation, and deleted on request.

9. Your choices and how to request deletion

• Stop WhatsApp updates at any time by tapping “Stop updates” in the message, or by telling the hospital staff.
• Ask the hospital, as the party responsible for your patient record, to access, correct or delete your information. We will help the hospital carry out the request.
• For website enquiries, or if you cannot reach the hospital, contact us through the enquiry form on our website and ask for your data to be deleted. We will confirm once it is done.

10. Applicable law

We aim to handle personal data in line with Egypt’s Personal Data Protection Law (No. 151 of 2020) and the data-protection laws that apply to each hospital we work with.

11. Changes to this policy

We may update this policy as the service develops. The date at the top shows when it last changed.