1. Introduction

Welcome to EasyDrug ("the Application", "we", "our", or "us"). EasyDrug is a professional pharmaceutical reference tool designed exclusively for licensed pharmacists and pharmacy professionals in the Kingdom of Saudi Arabia.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your personal data. By creating an account and using EasyDrug, you agree to the practices described in this policy.

2. Who We Are

EasyDrug is operated and maintained by an independent developer based in the Kingdom of Saudi Arabia. This application is intended solely for professional (B2B) use by qualified pharmacy practitioners.

For any privacy-related inquiries, please contact us at: aboelnour1212@gmail.com

3. Information We Collect

EasyDrug collects only the minimum information necessary to provide the service. We do not collect any sensitive medical or patient data.

3.1 Account Information (collected at registration)

• Full name
• Email address

3.2 Authentication Data

User authentication is handled securely through Google Firebase Authentication. We do not store passwords. Firebase manages login sessions in accordance with Google's security standards.

3.3 Information We Do NOT Collect

We explicitly do not collect any of the following:

• Patient names, identities, or medical records
• Prescription data or dispensing history
• Financial or payment information
• Device identifiers or precise GPS location
• Browsing history outside the application

4. How We Use Your Information

We use the collected information solely for the following purposes:

• To create and manage your account
• To authenticate your identity and secure your session
• To provide access to pharmaceutical reference content within the application
• To send important service or security notifications
• To improve application performance and fix technical issues

5. Data Storage & Third-Party Services

EasyDrug relies on the following trusted third-party infrastructure providers:

5.1 Google Firebase (Authentication & Backend)

Firebase is used for secure user authentication and session management. Firebase stores your email address and name in accordance with Google's Privacy Policy. Firebase servers may be located outside the Kingdom of Saudi Arabia; however, all data transfers comply with applicable security standards.

5.2 Cloudflare R2 (Static Content Delivery)

Pharmaceutical reference content (drug data, dosing tables, clinical references) is served as static files from Cloudflare R2 storage. No personal user data is stored on R2.

5.3 Vercel (Application Hosting)

The web application is hosted on Vercel's global infrastructure. Vercel may collect standard server access logs (IP address, request timestamps) as part of normal hosting operations. These logs are not linked to your EasyDrug account.

6. Data Sharing & Disclosure

We do not sell, rent, or share your personal data with any third parties for commercial purposes. We may disclose your information only in the following limited circumstances:

• To comply with a legal obligation or court order under the laws of the Kingdom of Saudi Arabia
• To protect the rights, property, or safety of EasyDrug, its users, or the public
• With your explicit prior consent

Our third-party service providers (Firebase, Cloudflare, Vercel) access only the data necessary to perform their technical functions and are contractually bound to maintain confidentiality.

7. Data Retention

We retain your account information (name and email) for as long as your account is active. If you request account deletion, your personal data will be permanently removed from our systems within 30 days of the request.

Application usage logs may be retained for up to 90 days for security and debugging purposes, after which they are automatically deleted.

8. Your Rights

As a user of EasyDrug, you have the following rights with respect to your personal data:

• Right of Access — you may request a copy of the personal data we hold about you
• Right of Rectification — you may request correction of inaccurate personal data
• Right of Erasure — you may request deletion of your account and associated data
• Right of Objection — you may object to certain uses of your data

To exercise any of these rights, please contact us at aboelnour1212@gmail.com. We will respond to all requests within 30 days.

9. Data Security

We take the security of your personal data seriously and implement the following measures:

• All data is transmitted over encrypted HTTPS connections
• Authentication is managed by Google Firebase using industry-standard security protocols
• Application access is restricted to registered, verified pharmacy professionals
• No sensitive patient or medical data is collected or stored

While we implement appropriate technical safeguards, no system is completely immune to security risks. We encourage users to use strong, unique passwords and to log out after each session.

10. Children's Privacy

EasyDrug is a professional application intended exclusively for adult pharmacy practitioners. We do not knowingly collect any personal information from individuals under the age of 18. If we become aware that a minor has registered, we will immediately delete the associated account and data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document
• Notify registered users via the email address on file

Continued use of EasyDrug after any changes constitutes your acceptance of the updated Privacy Policy.

12. Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 and its implementing regulations. Any disputes arising under this policy shall be subject to the jurisdiction of the competent courts in the Kingdom of Saudi Arabia.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: