Last updated: 28 October 2026
This Privacy Policy describes how Naghamy Health LLC ("we", "us") handles personal data across our products: Aegis EMR, MediVoice, Telehealth, QueueCare, AI Prescriptions, Clinical Risk Calculators, and the Drug Interaction Checker.
1. Data We Process
- Account data: name, email address, encrypted password.
- Clinical data: when you use clinic or hospital features, clinical records (patient names, transcripts, diagnoses, reports) are stored in an isolated per-tenant database at your instruction. Solo or standalone use may retain no clinical data.
- Payment data: processed by our payment processors (Stripe, Paymob, PayPal). We do not store card numbers.
2. Audio Processing (MediVoice)
MediVoice uses a temporary audio upload. Final transcription currently uses AssemblyAI through OpenRouter, with Groq for live preview and fallback; a practice-specific provider can override the default. Temporary uploads are removed when request processing ends. This local cleanup does not guarantee zero retention by AI providers.
3. Sub-processors
We use the following sub-processors to deliver our services:
- Hostinger International (EU) — infrastructure hosting
- OpenRouter and AssemblyAI — final audio transcription routed through OpenRouter using an AssemblyAI model. Processing may involve the United States; EU hosting is not a guarantee of processing location or provider retention.
- Anthropic (United States) — AI text structuring for MediVoice transcripts
- Groq (United States) — audio transcription and AI processing, including fallback text structuring for MediVoice transcripts
- Stripe, Paymob, PayPal — payment processing (varies by product)
Clinical-record storage in the European Union is separate from AI processing. MediVoice sends audio to AssemblyAI through OpenRouter for final transcription, and to Groq for preview or fallback. Transcript structuring uses Anthropic with Groq as fallback, unless a practice configures another provider. These services involve US providers and cross-border processing; EU record hosting does not mean audio and text stay in Europe. Provider retention depends on the service and agreement; we do not promise zero retention by third parties.
4. Data Retention
Retention varies by product and data type. MediVoice applies daily cleanup to saved encounters, reports, diagnoses and suggestions, using a per-practice setting with a 90-day default. This is not a universal 90-day deletion rule for Aegis EMR, prescriptions, Telehealth, accounts or backups. Contact the privacy team to confirm the retention and deletion arrangements for your service.
5. Account Deletion
You can request account or data deletion at [email protected]. The team must confirm the scope, timing, legal retention requirements and treatment of backup copies for the affected product. We do not promise immediate deletion from every live system or backup.
6. Your Rights
Depending on your jurisdiction (including Egypt's PDPL, Law 151 of 2020), you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact [email protected].
7. Security
Saved clinical records are hosted in the European Union; AI processing is described separately above. Per-tenant database isolation is enforced. Access is session-authenticated with tenant scoping on every query. Encrypted backups are maintained with a documented restore process.