Last updated: 27 September 2026
North Shore Digital LLC operates Tamna, a telemedicine platform that connects patients in Egypt with licensed doctors for online consultations. In this policy, "Tamna", "we" and "us" refer to North Shore Digital LLC as the operator responsible for the platform. Because we handle health information, we treat your data as confidential by default. This policy explains what we collect, why we collect it, who we share it with, and the control you have over it. It applies to our website, mobile applications and dashboards for patients, doctors and authorised staff.
1. Your Account
To create and maintain an account we collect:
- Your full name and email address; your email address identifies your account.
- A mobile number, where you choose to give one. Doctors give one so our team can reach them; it is never shown to patients.
- Your password, which is stored only as a salted cryptographic hash — we never store or see it in readable form.
- Your preferred language (English or Arabic) and your dashboard theme preference.
- Your role on the platform (patient, doctor, administrator or assistant) and your account status.
- For doctors: professional credentials, licence and syndicate details, specialisation and verification documents submitted during onboarding.
You sign in with your email address and password, or with Google or Apple. If you enable two-factor authentication, we also store the encrypted secret used to generate your authentication codes.
2. Sign-in Codes and Account Security
To protect your account:
- If two-factor authentication is on, signing in also needs a code from your authenticator app or a one-time code we email to you.
- We store only a cryptographic hash of an emailed code, never the code itself, together with its expiry time and the number of attempts made.
- Codes expire automatically after a short period, and both requests and attempts are rate limited to protect you against abuse.
- Sensitive actions, such as deleting your account, may ask you to confirm your identity again.
We send these codes only for signing in and for security, never for marketing.
3. Patient and Health Data
Health information is the most sensitive data we hold. Depending on how you use the service, this may include:
- Demographic details such as date of birth, gender and blood type.
- Your emergency contact name and phone number.
- Your national ID, where you choose to submit it for identity verification.
- Medical history, allergies, current medications and chronic conditions you record in your profile.
- The symptoms, reason for visit and notes you provide when booking a consultation.
- Clinical notes, diagnoses and prescriptions written by your doctor during or after a consultation.
- Documents and images you upload, such as lab results, scans or referral letters.
Health data is only ever visible to you, to the doctor you are consulting (and any assistant that doctor has explicitly authorised), and to the small number of administrators who need it to resolve a support or safety issue. Access is enforced in the database itself, not merely in the application.
4. Appointments and Video Consultations
When you book or attend a consultation we process:
- The date, time, duration, status and type of the appointment, and the doctor involved.
- Messages, voice notes, images and documents you choose to exchange with your doctor through in-app chat.
- Ratings and reviews you choose to leave after a consultation.
Video consultations are carried out over Daily.co. The audio and video stream is encrypted in transit and is processed by Daily.co to connect you to your doctor. Tamna does not enable call recording and does not store the audio or video content of consultations. We retain limited call metadata — such as whether a call took place, when it started and how long it lasted — so that both parties have an accurate record of the visit. Messages between patients and doctors are private. Tamna staff may read a conversation only when investigating a report, a complaint, a payment dispute or a safety concern, or when the law requires it, and every such access is recorded.
5. Emergencies
Tamna offers scheduled video consultations and is not an emergency service. In a life-threatening emergency, call 123 or go to the nearest emergency department.
- Your emergency contact's name and phone number, where you add them to your profile.
Where there is an immediate risk to life or safety, we may disclose the information strictly necessary to emergency services or to your listed emergency contact.
6. Payments
Consultations are paid in full at the time of booking. To process a payment we handle:
- The consultation fee, any applicable service fee, discount codes applied, and the total amount charged.
- The transaction reference, status, currency and timestamp.
- Invoices, receipts and refund records.
- Where you pay by manual transfer, the payment proof you upload and the reference you supply.
We do not take card payments, and no card details are entered anywhere on Tamna. Payments are InstaPay or Vodafone Cash transfers confirmed by our team; we keep the transfer reference, the proof you send and the record of the confirmation. Financial records are retained for as long as Egyptian tax and accounting law requires.
7. Notifications and Communications
We use your contact details to send you messages that are part of the service:
- SMS — time-critical account or appointment alerts.
- WhatsApp — appointment confirmations and reminders, sent through the WhatsApp Business Platform.
- Email — receipts, verification links, password resets and account notices.
- Mobile push notifications — appointment, payment and message alerts delivered through Expo and the notification service operated by your device platform. For this purpose, we store a push token, device platform and an optional device label.
- In-app notifications — everything above, plus messages from your doctor.
Transactional messages are part of providing the service and cannot be fully disabled while your account is active, though you can adjust channel preferences in your notification settings. Marketing messages are only ever sent with your explicit opt-in, and every one of them includes a way to opt out.
8. Technical and Usage Data
We automatically collect a limited amount of technical data when you use the platform:
- Device type, browser, operating system and screen size.
- App version and limited device information needed to operate, secure and troubleshoot the mobile application.
- IP address, used for security, fraud prevention and rate limiting.
- Pages viewed and features used, in aggregate.
- Error reports and diagnostic traces when something goes wrong.
The mobile app stores your sign-in session, language, theme, local medication reminders and a limited reference to an unfinished payment on your device so that those features continue to work. Camera and microphone access is requested only for video calls, voice notes or a photo you choose to take. Photo-library and document access is requested only when you choose a file to upload. We use strictly necessary cookies on the website to keep you signed in and remember your preferences. If you scan a doctor's printed QR code, we also set an opaque first-party referral cookie for up to seven days so we can measure, in aggregate, whether printed cards lead to a profile visit or paid booking. The cookie is cleared after it is linked to a booking, and it is not used for advertising or cross-site tracking. When you arrive from one of our ads, we record which campaign it was and keep that with your account, so we know which campaigns help patients reach us. We do not share it. We use Sentry for error monitoring. When an error happens, Sentry may keep a short recording of what was on the screen so we can reproduce it; every piece of text and every form input is masked in that recording, and any link containing a sign-in, reset or verification code is removed before it is sent. We do not use website analytics or performance-measurement services. On our public pages only — never on your signed-in account pages, and never on a doctor's profile — we use the Meta Pixel to measure our advertising, and only if you allow it on the banner shown on those pages. You can give or withdraw that consent at any time with the control below.
10. How Long We Keep Data
We keep data only as long as we have a reason to:
- Medical records are retained for the period required by Egyptian healthcare regulations, which is longer than the life of your account.
- Financial and transaction records are retained for the period required by tax and accounting law.
- OTP verification records are deleted as soon as they are used or expire.
- QR referral records expire after seven days; paid-booking attribution is retained only as aggregate counts.
- Technical logs are retained for a short period and then deleted or anonymised.
- Other account data is deleted or anonymised after you close your account.
11. Security
We protect your data with layered technical and organisational measures:
- All traffic is encrypted in transit with TLS, and data is encrypted at rest.
- Access rules in the database itself restrict every record to the users entitled to see it.
- Passwords are stored only as salted hashes; optional two-factor authentication is available.
- Rate limiting protects sign-in, registration and verification against brute-force attempts.
- Access by our staff is limited to what their role requires. Sensitive administrative actions are recorded where supported, and we maintain security monitoring intended to detect and investigate misuse.
No system can be guaranteed completely secure. If a breach ever affects your personal data, we will notify you and the relevant authorities without undue delay.
12. Your Rights
Under Egypt's Personal Data Protection Law (Law No. 151 of 2020) you have the right to:
- Know what personal data we hold about you and why.
- Access a copy of your data — ask us and we will provide it.
- Correct data that is inaccurate or incomplete.
- Request deletion of your data, subject to the retention periods above.
- Withdraw consent you have previously given, including for analytics and marketing.
- Object to a particular use of your data, or ask us to restrict it.
- Complain to the Egyptian Personal Data Protection Centre.
To export your data, contact us using the details below. To delete your account, use the account-deletion page on this website (www.tamna.app/account-deletion) or contact us. We respond to requests within 30 days.
13. Children
An account must be held by someone aged 18 or over. A parent or legal guardian may create a dependant profile and book consultations for a child, and remains responsible for that child's data. We do not knowingly allow anyone under 18 to hold an account in their own name; if we discover one, we will remove it.
14. Changes to This Policy
We may update this policy as the service develops or the law changes. The date at the top of this page always reflects the current version. If a change materially affects your rights, we will notify you in the app or by message before it takes effect.
15. Contact Us
For any question about this policy, or to exercise any of the rights above:
- Operator and data controller: North Shore Digital LLC, operating Tamna.
- Email: support@tamna.app
- Website: www.tamna.app
- Or use the contact form in the app.