Privacy Policy

1. Who we are

Aafiyet ("we", "us", "our") is an AI-powered medication adherence platform based in Istanbul, Turkey. We can be contacted at info@aafiyet.com.

2. What data we collect

We collect the following categories of data:

• →Pilot request data — name, work email, organisation, and role submitted via our contact form.
• →Account data — email address and authentication credentials for platform users (pharmacists, administrators).
• →Patient clinical data — medication adherence records, call transcripts, risk scores, and intervention logs. This data is provided by our institutional partners and governed by separate data processing agreements.
• →Usage data — pages visited, features used, and session duration collected automatically for platform improvement.

3. How we use your data

• →To respond to pilot requests and onboard partner organisations
• →To operate and improve the Aafiyet platform
• →To generate anonymised, aggregated research insights
• →To comply with legal obligations under applicable law

4. Legal basis for processing

We process personal data on the basis of: (a) your consent where explicitly provided; (b) the performance of a contract or pre-contractual steps; (c) our legitimate interests in operating and improving the platform; and (d) compliance with legal obligations. For patient health data, we rely on explicit consent obtained by our institutional partners and applicable healthcare regulations.

5. Data storage & security

All data is stored on Supabase infrastructure with row-level security controls. We implement industry-standard encryption in transit and at rest. Access to patient data is restricted to authorised clinical users only.

6. Data sharing

We do not sell your personal data. We share data only with:

• →Infrastructure and service providers — third-party vendors who support platform operations under strict data processing agreements
• →Authorised institutional partners — who have signed a data processing agreement with Aafiyet
• →Legal authorities — where required by applicable law

7. Your rights

Depending on your jurisdiction, you may have the right to:

• →Access the personal data we hold about you
• →Request correction or deletion of your data
• →Object to or restrict processing
• →Data portability
• →Withdraw consent at any time

To exercise any of these rights, contact us at info@aafiyet.com. We will respond within 30 days.

8. Cookies

We use essential cookies only — required for authentication and session management. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect platform functionality.

9. Applicable law

This policy is governed by applicable data protection law in the jurisdiction where services are provided. Where we process data of individuals in the European Economic Area, GDPR applies. We comply with all relevant national data protection regulations in jurisdictions where we operate.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website. Continued use of the platform after changes constitutes acceptance.

11. Contact

For any privacy-related questions or requests:
Istanbul, Turkey
info@aafiyet.com
aafiyet.com