Privacy Policy

1. Who we are

The data controller is:

VETRA LLC
6th Floor, 1 Roxy Square, Heliopolis, Cairo, Egypt
Email: privacy@myseha.ai

If you have any question about this policy or your data, contact us at the address above.

2. What data we collect

When you join the waitlist, we collect:

• Email address — so we can notify you when mySEHA launches.
• Preferred language — English or Arabic, to send you communications in your language.
• Segment (optional) — you may optionally tell us what brings you to mySEHA: managing your own health, caring for a family member, managing a specific condition, or simply curious. This is optional and you can skip it. If you choose an option that suggests a health interest, we treat it as sensitive data, use it only to tailor launch communications, and never as a medical record or as the basis of any assessment about you.
• Referral information — a referral code we generate for you, and, if you arrived through someone else's referral link, the code of the person who referred you.
• Sign-up date and source — the date you joined, and that you joined through the waitlist.

We also process, automatically:

• Security and delivery data — when you submit the form, Cloudflare Turnstile runs a challenge to confirm that you are a human being and not an automated script. This is used only to prevent spam and abuse. Our hosting provider, Cloudflare, also processes standard technical information such as your IP address in server logs, in order to deliver and secure the Website.

Where this data is held. Your waitlist details are stored in Brevo, our email and contact-management platform, and nowhere else. This Website operates no database of its own; there is no separate copy of your waitlist record on our infrastructure. Turnstile signals and IP addresses appear only in Cloudflare's security and server logs.

We do not use advertising or analytics cookies, and we do not build advertising profiles about you. No analytics or advertising software is installed on this Website at all. See our Cookie Policy.

3. Why we use your data, and our legal basis

You can withdraw consent at any time by deleting your data (see Section 7). Withdrawing consent does not affect anything we did before you withdrew it.

4. Who we share your data with

We do not sell your personal data. We share it only with the service providers that help us run the Website and the waitlist, under contracts that require them to protect it:

• Brevo (Sendinblue) — our email and contact-management platform. Brevo stores your waitlist contact and sends our launch emails on our behalf.
• Cloudflare — hosts the Website, provides the Turnstile human-verification challenge, and delivers and secures our pages.

A full, current list of every provider that processes personal data for mySEHA — for both the Website and the App — is published at myseha.ai/subprocessors. We update that page whenever a provider is added, removed or replaced.

We may also disclose data if required by law, or to protect our rights, our safety, or the integrity of the service.

5. International transfers

Your data leaves Egypt. Brevo processes waitlist contacts on servers in the European Union. Cloudflare operates a global network, so the technical data in its security and server logs — including your IP address — may be processed at a location outside Egypt and outside the EU, wherever the nearest point of that network is.

Where data leaves Egypt or the EU, we rely on our providers' contractual and technical safeguards, including Standard Contractual Clauses where they apply, to keep it protected to a standard consistent with PDPL Law 151/2020 and, where applicable, the GDPR. We do not transfer waitlist data to any recipient other than the providers named in Section 4 and on our Sub-processors page.

6. How long we keep your data

We keep your waitlist data until the earlier of:

• the public launch of mySEHA — after which your record either moves into the live product under its own privacy terms, with notice to you beforehand, or is deleted; or
• the moment you delete it yourself (Section 7), which takes effect immediately.

We apply no other retention period, because we hold nothing else. Cloudflare's security and server logs are retained on Cloudflare's own standard schedule and are not accessible to us as a searchable record of individuals.

7. Your rights and how to exercise them

Under PDPL Law 151/2020 and, where applicable, the GDPR, you have the right to:

• access the data we hold about you,
• correct it if it is wrong,
• delete it (the right to erasure),
• withdraw consent and object to our use of it,
• receive a copy of it in a portable form, and
• complain to the competent data-protection authority — in Egypt, the Personal Data Protection Centre.

The fastest way to delete your data is our self-service link: myseha.ai/waitlist/delete. You enter your email address, we send a confirmation link to that address, and clicking it permanently removes your contact from our system. No account and no password are needed. The link expires after 24 hours, and for your protection the page always returns the same confirmation message whether or not the address is on our list — so that no one can use it to discover who has signed up.

To exercise any other right, email privacy@myseha.ai and we will respond within the time required by law.

8. How we protect your data

All traffic to the Website uses HTTPS/TLS. Credentials are held in secure secret storage and never in our source code. Our deletion flow is signed and time-limited, so that only the holder of your email address can trigger it, and the form is protected against automated abuse by Cloudflare Turnstile and rate limiting. No method of transmission or storage is ever completely secure, but we take reasonable measures to protect your data.

9. Children

The waitlist is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has joined the waitlist, contact privacy@myseha.ai and we will remove the data.

10. Changes to this policy

We may update this policy as the service evolves or as the law requires. We will update the "Last updated" date and the version above, and for material changes affecting waitlist members we will take reasonable steps to notify you.

11. Contact

VETRA LLC
6th Floor, 1 Roxy Square, Heliopolis, Cairo, Egypt
privacy@myseha.ai