Last updated: 17 August 2026
This Privacy Policy describes how Naghamy Health LLC ("we", "us") handles personal data across our products: Aegis EMR, MediVoice, Telehealth, QueueCare, AI Prescriptions, Clinical Risk Calculators, and the Drug Interaction Checker.
1. Data We Process
- Account data: name, email address, encrypted password.
- Clinical data: when you use clinic or hospital features, clinical records (patient names, transcripts, diagnoses, reports) are stored in an isolated per-tenant database at your instruction. Solo or standalone use may retain no clinical data.
- Payment data: processed by our payment processors (Stripe, Paymob, PayPal). We do not store card numbers.
2. Audio Processing (MediVoice)
Audio submitted for transcription is processed in real time and is never stored on our servers. The audio is transcribed from a temporary upload and discarded immediately after the request completes.
3. Sub-processors
We use the following sub-processors to deliver our services:
- Hostinger International (EU — Germany and France) — infrastructure hosting
- Anthropic (United States) — AI text structuring for MediVoice transcripts
- Groq (United States) — audio transcription and AI processing, including fallback text structuring for MediVoice transcripts
- Stripe, Paymob, PayPal — payment processing (varies by product)
Clinical data and transcripts are sent to Anthropic and Groq in the United States under their standard terms. National identification images submitted to AI Prescriptions are processed by Groq for extraction. This cross-border transfer is done with your consent.
4. Data Retention
Clinical record retention is enforced per tenant and configurable, with a default of 90 days. You may configure a longer retention period if legally required in your jurisdiction. Account data is retained while your account is active.
5. Account Deletion
You may request account deletion at any time. Deletion removes your data from live systems immediately. Encrypted backup copies expire on our retention schedule (24 hourly, 30 daily, 12 weekly backups) and are permanently removed within twelve weeks.
6. Your Rights
Depending on your jurisdiction (including Egypt's PDPL, Law 151 of 2020), you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact privacy@naghamyhealth.com.
7. Security
Data is hosted in the European Union. Per-tenant database isolation is enforced. Access is session-authenticated with tenant scoping on every query. Encrypted backups are maintained with a documented restore process.