Privacy policy

A patient who scans the QR code in a waiting room gets a ticket. The ticket holds a number (for example A-008), their place in the queue and their arrival time. It holds no name, no phone number and no health data. The patient does not create an account.

If the patient turns on “Alert me when it’s almost my turn”, their browser provides a technical address for sending notifications, issued by their phone’s service (Google, Apple or Mozilla). This address does not identify a person. It is deleted with the ticket.

The ticket is used on the day of the visit. Dorek keeps it for 30 days, then deletes it automatically.

The ticket number is stored in the patient’s browser, so they can find their ticket again if they reload the page.

Data: the email address and name of the person who creates the account; the name of the practice and its waiting rooms; the subscription, invoices and payments; to prevent repeated free trials, a device identifier and, if you agree, the location at the moment the practice is created.

Purposes: to create and secure your account, run your waiting list, invoice you, apply referral rewards, and send you sign-in emails and reminders about your trial or subscription.

Legal basis: performance of the subscription contract (terms of use); accounting and tax obligations for invoices; Dorek’s legitimate interest in preventing abuse; your consent for the location.

Retention: invoices are kept for the period required by law.

Data: full name, wilaya, WhatsApp number, and the free line in the form.

Purpose: to review your application and contact you.

Legal basis: your consent, given by ticking the box on the form. You can withdraw it at any time.

If your application is accepted, the ambassador agreement sets out the other data needed, including the CCP or BaridiMob account for your commissions.

The dorekapp.com website sets no advertising or audience-measurement cookies. Cloudflare’s analytics count visits without cookies and without identifying visitors. To serve the pages, Cloudflare technically processes your device’s IP address.

The app uses your browser’s storage to keep you signed in and, for patients, to keep today’s ticket.

• Supabase: the app’s database. Data is hosted outside Algeria.
• Render: hosting of the app.
• Cloudflare: hosting of the website and cookieless analytics.

These providers act on Dorek’s instructions and may not use the data for their own purposes.

Account and application data is hosted outside Algeria. This transfer takes place with the ANPDP’s authorisation, in line with Law 18-07 as amended.

The database tables are closed by default: the browser can only read or change data through controlled functions. All traffic is encrypted (HTTPS). If there is a data breach, Dorek informs the ANPDP within the time limits set by law.

You have the right to be informed, to access your data, to have it corrected or erased, and to object to its processing on legitimate grounds. You can withdraw your consent at any time.

If you believe your rights are not respected, you can complain to the National Authority for the Protection of Personal Data (ANPDP).

If this policy changes, the new version is published on this page with its date. Subscribed doctors are told by email about important changes.