Privacy

CarePoint is a demo. Do not enter real personal or medical information. Accounts and bookings can be reset or deleted at any time, and there is no self-service way to delete an account yet.

• Account details: your name, your email address, and a one-way hash of your password. The password itself is never stored.
• Appointments: the doctor, the time, and the status of each booking. CarePoint does not store medical records or notes.
• Payments: the amount, the status, and Stripe's reference for each payment. Your card number is entered on Stripe's page and never reaches our servers.
• Applications: if you register a clinic or apply as a doctor, what you submit, such as the clinic name and address, your specialty, consultation fee, and bio.

Only to run the service: signing you in, showing and managing bookings, taking payments and issuing refunds, and sending emails about your appointments and password resets. We do not sell or rent personal data, and the app shows no ads.

• Doctors see the name of the patients booked with them and the appointment times.
• Clinic administrators see the doctors at their clinic and booking and revenue totals, not patient details.
• Platform administrators review clinic and doctor applications, including the applicant's name and email.
• Anyone can see an approved doctor's public profile: name, specialty, fee, bio, and the clinic's name and address.

Stripe processes payments, Resend delivers email, and infrastructure providers host the app and its database. Each receives the data needed to do its part, for example Stripe receives payment details and Resend receives email addresses and message content.

To keep you signed in, a session token is kept in your browser's local storage, and signing out removes it. The app itself includes no advertising or analytics trackers.

Password reset links work once and expire after 30 minutes. Resetting your password signs you out everywhere.

See the contact page.