Privacy Policy
Effective: 2 October 2026
PharmaFlow Mobile is a pharmacy management app provided by Al-Qabas Technology. This policy explains how the app handles information in standalone and connected workspaces. Contact: 7modyiraq@gmail.com.
Information handled by the app
- Workspace and account details, such as pharmacy and branch names, employee names, usernames, contact details, roles, attendance and compensation records, when entered.
- Business records, including products, stock, purchases, suppliers, sales, returns, customer balances and reports.
- Customer or patient names and medicine-related information, including medicines associated with a sale or a clinical review and any clinical context entered by an authorized user. Such records may contain sensitive health information.
- Device and session identifiers, device public keys, enrollment information, licensing status, application/runtime versions and technical request or synchronization information used to authenticate devices and operate the service.
- Support tickets and messages submitted through connected support features or sent to the support email.
Standalone and connected modes
Standalone business records are stored on the phone. Activating cloud synchronization or enrolling in a connected pharmacy sends the relevant workspace records to the configured PharmaFlow backend and synchronizes them with authorized users and devices in that workspace. Standalone mode can still contact online services to retrieve app updates or clinical reference updates; using standalone mode does not imply that every network request is disabled.
Why information is used
Information is used to provide pharmacy operations, authenticate accounts and devices, apply permissions, maintain business records, synchronize authorized workspaces, operate licensing, provide requested support, deliver updates and protect the service. The app does not include advertising SDKs or use entered pharmacy records for personalized advertising.
Permissions
The camera is used to scan medicine barcodes and device-enrollment QR codes. Audio recording is not requested. Barcode and enrollment values may be processed for the requested operation; the app does not require uploading camera video. File access is used when you select, save, restore or share a backup or report. You control the recipients of exports you share.
Service providers and access
Connected services use Supabase for backend, authentication, database and related hosting services. Expo EAS provides app builds and over-the-air updates. Barcode scanning uses Google ML Kit on the device. Its SDK collects per-installation identifiers, device and app information, scanning event information and performance diagnostics for technical diagnostics and usage analytics, encrypted in transit using HTTPS. These services may also process IP addresses and technical request information necessary to operate. Workspace administrators and employees can access records according to their roles. Information may also be disclosed when required by applicable law or to protect the service. Provider processing locations may differ from your country.
Security
The app uses OS-protected storage for sensitive session and device key material, authenticated permissions, HTTPS for configured online services and encryption for its supported backup format. Keep devices, credentials and recovery keys protected. No storage or transmission method can guarantee absolute security.
Retention and deletion requests
To request deletion of a PharmaFlow account or cloud data, email 7modyiraq@gmail.com with the subject PharmaFlow account and data deletion. Include your username, workspace/branch name and a contact method. Do not send a PIN, private key, recovery key or patient records by email.
Requests are handled by the support team after identity and authority verification. Employees should also contact their pharmacy administrator. Account and workspace records are retained while needed to provide the service; some transaction, payroll, security or legal records may need to be retained to meet pharmacy obligations or resolve disputes. Support will explain any retained categories and the reason when processing the request. This page starts a request; it does not automatically erase records.
Uninstalling the app or clearing its storage removes its local app data, subject to device backup behavior. It does not delete cloud records, exported backups or copies on other devices. Protect or delete those copies separately. Request cloud deletion before removing access if you need help identifying your workspace.
Children and clinical information
The app is intended for pharmacy operators and healthcare professionals, not for children as users. Clinical references are information for professional review and do not replace qualified medical judgment, current clinical guidance or a healthcare professional's advice.
Changes and contact
This policy may be updated when app features or data practices change. The effective date identifies the current version. Send privacy questions, access/correction requests and deletion requests to 7modyiraq@gmail.com.