Privacy policy

Last updated: 21 July 2026

1. Overview

Taafi ("Taafi", "we", "us", "our") operates a telehealth platform in Kuwait that connects patients with independent, licensed clinicians — doctors, physiotherapists, dentists, and mental health professionals — by chat, video, clinic visit, or home visit, along with lab and radiology referrals through private partners. This policy explains what information we collect when you use the Taafi website and app, why we collect it, who we share it with, and the choices you have.

By creating a Taafi account or using our services, you agree to the collection and use of information as described in this policy. If you don't agree, please don't use Taafi.

2. Information we collect

Account & identity information

When you create an account, we collect your name, email address and/or phone number, date of birth, and a password (or a one-time verification code, if you choose to sign in that way). We never see or store your password in plain text — authentication is handled by our infrastructure provider, Supabase.

Health-related information you share

When you book an appointment, we collect the specialty and channel you choose, your appointment time, and, if you provide one, a short description of your symptoms to help route you to the right specialty. This information, along with your appointment history, is shared with the clinician you book with so they can prepare for your visit.

Clinician applications

If you apply to join Taafi as a clinician, we collect your name, specialty, email, phone number, professional license details, languages, the channels you offer, any notes you provide, and your CV.

Communications

If you contact us through the contact form, WhatsApp, or email, we collect your name, email, the topic and content of your message, and any information you choose to include in it.

Usage & device information

Like most web services, we automatically receive some technical information when you use Taafi, such as your general device and browser type and how you interact with the app, so we can keep it running reliably and fix problems.

Local preferences

We store your theme (light/dark) and language preference in your browser's local storage. This stays on your device and isn't sent to our servers.

3. How we use your information

• To create and manage your account, and verify your identity when you sign in.
• To let you book, manage, and attend appointments with clinicians.
• To share the relevant appointment and health information with the clinician treating you.
• To send appointment confirmations, reminders, one-time verification codes, and service updates.
• To respond to your support requests and messages.
• To review and process clinician applications.
• To keep Taafi secure, prevent misuse, and comply with legal obligations.
• To understand how Taafi is used so we can improve it.

We do not sell your personal information, and we do not use your health information for advertising.

4. AI-assisted specialty suggestions

If you describe your symptoms when booking, that description is sent to an AI model (provided by Anthropic) solely to suggest which specialty to book — for example, a doctor, physiotherapist, dentist, or mental health clinician. This suggestion is a starting point, not a diagnosis, and is never a substitute for professional medical advice. Your clinician makes the actual clinical assessment during your visit.

5. Who we share your information with

Clinicians

When you book an appointment, the clinician you book with can see your name, email, the details of your booking, and any symptom description you provide, so they can deliver your care.

Service providers

We use a small number of service providers to operate Taafi, who process information on our behalf and are bound to only use it to provide their service to us:

• Supabase— hosts our database, authentication, and file storage (including clinician CVs and avatars).
• Meta (WhatsApp Cloud API)— delivers one-time verification codes to your WhatsApp number when you sign in by phone.
• Anthropic— processes symptom descriptions you submit to generate specialty suggestions, as described above.

Legal & safety

We may disclose information if required by law, or where we believe in good faith it's necessary to protect the rights, property, or safety of Taafi, our users, or the public.

Business transfers

If Taafi is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We'll notify you before your information becomes subject to a different privacy policy.

6. Data retention

We keep your account and appointment information for as long as your account is active, and for a reasonable period afterward to meet legal, medical record-keeping, and accounting obligations. Clinician applications that aren't approved are retained for a limited period and then deleted. You can request deletion of your account at any time (see Section 8).

7. Data security

We use industry-standard safeguards to protect your information, including encryption in transit and at rest, and access controls (row-level security) that restrict who can view your data to you, the clinicians you book with, and authorized administrators. No system is completely secure, and we can't guarantee absolute security, but we work to protect your information appropriately for its sensitivity.

8. Your rights and choices

• Access & correction: You can view and update your personal details from your profile page at any time.
• Deletion:You can permanently delete your account and associated personal data from your profile page. This action can't be undone.
• Communications: You can contact us at any time with questions about your data or to request a copy of it.

9. Children

Taafi is intended for use by adults. If a minor's care is being coordinated through Taafi, it must be done by a parent or legal guardian using their own account on the minor's behalf.

10. International data transfers

Taafi is based in Kuwait, but some of our service providers (including Supabase and Anthropic) may process or store information outside Kuwait. Where this happens, we take steps to ensure your information continues to receive an appropriate level of protection, consistent with Kuwait's Data Privacy Protection Regulation and this policy.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or through the app before they take effect. The "Last updated" date at the top of this page always reflects the current version.

12. Contact us

If you have questions about this policy or how your information is handled, reach out to us at support@taafihealth.com, via WhatsApp, or through our contact form.