Privacy policy
This is a draft under legal review and may change before it is final.
In short: Laeeto is free, does not sell your data and has no ads. Volunteers and pharmacies see the medicine details and an approximate area only. They never see your name, phone number, prescription photo or voice note.
Who we are
Laeeto (لقيته) and this website are operated by the following company, which is the controller of your data:
Softure UG (haftungsbeschränkt)Scharfenberger Str. 28
13505 Berlin, Germany
Amtsgericht Charlottenburg, HRB 275859 B
support@laeeto.app
Write to this address for anything about your data.
Laeeto is a free community app that helps people in Egypt find medicines that are in short supply. Nothing is bought, sold or paid for in the app.
What we collect and why
| Data | Purpose | Who sees it |
|---|---|---|
| Phone number | One-time-code login; critical alerts when push notifications are unavailable | Only our systems. Stored encrypted (AES-256-GCM) with a keyed hash (HMAC) for lookup. Never shown to volunteers, pharmacies or in the admin panel |
| Display name (optional) | In-app greeting; your community-service certificate if you request one | You; on the certificate only if you issue it |
| Governorate and city | Routing your request to nearby volunteers and pharmacies | Volunteers and pharmacies see the city only |
| Medicine request: name, form, strength, quantity, urgency | Finding the medicine | Nearby volunteers and pharmacies see only these fields, nothing that identifies you |
| Prescription photo or voice note (optional) | Reading the medicine name if you did not type it | You and admins only. Never shown to volunteers or pharmacies. Images are re-encoded and stripped of location metadata (EXIF/GPS) |
| Medicine box photo (optional, for unknown barcodes) | Adding the medicine to the catalogue | A verified pharmacist in your governorate confirms it without knowing who sent it |
| Current location (volunteers only, optional) | Sorting pharmacies nearest first during a search task | Sent with that request only and used for sorting; not stored, never shown. A request's location is its city centre, not your position |
| Pharmacy check results (volunteers) | Updating the request; your private impact count | The patient sees the pharmacy and the result, not your name |
| Pharmacist data: licence number, licence photo, pharmacy details | Verifying the pharmacy | Admins only. The pharmacy's name, address and business phone are shown to a patient when the medicine is found there |
| Thank-you messages | Delivering your thanks | The helpers. Screened automatically to prevent sale offers or exchanging numbers |
| Push token and a random device id | Delivering notifications; binding your login to the device | Our systems only. Deleted on logout or account deletion |
| Notification settings | Sending only what you want | You |
| Technical data: server logs (no phone numbers or request contents), crash reports (no personal data) | Running the service, preventing abuse, fixing bugs | Our team and service providers |
We do not collect contacts, photos other than the ones you pick, background location, payment data, or any advertising or tracking identifiers.
AI prescription reading
If you send a prescription photo and explicitly consent for that request, the photo is sent to an AI service (Anthropic) that proposes the medicine fields, which you then review and confirm. Without your consent the photo is not sent. Voice notes are never sent to the AI.
Notifications and messages
- Push notifications are delivered through Expo, Google (Firebase Cloud Messaging) and Apple. Their text contains only the medicine and pharmacy name.
- Login codes are sent by WhatsApp (Meta WhatsApp Business) or SMS.
- If push is not available on your phone, "found", "hold ending" and "request expiring" alerts may be sent by WhatsApp or SMS.
Service providers
Providers process data on our behalf and only as needed: hosting and file storage, Expo, Google and Apple for push, Meta for WhatsApp, an SMS provider, Anthropic for prescription reading with your consent, and Sentry for crash reports. We do not sell your data or share it for advertising.
Aggregated data
The shortage radar and public reports show aggregated counts per governorate, contain no personal data, and hide any group with fewer than 5 requests.
Retention
- Prescription photos and voice notes: deleted 30 days after the request closes (received, expired or cancelled). Uploads never attached to a request: after 1 day.
- Closed requests: only the medicine fields and timeline are kept for statistics; the link to your account is removed after 1 year.
- A rejected pharmacist's licence photo: deleted after 30 days.
- Push token: until logout, account deletion, or the device stops accepting notifications.
- Login sessions: 30 days after last use.
Your rights
You can view and edit your data in the app, turn any kind of notification off, and sign out of any device.
You can delete your account in the app (حسابي ← امسح حسابي, "My account → Delete my account", confirmed with a code): we erase your personal data, revoke all sessions and push tokens, and delete your files. We may keep limited records where the law requires it. Details, and how to delete without the app: Delete your account.
For anything else (a copy of your data, objection, correction): support@laeeto.app
Security
All traffic is encrypted (HTTPS). Login tokens are kept in the phone's secure storage (Android Keystore / iOS Keychain). Screenshots are blocked on screens that show a prescription or licence photo.
Children
The app is not directed at children under 18; a family member can request medicine on their behalf.
This website
laeeto.app uses no cookies, no analytics or tracking, and loads nothing from third parties; even the fonts are self-hosted. The web server processes your IP address and browser data only to deliver the pages and protect the site.
Changes
If we change this policy materially, we will tell you in the app before it takes effect.