Privacy Policy

Last updated: 12 October 2026

This policy explains what the Tebaba app (iPhone and Android) and the Tebaba website (tebaba.io) collect, who receives it, how long it is kept, and how to ask us to delete it. You do not need an account or a login to use Tebaba, and the app does not ask for your location, contacts, photos or camera.

What We Collect

• Usage: the screens and pages you open, including the doctor profiles you view, sent to our own server together with your IP address, the country it comes from, the name of the website that linked you to us (its address only, never the page you were on) and your device or browser type. We use it to count visits, to see where visitors come from and to prevent abuse.
• Symptom search: the text you type when you describe your symptoms. This can be health information. See Symptom Search below.
• Survey responses: doctor visit details and Patient Trust Index (PTI) scores, and optionally comments about your experience, proof of visit, and a mobile number if you choose to give one. This includes answers saved as you go, even if you do not finish the survey. Your IP address is stored with the response for 90 days.
• Feedback on a symptom result: whether it was helpful and an optional comment. We do not store your IP address with it.
• Profile claims: when a doctor asks to claim their profile on the website, we collect their full name, email, mobile number, licence number, specialty, notes and an identity document, to verify the request. The identity document is deleted as soon as the claim is approved or rejected.

Who Receives Your Data

• Google (Firebase Analytics) in the iPhone app: an app instance ID, the identifier for vendor (IDFV) that iOS gives to our app, the screens you open and the doctor profiles you view, your device model, system version, language and app version, and an approximate location that Google derives from your IP address. We use it to understand how the app is used.
• Google Analytics and Contentsquare on the website: the pages you visit, how you use them (clicks, scrolling), your device and browser, and an approximate location. Contentsquare also records sessions, with all page text and typed values hidden. These tools set cookies or similar identifiers in your browser. They are not loaded on survey and claim pages, and the website removes symptom text before they see a page address.
• Anthropic, our AI provider: the text of your symptom search, so it can suggest which specialty treats those symptoms. Anthropic processes it under its own data retention terms.
• Our hosting and database providers, which store and serve this data on our behalf.

Google and Contentsquare keep analytics data under their own retention settings. We do not show ads, and we do not sell your data.

Symptom Search

• When you describe symptoms in the symptom search, the text you type is sent to our AI provider (Anthropic) to work out which specialty treats them. Type only what is needed. There is no need to include your name, civil ID, or contact details.
• We store the text of the query, and the specialty it was matched to, so that the same question does not have to be processed again. It is not linked to your name or account, and we do not store your IP address alongside it.
• Symptom searches that are flagged as urgent are also logged separately so we can review how the tool is routing them, and that log is deleted automatically after 180 days. The archive described below applies to them as well.
• The stored answer for every search, urgent ones included, is cleared after 7 days. A copy of each distinct question, and of the answer we gave, is kept in an internal archive with no fixed deletion date, so we can review and improve how the tool routes questions. Only authorised Tebaba staff can see it. To have a question you typed removed, send us its wording and we will delete it.
• The symptom search suggests a specialty. It does not diagnose, and it is not a substitute for seeing a doctor.

How Long We Keep It

• Usage records that contain your IP address and device type are deleted automatically after 90 days. Only daily totals, with no IP address, are kept after that.
• IP addresses recorded only to limit repeated requests are deleted after 24 hours.
• Symptom searches: as described under Symptom Search above.
• The IP address stored with a survey response, and the mobile number if you gave one, are deleted automatically after 90 days.
• The identity document sent with a profile claim is deleted as soon as the claim is approved or rejected.
• Survey responses, feedback and the rest of a profile claim are kept until you ask us to delete them.

How We Use Your Data

• To calculate and display doctor PTI scores based on aggregated, anonymous patient reviews. Your personal details are never shown publicly alongside your review.
• To suggest a specialty for the symptoms you describe.
• To detect and prevent fraudulent or spam submissions.
• To keep directory listings accurate and to improve the app and the website.

Data Deletion

You may request deletion of your data at any time by contacting us. We will process your request within 30 days.

Children's Privacy

Tebaba is not directed at children under 13. We do not knowingly collect any information from children.

Contact Us

For privacy inquiries or data deletion requests, please contact us at:

privacy@tebaba.io