ABHAR Privacy Policy — سياسة خصوصية أبهر

1. Who we are

ABHAR is operated by عبد الرحمن حمد الاحمدي, based in Saudi Arabia. Privacy contact: dr-abs@hotmail.com.

2. What information ABHAR processes

• Account and authentication information when accounts are enabled.
• Questions, prompts and other text submitted to Ask ABHAR or clinician-facing reasoning tools.
• Learning progress, Qbank performance, favorites, settings and synchronization data.
• Technical and security data needed to operate the service, such as request metadata, logs, crash information and abuse-prevention signals, as documented in the production audit.
• Search terms used for live evidence retrieval. ABHAR may query PubMed/NLM and Europe PMC using minimized or de-identified search terms.

Do not submit identifying patient information such as names, medical record numbers, national identifiers, phone numbers, addresses or other direct identifiers.

3. Medical and health information

ABHAR is designed for medical education, evidence reference and clinician-facing reasoning support. Users may voluntarily submit health-related text. ABHAR is not an autonomous diagnostic system and does not provide patient-specific prescriptions or individualized dosing.

4. Why we process information

To provide app functions, authenticate users, retrieve evidence, generate educational/source-backed responses, preserve learning progress, support users, prevent abuse, maintain security, and meet legal obligations.

5. AI/model providers and other processors

Production processors and third parties: Railway for hosting and infrastructure; OpenAI for AI/model processing where enabled..

AI/model providers used in production: OpenAI for supported AI/model features where enabled in production.. When enabled, text submitted to AI-powered features may be transmitted to these providers as necessary to generate a response. ABHAR should disclose this clearly in-app and obtain any consent required by applicable law or platform policy.

6. Retention

Personal data is retained only as long as necessary for service operation, security, legal obligations, and account administration.

7. Account and data deletion

Users can request deletion in the app when account creation is enabled. A web-based deletion pathway is available at https://abhar-legal-production.up.railway.app/delete-account/. Users may request account deletion from within ABHAR or through the public Delete Account page. Data is deleted or retained according to applicable legal, security, and regulatory requirements.

8. Security

ABHAR uses authenticated access, encrypted network transport, access controls, logging, and reasonable technical and organizational safeguards.

9. International transfers

Some service providers may process data outside Saudi Arabia where required to provide ABHAR services, subject to applicable safeguards and legal requirements.

10. Children and age policy

ABHAR is intended for users who satisfy the applicable minimum age requirements in their jurisdiction. Professional medical functions are intended for appropriately qualified users.

11. Your choices

You may contact us to ask about your data, request correction or deletion where applicable, or raise a privacy concern. Privacy contact: dr-abs@hotmail.com.

12. Changes

We may update this policy when our services, processors or legal obligations change. The latest version will remain available at this URL.