Privacy Policy

1. Who We Are

Sanadi is an elder protection platform for Egyptian families, helping seniors stay safe from digital fraud and stay connected with those who care for them.

Developer: Omar Megahed, Sanadi Inc., Toronto, Ontario, Canada
Contact: help@mysanadi.com
Website: https://mysanadi.com

2. What We Collect

Information you provide directly:

• Name and preferred name
• Email address and password (via Firebase Auth)
• Age range and gender
• Country of residence
• Health conditions (optional, used for alert customization)
• Medication names, schedules, and daily logs
• Saved driver names and phone numbers
• Saved locations (home, work, club, etc.)
• Language preference
• Guardian pairing code

Collected automatically:

• Scam alert metadata: risk score, category, sender, timestamp. Message content is never stored.
• Medication log status (taken / missed / snoozed)
• Daily mood check-in (good / okay / bad / no response)
• Last active timestamp
• Guardian email and push notification preferences

We do NOT collect:

• Message content or call recordings
• Precise GPS location
• Browsing history
• Financial information
• Biometric data

3. How We Use Your Data

4. On-Device Processing

Scam detection runs entirely on your device using an on-device AI model. Message content is never uploaded to any server. Only the outcome — risk score and category — reaches our servers and is shared with your guardian.

5. Guardian Features & Data Sharing

When you pair with a guardian:

• Your scam alerts are visible to your guardian
• Your daily mood is displayed on their dashboard
• Your medication status is visible to them
• Your guardian can add medications on your behalf
• Your guardian receives email alerts via SendGrid when scams are detected or medications are missed

Guardians can access your data through the Sanadi Guardian Android app and the Guardian web portal at mysanadi.com.

6. Third-Party Services

Firebase (Google) — Authentication, database, cloud functions, hosting. Data stored in europe-west1 (EU region). GDPR compliant. Privacy policy

SendGrid (Twilio) — Sends email alerts to guardians. Receives: guardian email address, senior name, alert category and risk score only. No message content is sent. Privacy policy

Google Places API — Used for location search in ride booking. Only activated when you search for a location. Privacy policy

Google Gemini API — Powers voice assistant features. Only activated when you use voice commands. Privacy policy

Cloudflare — Handles DNS routing for mysanadi.com and email routing for help@mysanadi.com. Privacy policy

7. Email Communications

We send emails to guardians only when a scam alert is detected or a medication has been missed 3 times in 24 hours. Every email includes an unsubscribe link, notification settings link, and our physical address.

Sent from: help@mysanadi.com via SendGrid.

We comply with CAN-SPAM Act (US) and CASL (Canadian Anti-Spam Law). You can manage email preferences in app Settings → Notifications or in the Guardian web portal.

8. Cookies & Local Storage

The Guardian web portal uses:

• Firebase Auth session cookies (authentication only)
• Local storage for language preference

No advertising or tracking cookies are used.

9. Data Retention After Deletion

When you delete your account:

• Profile data: deleted immediately
• Scam alerts: deleted within 30 days
• Medication logs: deleted within 30 days
• Mood logs: deleted within 30 days
• Guardian pairings: deleted immediately
• Email logs (SendGrid): retained 30 days per SendGrid policy

10. Your Rights

You have the right to:

• Access your data — email help@mysanadi.com
• Correct inaccurate data — use Settings or email us
• Delete your account — Settings → Delete Account
• Export your data — email help@mysanadi.com
• Withdraw consent — uninstall the app
• Opt out of email alerts — Guardian app → Notifications

Response time: within 30 days of request.

11. Children's Privacy

Sanadi is designed for adults aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, please contact help@mysanadi.com immediately.

12. Security

• HTTPS encryption for all data in transit
• Firebase security rules enforce user-level access
• On-device scam detection (no message content uploaded)
• Unique pairing codes for family connections
• Email / password authentication via Firebase

13. Changes to This Policy

We will notify users of material changes via in-app notification and email to your registered address. Continued use after changes constitutes acceptance.

14. Contact & Governing Law

Email: help@mysanadi.com
Company: Sanadi Inc., Toronto, Ontario, Canada
Governing law: Province of Ontario, Canada

This policy is available in Arabic upon request. View our Terms of Service.