Privacy Policy

Introduction

This Privacy Policy describes how "Unified Medical Identity" (UMI) collects, uses, and shares information when you use our services as a digital identity management and Single Sign-On (SSO) platform. We are committed to protecting your privacy and ensuring transparency regarding our data practices.

By using the Medical Identity service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal and Professional Information

As an Identity Provider, we collect accurate information to verify your professional identity:

• Basic Information: Full name, National ID, phone number, and email address.
• Professional Information: Syndicate registration number, medical specialty, academic degree, and current workplace.
• Verification Documents: Copies of Syndicate card, graduation certificate, or practice license (uploaded once for verification).
• Login Data: Username, encrypted password, and login logs.

Usage Information

We collect information about how you interact with connected services:

• SSO Logs: Date and time of login, and applications accessed using your Unified Medical Identity.
• Device Information: Device type, operating system, and IP address for security and fraud prevention purposes.

How We Use Your Information

• Identity Verification: To ensure you are a licensed health practitioner or registered medical student.
• Facilitating Access (SSO): To enable one-click access to hospital applications, universities, and partner medical services.
• Security and Protection: To prevent impersonation and protect your data from unauthorized access.
• Communication: To send security notifications and distinct service updates.

Data Sharing

We do not sell your personal data. We only share "Identity Data" with services that you agree to use:

Recipient	Shared Data	Purpose
Partner Medical Apps	Name, Specialty, Registration Number	Automatic account creation and access granting
Syndicates and Universities	License Status, Validity	Verifying registration validity
Legal Authorities	Log Data	Compliance with legal and security requirements

Data Storage and Security

We use state-of-the-art encryption technologies (Encryption at rest and in transit) to protect your data. Passwords are stored using strong hashing algorithms, and our employees cannot view them.

Your Rights

• Access and Correction: You can review and update your personal and professional data through your dashboard.
• Unlinking: You can manage and revoke access permissions for connected applications at any time.
• Account Deletion: You can request deletion of your digital identity, and all your data will be removed from our servers, subject to retaining legally required records for a specified period.

Contact Us