Notice of Privacy Practice Privacy Policy

    Last updated: Feberuary 26, 2026

    THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

    At Recovery, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, share, and safeguard your data in accordance with applicable laws in Pakistan and the USA, including the Prevention of Electronic Crimes Act, 2016 (PECA 2016), the Personal Data Protection Act, 2023 (PDPA 2023) and the Health Insurance Portability and Accountability Act (HIPAA). We use clear language to help you understand our practices.

    1.1 Information We Collect

    We collect the following types of information:

    • Personal Information: Name, email, phone number, date of birth, gender, address, and payment details when you register, book appointments, or order medicines.
    • Health Information: Medical history, symptoms, prescriptions, and consultation notes shared during sessions (with your consent).
    • Technical Information: Device details, IP address, browser type, and usage data from our website and app.
    • Payment Information: Details from JazzCash, Easypaisa, or debit/credit cards, handled securely without storage on our servers.

    1.2 How We Use Your Information

    Your data helps us provide services such as:

    • Booking and managing appointments.
    • Facilitating video consultations and medicine delivery.
    • Processing payments.
    • Improving our platform through analytics (anonymized where possible).
    • Complying with legal requirements under PECA 2016, PDPA 2023 and HIPAA.

    We do not sell your data to third parties. Other uses and disclosures not described in this notice will be made only with the individual's written authorization.

    1.3 Data Sharing and Disclosure

    We may share your information with:

    • Licensed psychologists/therapists for consultations.
    • Pharmacies for medicine orders.
    • Payment processors (e.g., JazzCash, Easypaisa) in compliance with PCI-DSS standards.
    • Authorities if required by law, such as under PECA 2016 for investigations.

    All sharing is limited to what is necessary and protected by confidentiality agreements.

    1.4 Data Security

    We use industry-standard encryption (e.g., SSL/TLS) to protect data in transit and at rest. Access is restricted to authorized personnel. We comply with PDPA 2023 and HIPAA Security Rule requirements for data protection.

    1.5 Your Rights

    Under PDPA 2023 and other laws, you have the right to:

    • Access your personal data.
    • Correct inaccurate information.
    • Request deletion of your data (subject to legal retention requirements).
    • Withdraw consent for data processing.
    • Lodge a complaint with the relevant authority.
    • Receive an accounting of disclosures of protected health information.
    • Request restrictions on certain uses and disclosures of protected health information.

    To exercise these rights, contact us at support@therecovery.io.

    1.6 Data Retention

    We retain data only as long as needed for services or legal purposes, then securely delete it.

    1.7 Changes to This Policy

    We may update this policy. Changes will be posted here with the effective date. If you have questions, email privacy@therecovery.io.

    Contact Us

    If you have any questions about this Privacy Policy, please contact us at:
    Email: privacy@therecovery.io
    Support: support@therecovery.io
    Privacy Officer: Raahim Ahsan
    Recovery Mental Health Platform