Privacy Policy.

MediGrow ("MediGrow", "we", "us", "our") provides a clinic growth and operations platform used by healthcare clinics in the UAE and globally. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

This policy applies to our website, dashboard, Mary AI assistant, WhatsApp and Instagram integrations, and any related services (collectively, the "Service").

Account & clinic information. Name, email, phone, clinic name, role, branch information, billing details, and any data you provide when signing up or configuring your account.

Patient inquiries. Messages, attachments, and contact details that patients send to your connected WhatsApp numbers, Instagram DMs, website forms, and other channels you connect.

Usage data. Logs, device and browser data, IP address, pages visited, features used, response times, and analytics events.

Cookies & similar technologies. Session cookies, preference cookies, and basic analytics used to operate and improve the Service.

We use the information we collect to:

• Provide, maintain and improve the Service.
• Route, assign, and track patient conversations on your behalf.
• Power Mary AI responses, follow-ups, and reminders under your configured rules.
• Send service notifications, billing communications, and product updates.
• Detect, investigate and prevent abuse, fraud, and security incidents.
• Comply with legal obligations.

When you connect the Official WhatsApp Business API, messages sent to and from your number flow through Meta and our infrastructure so we can deliver them to your team inbox and to automations you configure.

Our use of Meta data is also governed by Meta's developer terms and the WhatsApp Business Solution Terms. We do not sell WhatsApp message content, and we do not use patient message content to train third-party general-purpose AI models.

Patient data is stored on managed cloud infrastructure with encryption in transit (TLS) and at rest. We design the Service to be compatible with UAE healthcare communication requirements, including the use of the Official WhatsApp Business API for patient messaging.

Your clinic remains the data controller for patient information. MediGrow acts as a data processor on your behalf.

We share information only with providers needed to operate the Service, including:

• Meta (WhatsApp Business API, Instagram messaging).
• AI model providers used to power Mary AI responses.
• Cloud hosting, database, and email delivery providers.
• Payment processors for subscriptions and setup fees.
• Regulators, courts or law enforcement when legally required.

We do not sell personal information.

We retain account and conversation data for as long as your account is active and as needed to provide the Service. After cancellation, data is retained for a limited period to allow export and recovery, then deleted or anonymized, subject to legal retention obligations.

Subject to applicable law, you may request to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Export your data in a portable format.

To exercise these rights, contact support@medigrow.app.

We use a minimal set of cookies required to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser settings.

The Service is intended for clinic staff and is not directed to children under 16. We do not knowingly collect personal information from children. Patient minors who message your clinic are handled under your clinic's policies as the data controller.

We may update this Privacy Policy from time to time. Material changes will be communicated through the dashboard or by email. Continued use of the Service after changes take effect constitutes acceptance.

Questions? Email support@medigrow.app or write to MediGrow, Dubai, UAE.