Privacy Policy

Last updated: July 2026

1. What we collect

Account data (name, phone, city), booking data (addresses, schedules), payment records, and — because physiotherapy is healthcare — clinical data your physiotherapist documents (assessments, treatment plans, session notes, pain scores). Providers additionally share verification documents (degree, license, CNIC).

2. How we use it

To operate the service: matching you with physiotherapists in your area, processing bookings and payments, maintaining your treatment history, quality monitoring and support. We do not sell personal data.

3. Health information

Clinical records are visible only to you and the physiotherapists who treat you (and, where required for quality or dispute resolution, authorised CureVista staff under confidentiality obligations). Health-record sharing links you generate are token-gated and expire.

4. Identity documents

CNIC and license documents are stored encrypted and access-gated; they are used only for verification and are never displayed publicly. Public physiotherapist profiles show professional information only — never identity numbers or document images.

5. Public profiles & reviews

Physiotherapist profiles opted in by our team appear on curevista.pk with professional details and ratings. Patient reviews shown publicly display first name only, with surname masked.

6. Retention & deletion

You may request account deletion from the app (Profile → Account deletion). Clinical and financial records are retained as required by law and legitimate dispute-resolution needs, then deleted or anonymised.

7. Security

Data is encrypted in transit; sensitive identifiers are encrypted at rest. Access is role-restricted and logged. No system is perfectly secure — report concerns to [email protected].

8. Contact

Privacy questions or requests: [email protected]. The in-app Privacy Policy governs where any difference exists between this page and the app.