Aya Specialist Hospital in Jeddah is the controller of your personal data in the Aya app, under the Saudi Personal Data Protection Law and its Implementing Regulations.
This policy explains what we collect through the app and why, who can see it, and your rights. Your medical file inside the hospital is also governed by the Kingdom's health regulations.
Your official medical file is kept by the hospital in its own system, and that file is the reference. The app shows your file number from it, your appointments, and the results, prescriptions, reports and invoices the hospital publishes.
What you record yourself under My tracking (treatment journey, pregnancy, medications, journal, questions for the doctor…) stays in your account. It does not enter your medical file, and hospital staff do not see it unless you show it to them.
Identity and sign-in: national ID, iqama or passport number, date of birth, the mobile number that receives your verification code, and your account ID. If you sign in with Google or Apple, your email and name as they provide them.
Official details: name, gender, nationality and marital status. They are verified through approved government services (Yakeen by Elm) once the hospital connects them; until then, reception checks them against your ID.
Your hospital file: file number, visits, lab results, radiology reports, prescriptions, reports and invoices, as published by the hospital after the doctor's review.
Family: details of children you add (name, date of birth, gender, relationship, and ID number if they have one), and sharing details with your husband (his name, the invite code and its validity, and what you chose to share).
What you record yourself, which is sensitive health data: treatment journey and stages, pregnancy follow-up and due date, medications, doses and dose log, appointments, tests and their attachments (photos or PDFs), embryo records, journal, mood, symptoms and weight, notes, and questions for your doctor.
Bookings and requests: clinic, doctor and time, who the booking is for, payment method, your notes, report and medication-refill requests, maternity-suite visit requests, and your birth plan including your companion's details (name, mobile and relationship).
Payment and insurance: the payment status and its reference number with the payment provider, never your card number. Insurance card details: insurer, membership number, class and expiry date.
Messages and ratings: your messages in the customer-service chat and your visit ratings.
Consents and preferences: the date you accepted this policy and the terms and their version, your Offers & news choice, and the app language.
Crash data: technical reports when the app crashes, such as device model, OS version and where the crash happened. They contain no health data and are not linked to your identity.
We do not collect your location or contacts, and we do not access Apple's Health app.
To serve you: verifying your identity and opening or linking your file, booking and confirming appointments, showing your results, prescriptions and reports, processing payment and checking insurance, following your treatment and reminding you of medications and appointments, sharing what you choose with your husband, and answering your questions.
To run and protect the app: syncing your data so it stays with you when you change devices, fixing crashes, preventing misuse, and carrying out your requests such as export and deletion.
To improve our service: we may prepare aggregated statistics that identify no one, such as the number of bookings per clinic or average visit ratings.
Health data you record yourself: your explicit consent before using the app, which you can withdraw at any time.
Your medical file, bookings and invoices: providing the health care you request, and the hospital's legal obligations to keep medical and financial records.
Your children's data: the guardian's consent on their behalf.
Promotional messages: a separate consent that stays off unless you turn it on yourself.
Care notifications (medications, appointments and booking updates) are part of the service. They appear on your device and may show details such as a medication name or appointment type on the lock screen. You can hide their content or turn them off in your device settings.
Offers & news is a separate consent, off by default. We send no offers or promotional news unless you turn it on; you can turn it off at any time in notification preferences, and we record when it was turned on and off. We never use your health data for marketing.
We do not sell your data. We do not show ads. We do not track you across other apps or websites. We do not share your data with your employer. We do not send it to external AI services.
Authorised hospital staff, each only as far as their work requires: reception and scheduling for file and booking details; doctors, lab, radiology and pharmacy for what concerns your care; the insurance department for your card and approvals; and customer service for chats. They use a protected staff panel with dedicated accounts, and their actions are logged.
Your sharing husband: only if you invite him yourself, and he sees what you chose, read-only.
Your insurer: what is needed to verify your coverage and request approvals, through the national health insurance platform (NPHIES), when you choose insurance.
Government bodies: identity-verification services once the hospital connects them, the Seha platform when you request sick leave, and any competent authority to which the law requires disclosure.
Service providers processing data on our behalf under written protection obligations: Google Firebase (sign-in and verification messages, database, file storage, crash reporting and app integrity checks), the licensed payment provider when you pay in the app, and Google or Apple if you sign in with them.
The app's database is on Google Cloud servers in the Dammam region, inside the Kingdom of Saudi Arabia. It covers your file, bookings, follow-up, family, sharing and chats. A copy of your data is also kept on your device.
Some supporting services may be processed on Google servers outside the Kingdom: sign-in and verification messages, crash reports, and storage of attachments (photos and PDFs).
Your acceptance of this policy is your explicit consent to this processing, with the safeguards described in the next section.
Data is encrypted in transit and at rest. Access rules prevent any account from seeing another account's data, and limit a sharing husband to read-only access to what you chose. We require a verification code to sign in and check the integrity of the app. Data on your device is protected by iOS encryption, with optional Face ID lock.
No system is perfectly secure, but we apply reasonable controls and review them continuously.
What you record yourself in the app is kept while your account exists and is deleted when you delete the account, as described in section 14.
Medical records, together with appointment, billing and report records, are kept by the hospital under health regulations for at least 10 years from the last visit.
Customer-service messages, visit ratings and service requests are kept by the hospital as part of its service records, under its own policy. Crash reports are deleted automatically after 90 days.
Accounts are for people aged 18 or over, and we do not knowingly create an account for anyone younger.
Children's data is entered by their guardian, and we process it with the guardian's consent on their behalf to provide their care and carry out the guardian's requests. The guardian exercises the child's data rights on their behalf.
A new child gets a provisional file, which is confirmed at the first visit once their documents are checked.
Under the Personal Data Protection Law, you have the right to be informed about how your data is processed, to access it and obtain a copy, to have it corrected, to request its deletion, and to withdraw your consent.
In the app you can export what you recorded from My Account → Manage Data, edit your records directly, change what your husband sees or stop sharing, and delete your account.
Official details (name, gender, nationality, marital status and date of birth) are corrected at the hospital's reception on presenting your ID. You can request a medical report or a copy of your records from Medical file or directly from the hospital.
For any other request, you can email info@ayahospital.com.sa and we will reply within 30 days. We may ask for proof of identity before acting on it.
When you delete your account from My Account → Manage Data → Delete my account, the following are deleted immediately from your device and our servers: everything you recorded under My tracking and its attachments, the links between your children and your account, shares, your consent record, and the sign-in account itself. It is removed from the provider's backups within their normal cycle. We may ask for a new verification code before deleting.
This does not delete your hospital file: the app is only unlinked from it, and the hospital keeps your medical records, appointments, invoices, requests and chats as described in section 11, because the law requires it. You can come back later with your ID number.
You withdraw consent to the processing of the health data you record by deleting your account, which stops that processing and deletes the data. Withdrawal does not affect processing that took place before it, or the medical records the hospital is legally required to keep.
Without deleting your account, you can at any time turn off Offers & news, stop sharing with your husband, or turn off notifications.
Camera: to photograph a test report when you ask to. Photos: to save what you choose to your photo library. Face ID: for the lock if you turn it on; we never access your face data. Notifications: for reminders and booking updates.
You can change any permission at any time in your device settings.
If your data is leaked or accessed without authorisation, we will notify the competent authority within 72 hours of becoming aware of it. We will notify you without delay if it is likely to harm you, together with the steps we are taking.
We may update this policy. The version date is shown at the top, and for any material change we will ask for your consent again in the app.
For any question or request about your data: info@ayahospital.com.sa, or the unified number 920012342.
For complaints: complaint@ayahospital.com.sa. If your complaint is not resolved, you have the right to raise it with the Saudi Data & AI Authority (SDAIA).
Aya Specialist Hospital — Prince Sultan Street, Al-Muhammadiyah, Jeddah, opposite Aya Mall and SACO.