Privacy Notice

1. Who controls each use of your data

This notice also covers the AnyCura customer marketplace app on iOS and Android. Account, booking, messaging, device notification and diagnostic data are handled under the same purposes and safeguards; app permissions do not authorize unrelated uses.

AnyCura is the data controller for the purposes it determines for booking accounts, provider discovery, reservation coordination, support, security, consent evidence, and its own communications.

The selected provider is the data controller for its own patient intake, medical care, clinical records, billing, and related professional obligations. Those clinical purposes are separate from management of an AnyCura booking account.

When AnyCura supplies clinical software and processes provider-controlled records on the provider's behalf, it acts as a data processor under lawful documented instructions and the applicable data-processing agreement. This does not remove AnyCura's own security and legal obligations.

Booking notes, visit reasons, and messages may themselves contain health information. They remain protected personal data, even though the booking platform is not the provider's clinical record system, and may be used or shared only for disclosed purposes with an applicable lawful basis.

2. Data we may collect

• Account and identity data, such as name, phone number, email, login method, country, language, date of birth or age-gate result, and verification status.
• Booking-request data, such as selected provider, service, preferred date and time, timezone, purpose, notes, status, and provider responses.
• Message and support data, such as messages exchanged with providers or AnyCura support.
• Device, log, fraud-prevention, and security data, such as IP address, browser, device identifiers, timestamps, and usage events.
• Consent and preference data, such as accepted legal document versions, cookie choices, marketing preferences, locale, timestamp, and source flow.
• Sensitive health-related data, if you put symptoms, treatment interests, procedure details, images, medical needs, or similar information into booking notes, messages, reviews, uploads, or future health-record features.
• Identity-verification data, where required for medical booking, patient-record access, fraud prevention, provider requirements, or legal obligations. This may include ID-card or passport information, images, selfies, verification status, and verification results.

3. Why we use data

• Provide marketplace discovery, account, booking request, messaging, support, safety, and sharing-with-provider features.
• Verify accounts, prevent abuse, secure the platform, debug issues, and maintain service reliability.
• Send booking, account, policy, security, support, and legally required notices.
• Improve search, content quality, provider operations, product performance, and user experience.
• Use analytics, advertising, retargeting, or marketing technologies only where permitted by law and consent settings.
• Support medical-institution booking, identity verification, provider intake, sharing with providers, dispute handling, and future health-record access where those flows are enabled.
• Comply with legal obligations, enforce terms, resolve disputes, and respond to lawful requests.

4. Sharing with providers and service providers

When you request a booking or contact a provider, AnyCura shares with the selected provider only the information needed to respond, schedule, prepare, deliver services, or manage that booking or communication. A booking or message does not grant all businesses access to your information or clinical history.

For medical-institution booking or patient-record workflows, AnyCura may disclose booking details, notes, verification status, or identity-check results where needed for provider intake, safety, care coordination, records, billing, or provider operations.

Clinic OS clinical-history access is available only to verified medical facilities that have purchased the Clinic OS add-on and have active access, and remains subject to each user's organization, branch, role, and clinical permissions and the applicable lawful basis. A booking, message, or add-on purchase alone does not authorize access to another organization's clinical records.

AnyCura may use vendors for hosting, infrastructure, analytics, messaging, authentication, security, support, translation, identity-verification tooling, storage, and related operations.

5. Sensitive data and identity verification

Some AnyCura flows may involve health information, medical needs, procedure interests, identity documents, face images, or other sensitive information. AnyCura will process this data only where it has a relevant purpose and an applicable legal basis.

Clinical records and health information supplied for booking, messaging, or treatment are not automatically used in public advertisements. Publication of identifiable patient images, testimonials, or health information requires a separately disclosed advertising purpose, an applicable lawful basis, and any required specific permission or explicit consent. Consent to booking or treatment alone does not authorize that publication.

Identity documents may contain information that is not needed for AnyCura’s purpose. AnyCura may ask you to cover, redact, or avoid submitting unnecessary information, or may mask unnecessary information during review where appropriate.

Where AnyCura reviews identity information, AnyCura may retain verification results and necessary evidence as appropriate for security, service operation, dispute handling, and legal obligations.

6. Cookies, analytics, and advertising

AnyCura uses necessary technologies for site operation, security, locale routing, and consent storage. Functionality, analytics, and marketing technologies should follow your consent settings where required by law.

7. Retention, account closure, and your rights

You can request account deletion from Settings in the customer app or the Account deletion page on the website. The website instructions remain available without signing in. If you cannot use the app, contact support@anycura.com; do not send passwords, one-time codes or medical records in the first message. We verify identity and distinguish request receipt, processing and completion. Any retained category must have a specific reason and retention period or end condition.

For requests subject to Thailand’s personal-data erasure rules, we act without undue delay and complete the required erasure within 90 days of receipt. We explain any lawful retention and notify you of the outcome. Technically delayed backup erasure requires appropriate safeguards until erasure is finished; a pending task is not reported as completed.

Personal data is retained only as necessary for the disclosed purposes and applicable legal, security, or dispute obligations. Account, booking, support, consent, identity-verification, and provider records have different retention conditions.

Closing the booking account ends account access and starts the applicable account-data cleanup. It does not automatically erase the provider's original patient, clinical, prescription, test, treatment, billing, or payment records.

The responsible provider assesses the lawful basis and necessary retention period for its own records. Where deletion is limited by healthcare or other legal duties or claims, the relevant reason and retention condition must be explained; account closure is not a basis for indefinite retention.

You may request access, correction, deletion, restriction, objection, consent withdrawal, or portability where applicable. Send requests about AnyCura account data to the privacy contact below; requests about provider records are handled separately by the responsible provider. AnyCura can help identify the appropriate recipient. These rights do not require a new account or completion of outstanding bookings.

Registration after completed account closure does not restore erased account data or consent evidence. Existing provider records remain subject to verification and access authorization before any relinking or disclosure; matching contact details alone is insufficient.

8. Minors and location data

AnyCura may require guardian consent or restrict features for minors depending on age, service type, local law, and provider requirements. We aim to avoid collecting unnecessary sensitive data from minors.

When you choose Use current location in the customer app, the app checks your device permission and obtains your coordinates. It sends those coordinates to AnyCura for nearby-provider search and distance results. You can search by place or area without sharing device location. You can change location permission in your device settings.

9. Security and contact

AnyCura uses administrative, technical, and organizational safeguards designed to protect personal data. No online service can guarantee absolute security.

For privacy questions or requests, contact support@anycura.com.