Privacy Policy
This Privacy Policy explains how Allurion CARE (“we”, “us”, or “our”) collects, uses, stores, and shares personal information when you use our mobile applications, website, and related services (the “Service”). By using the Service, you agree to this Policy.
1. Who is responsible
Allurion CARE operates the Service for hospitals and their care teams in the Kingdom of Saudi Arabia. For privacy requests, contact privacy@allurionksa.com.
2. Information we collect
- Account information: name, email address, phone number (where provided), role (patient, doctor, hospital administrator), and authentication credentials or tokens.
- Clinical profile details associated with your hospital account, including device or treatment identifiers when provided by your hospital (for example device serial or lot number).
- Medical session data: booking details, session status, participants, and related care metadata.
- Chat content and attachments shared within medical sessions.
- Video visit technical data needed to connect calls (for example session tokens via our video provider). We do not use video call content for advertising.
- Medical files and documents uploaded or shared through the Service.
- Technical and usage data: device type, app version, IP address, log data, and crash or diagnostic information needed to operate and secure the Service.
- Notification preferences and delivery records when notifications are enabled.
3. How we use information
- Provide, operate, and improve telehealth features (sessions, chat, video, medical files, and hospital administration).
- Authenticate users, maintain account security, and prevent misuse.
- Enable hospitals and clinicians to deliver and document care according to their workflows.
- Communicate service-related messages, including security and support notices.
- Comply with legal obligations and respond to lawful requests.
4. How we share information
We do not sell personal information. We may share information only as needed to run the Service:
- With your hospital and authorized care team members as part of delivering care.
- With infrastructure and service providers who process data on our behalf (for example hosting, real-time messaging, and video connectivity providers such as Agora), under contractual safeguards.
- When required by law, regulation, or valid legal process, or to protect the rights, safety, and security of users and the Service.
5. Retention
We retain personal and medical-related information for as long as needed to provide the Service, meet hospital and legal requirements, resolve disputes, and enforce our agreements. Retention periods may vary by hospital policy and applicable law.
6. Security
We use administrative, technical, and organizational measures designed to protect personal information, including authenticated API access and role-based permissions. No method of transmission or storage is completely secure; please protect your login credentials.
7. Your rights and choices
Depending on applicable law and your hospital’s policies, you may request access, correction, or deletion of personal information, or ask questions about how your data is handled. Patients should also contact their hospital for clinical-record requests. To exercise privacy rights with us, email privacy@allurionksa.com.
8. Children
The Service is intended for use under hospital and clinician oversight. If you believe we have collected information inappropriately about a minor, contact us and we will take appropriate steps.
9. International processing
Service providers may process data in other countries. Where this occurs, we take steps consistent with applicable requirements to protect the information.
10. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Continued use of the Service after changes means you accept the updated Policy.
11. Contact
Privacy inquiries: privacy@allurionksa.com
Support: support@allurionksa.com
Allurion CARE — Kingdom of Saudi Arabia