This draft reflects the current app features. The operator, privacy contact, storage locations and retention periods still require confirmation. It is not an effective final policy until these details are confirmed.
1. About this policy
This draft covers the Macau Family Doctor app and this website. The app supports appointments, home service arrangements, family profiles, visit records and communication. The operator’s legal name and contact address will be published when confirmed. Healthcare providers may also handle medical records independently as part of their clinical responsibilities.
2. Information collected
The information involved depends on your role, the features you use and what you provide.
| Category | Details and purpose |
|---|---|
| Account & contact details | Phone number, name, gender, birth year, address and emergency contact details for registration, communication and service arrangements. |
| Health & family information | Health notes and patient or family profiles you provide, appointments and visit records to support care and follow-up. |
| Messages & service information | Doctor conversations, ratings, feedback, complaints and reports, plus payment method and bank-transfer references. |
| Doctor information | Professional profiles, qualification documents, clinic licences, service settings and photographs. Selected professional details and photos appear in doctor listings. |
The current payment feature records cash or bank transfers rather than charging a credit card. Do not include passwords, verification codes or full payment credentials in feedback or support messages.
3. Use and sharing
The app uses the information you provide to verify accounts, manage appointments, arrange services, support patient–doctor communication, display visit records and handle support cases. Relevant doctors and authorised platform staff handle the information needed for their functions according to access permissions.
The current project uses Supabase for authentication, database and file storage, and Twilio for phone verification messages. The final policy must confirm production providers, processing locations, cross-border arrangements and contractual safeguards.
Public doctor profiles display selected professional information and photographs. Private patient information, visit records and doctor qualification files are not published as website content. Any legally required disclosure arrangements must be specified in the final policy.
4. Security and retention
The current app design includes secure storage of session credentials, database access permissions and time-limited links for private documents. These measures cannot eliminate every security risk.
The operator must confirm retention periods for accounts, appointments, medical records, messages, support cases and backups. The final policy must specify periods or decision criteria, deletion procedures and information that must be retained for clinical or other applicable obligations.
5. Your choices and requests
You can update personal and family profiles in the app and adjust language, text size and supported notification preferences. Use the support channels to request access, correction or deletion, withdraw consent or request account deletion. How a request is handled may depend on the information and applicable requirements.
Uninstalling the app does not delete accounts or records held on the server. A complete account-deletion process is not yet verified in the current project. Identity checks, completion times and any records that must be retained need confirmation before launch.
If you enter information for family members or others, ensure you have appropriate authority. Guardian authorisation and arrangements for children’s data must be confirmed in the final policy.
6. Website and policy updates
The website pages contain no registration, payment or health-data collection forms, and no added analytics or advertising scripts. The hosting platform may process network requests, IP addresses or access logs; its processing and retention arrangements must be confirmed in the final policy.
The date on this page will change when the policy is updated. How material changes are communicated must be confirmed in the final policy.
7. Contact
A dedicated privacy email and operator details will be published once confirmed. Existing users can select the Privacy category under Complaints & reports in the app and keep their case reference.