ScrubMen App Privacy Policy
Draft for legal review. Replace every [bracketed] item before publishing.
Last updated: 2026-09-28
1. Who we are
The ScrubMen app is operated by [legal entity name] ("ScrubMen", "we"), a home healthcare provider in Cairo, Arab Republic of Egypt. Address: [address]. Privacy contact: [email protected].
The app is a work tool for ScrubMen staff only: nurses, field delegates, doctors and specialists, and office and management staff. Accounts cannot be created from the app; staff accounts are created by the company's system administrator.
2. Data the app processes
| Data | Source | Purpose |
|---|---|---|
| Staff account data: name, email, role, sign-in token | The system administrator / sign-in | Signing in and deciding which screens each role may use |
| Work data: shifts, check-in and check-out, visits, supply requests, custody items | Entered by the staff member | Carrying out and following up daily work |
| Patient and client records: names, phone numbers, addresses, diagnoses, visit reports | Entered by staff / the company's system | Providing home care and following up cases |
| Financial data: price quotations, medicine charges, payment and collection records, expenses | Entered by field delegates or office staff | Recording and following up the accounts. The app does not collect payment card data |
| Location (optional) | The phone, with the staff member's permission | Read once at the moment of shift check-in or check-out and attached to that record |
| Photos | The phone camera or photo library, when the staff member chooses | Attaching a photo to a visit report or an expense receipt |
| PDF files | The phone's file picker, when the staff member chooses | Attaching a PDF expense receipt |
We do not collect: contacts, audio, background location, the advertising ID, or any data for advertising purposes. The app contains no ads and no third-party analytics or tracking tools.
3. Permissions
- Location: optional. It is requested once; refusing it does not prevent using the app. It is read only while the app is open in front of the staff member, at the moment of shift check-in or check-out. The app does not track location in the background or at any other time.
- Camera and photo library: only when the staff member taps "Add photo" on a visit report or an expense receipt. The photo is compressed on the phone, then sent to the company's server and stored with the report or the expense. The app does not read the rest of the photo library.
- Files: only when the staff member picks a PDF receipt with the system file picker. The app reads only the selected file and sends it to the company's server, where it is stored with the expense.
- Microphone: not used (blocked).
4. Where data is stored
- All data, including attached photos and receipts, is sent only to ScrubMen's own company server (
https://scrubmen.abdelrahman-talaat.com) over an encrypted connection (HTTPS). We do not send it to any third party for analytics or advertising. - The app keeps a temporary copy on the phone (a local database and an upload queue) so it can work without internet. The sign-in token is kept in the system's secure storage (Keychain / Keystore). On sign-out, the sign-in token and the stored copy of the data are deleted; actions that have not been sent yet stay in the queue until they reach the server.
- Hosting provider: [server provider name and country].
5. Sharing
We do not sell data or share it with anyone for marketing or advertising purposes. Data may be made available to:
- authorised ScrubMen staff according to their roles (office, supervision, accounts);
- the hosting provider, as a data processor acting on our behalf;
- official authorities where there is a legal obligation.
6. Retention
Work records, medical records and financial records are kept for as long as applicable Egyptian law requires [retention period], and are then deleted or anonymised. Location data attached to a check-in is kept with the shift record, and attached receipts are kept with the expense.
7. Your rights
Under the Egyptian Personal Data Protection Law (No. 151 of 2020), you may ask to access, correct or delete your data, or object to its processing, to the extent that this does not conflict with the company's legal obligations.
Account deletion request: ask the company at [email protected] or through the office; the account is deactivated and its data that we are not legally required to keep is deleted within [30] days.
8. Security
Encrypted connections, revocable sign-in tokens (signing out revokes the token on the server), role-based permissions and secure storage on the phone. Tell the office immediately if you lose your phone so that your sign-in token can be revoked.
9. Children
The app is for adult staff only and is not directed at children.
10. Changes
We may update this policy. We publish the new version at this address with its update date, and we inform staff of any material changes.
11. Contact
[Legal entity name], [address], Cairo, Egypt. Email: [email protected]. Phone: 01110343338.