Privacy notice

What we collect

• Your Google sign-in: your name, email address and basic Google profile, nothing more. We never see your Google password.
• Your reviews: the ratings, answers and text you write, the month of your visit, and whether you posted with your name or anonymously.
• Proof, if you choose to add it: a receipt, prescription or report (JPEG, PNG or PDF). Proof is optional.
• If you claim a provider profile: the BMDC registration or licence number, credential documents, and a contact phone and email.
• Details of any provider you suggest.
• If you report a review: the reason you choose and anything you write.
• If you dispute, appeal or make a privacy request: a confirmed phone number.
• Your location stays on your device. If you tap "Use my location", your device works out your district and only the district goes into the search. Your coordinates are never sent to us.

Why we keep it

To sign you in, have a person check each review before it is published, stop fake or abusive reviews, check provider claims and handle your requests. We do not use your personal information for anything else.

Who sees what

• People who are not signed in see reviews without any reviewer name.
• Signed-in people see the name on a review posted with a name.
• A review posted anonymously shows no name or identity to anyone, signed in or not. Authorised staff can still see who wrote it.
• Proof, claim documents and the claim contact phone are seen only by trained, authorised staff. Proof is never shown publicly and is never sent to an outside AI service. Staff normally use previews with private details covered. Opening an original file needs a reason, approval from a second person and a time limit, and every access is logged.
• Only staff can see who reported a review.
• If review text contains a phone number, email address or ID number, everyone else sees it replaced, for example "[phone number removed]". Only the writer and staff see the original text.

How we tell you things

For now, updates about your reviews, requests and claims appear inside the app, for example in My Reviews and Privacy and account. We do not send email notices at launch, so please check those pages from time to time.

How long we keep it

• Original proof files are deleted 30 days after the decision on them. Proof whose processing never finishes is deleted after 90 days at most. An open dispute or legal hold pauses deletion.
• A small record of the proof check is kept for the life of the review plus 90 days. Logs of who opened proof are kept for 180 days.
• If you delete your account, your access ends and identity links we no longer need are removed. Published reviews are not removed automatically; they stay without your name or a link to your profile, and you can withdraw a review separately. Text you typed when reporting a review is deleted. Records needed for audit and fraud prevention are kept under our retention policy.
• We keep backups of our database for a limited time (currently up to about a month), so some deleted records can remain in a backup until it expires. Proof files have no separate backup.
• Retention periods for other information will be set out here after legal review.

What you can do

From the Privacy and account page you can ask to see or correct your personal information, delete your account or withdraw a review. You can follow each request and its outcome there.

Go to Privacy and account

We do not sell data

Papqle never sells personal data.

Contact

Privacy questions: rashed.mamun303@gmail.com. Please do not email prescriptions, reports or identity documents; use the Privacy and account page for requests.