Your data stays yours.

What this policy covers

This policy covers the balsm.health website, in Arabic and English: its pages, its sign-up forms and the contributor frame tool.

It does not cover the Balsm apps or Balsm Cloud. Each will publish its own policy before it collects any data. This website collects no health or medical information of any kind.

What we collect

We only collect what you type into one of our sign-up forms:

• Waiting lists: on the home, Cloud and providers pages: your email address, the language you were reading the site in, and which form you used.
• Providers form: if you fill them in: your organisation's name and your message.

That is all. We don't ask for your name, your phone number or an account.

What we don't collect

• No analytics, advertising or social-media trackers.
• No session recording. Error reports never include what you typed into a form.
• Your photo in the contributor frame tool never leaves your browser. The frame is composed and downloaded on your device, and nothing is uploaded.

How we use it

We use your email address to tell you about the launch or progress you signed up for, and, on the providers form, to reply to you. We use the language you were reading in to write to you in that language.

We process this data on the basis of your consent, which you give by submitting the form. You can withdraw it at any time. We never sell your data, and we never share it with anyone for their marketing.

Who handles it for us

We rely on a small number of service providers, each handling only what its job needs:

• Supabase: stores the sign-up form submissions in our database.
• Cloudflare: hosts the website. Like any host, it processes each request, including your IP address, to deliver the page and protect it from abuse.
• Sentry: receives error reports so we can fix what breaks. It is configured to exclude your IP address, cookies and form contents, and email addresses are removed before a report is sent.
• Google Fonts: serves the site's typefaces. Your browser fetches them from Google's servers, which receive your IP address and browser details as part of that request.

Some of these providers may process data on servers outside Egypt, under their own data-protection terms.

Cookies and your browser

We don't set cookies. Cloudflare may set a strictly necessary security cookie to tell people from bots.

The links page remembers whether you chose the light or dark theme, in your browser's local storage. That setting never leaves your device, and clearing your browser data removes it.

How long we keep it

We keep a sign-up until you ask us to delete it, or until we no longer need it for the purpose you signed up for, whichever comes first. Sentry deletes error reports automatically after its retention period.

How we protect it

Everything travels over HTTPS. The public side of the website can add a sign-up but cannot read the list back, and access to the list is limited to the Balsm team members who need it.

Your rights

Under Egypt's Personal Data Protection Law (Law No. 151 of 2020), and similar laws where you live, you can ask to see the data we hold about you, correct it, delete it, or withdraw your consent.

To do any of these, email us from the address you signed up with, and we will act on it within 30 days. You can also correct your details at any time by submitting the same form again with the same email address.

If you believe we have mishandled your data, you have the right to complain to Egypt's Personal Data Protection Center.

Children

This website is not aimed at children, and we don't knowingly collect data from anyone under 18. If you believe a child has signed up, email us and we will delete it.

Changes to this policy

If what we collect or how we use it changes, we will update this page and the date at the top before the change takes effect.

Questions or requests

Write to us about anything on this page, or to access, correct or delete your data.