Last updated: September 2026
At Genesis Health, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal and health information when you use our platform and services.
We collect information you provide directly, including name, email, phone number, date of birth, and health-related data such as medical records, prescriptions, and vital signs from connected IoT devices. We also collect usage data to improve our services.
Your information is used to provide healthcare services, schedule appointments, process prescriptions, deliver telehealth consultations, send health reminders, and improve our platform. We never sell your personal or health data to third parties.
We employ enterprise-grade encryption (AES-256) for data at rest and in transit. Access to your health records is restricted to authorized healthcare providers involved in your care. All data is stored in HIPAA-compliant facilities with regular security audits.
You have the right to access, correct, or delete your personal data. You can control who sees your health records, revoke consent for data sharing at any time, and export your data in a portable format. Contact us to exercise these rights.
We share your data only with your explicit consent — with healthcare providers you choose, insurance companies for claims processing, and regulatory bodies when legally required. We never share data for marketing purposes without permission.
We use essential cookies to maintain your session and optional analytics cookies to improve our services. You can manage cookie preferences in your account settings. We do not use cookies for targeted advertising.
You can delete your account at any time from the Profile page. Account deletion permanently removes your personal information, medical records, appointments, prescriptions, lab results, insurance data, and all associated health information. The deletion is irreversible and cannot be recovered. Some anonymized, aggregated data may be retained for public health surveillance in accordance with applicable regulations.
We retain your personal and health data for as long as your account is active. After account deletion, data is permanently removed within 30 days. Certain records may be retained longer where required by law (e.g., medical records retention mandates, regulatory audit requirements). In such cases, retained data is anonymized or access-restricted to authorized personnel only.
Genesis Health is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. Parents or legal guardians may create accounts on behalf of minors for healthcare management, and all data is managed under guardian consent in accordance with COPPA, GDPR-K, and applicable UAE child protection laws.
Your data may be processed in the United Arab Emirates or other countries where our infrastructure operates. We ensure appropriate safeguards are in place for cross-border transfers, including Standard Contractual Clauses (SCCs) for GDPR compliance and adequacy assessments for applicable jurisdictions. Health data is stored in HIPAA-compliant facilities with regional replication for disaster recovery.
Genesis Health is designed to comply with HIPAA (US), GDPR (EU), and UAE Federal Law No. 2 of 2019 (Health Data). We support NABIDH HIE integration for Dubai Health Authority compliance and HL7 FHIR R4 for interoperability. AI-assisted features are clearly labeled as informational and do not constitute medical advice, diagnoses, or treatment recommendations.