छोटकरीमा: PaaloQ ले तपाईंको फोन नम्बर, नाम (वैकल्पिक) र क्लिनिकको पालो/टोकनको जानकारी मात्र लिन्छ — कुनै स्थान (location), भुक्तानी विवरण वा मेडिकल रेकर्ड लिँदैन। तपाईंको जानकारी बेचिँदैन। विवरण तल छ।
PaaloQ helps you see your live place in a doctor's queue at a participating
clinic in Nepal, estimates when your turn is coming, and tells you when to
leave so you don't wait for hours. This policy explains what we collect, why,
and your choices. It reflects exactly how the app and service work today.
1. What we collect
Your phone number — used as your login and to link you to the token you were given at a clinic.
A login PIN — stored only as a one-way cryptographic hash. We never store or see your actual PIN.
Your name (optional) and any family member profiles you add — a name, and optionally an age and gender — so a token can be labelled for the right person.
Queue and visit activity — which clinic and doctor, your token number and its status, timestamps. We do not collect diagnoses, prescriptions, or any medical records — PaaloQ is a queue tracker, not a health record.
Basic sign-in security data — your device's IP address and app/browser identifier when you sign in, kept to protect your account and detect abuse (such as re-used login tokens).
A push-notification token from your device (Firebase Cloud Messaging), only if notifications are enabled, so we can tell you when your turn is near.
App usage analytics tied to a random, pseudonymous id — not your name or phone. Sensitive fields are stripped before analytics are stored.
Your language preference (Nepali or English).
2. What we do NOT collect
No precise location — the app does not track where you are.
No payment or financial information — there is no in-app payment.
No SMS or WhatsApp — notifications are in-app and push only.
We never sell your data, and we do not use it for third-party advertising.
3. Who can see your information
The clinic you are visiting. Staff managing the queue (receptionist/nurse and clinic admins) can see the name and phone number attached to your token — this is how they call you and manage the line.
Public display boards in a clinic show only anonymous token numbers — never your name, phone, or any personal detail.
Service providers we rely on: Google (Firebase Cloud Messaging) to deliver push notifications, and our hosting provider to run the service. They process data only to provide these functions.
4. How your information is protected
Your PIN is stored as a salted cryptographic hash; login is protected by per-account lockout against guessing.
All data is encrypted in transit (HTTPS/TLS).
Access to clinic data is restricted by role, and each clinic can only see its own patients' queue activity.
5. How long we keep it
Your queue history for a completed visit — token, timings, and consultation record — is automatically deleted about 90 days after the visit. (Records from a visit left open or uncompleted are kept until a clinic operator closes it out.)
We keep notification history and security/audit logs longer, to protect your account, deliver a reliable service, and investigate problems.
Your account and profile are kept until you ask us to delete them.
6. Your choices and rights
You can view and update your profile and family profiles in the app.
You can turn notifications off in your device or app settings.
You can request deletion of your account and associated data by emailing us (see below).
7. Children
PaaloQ is intended for adults booking or tracking clinic visits (including on
behalf of family members). It is not directed at children for independent use.
8. Changes to this policy
If we change our data practices, we will update this page and the "Last
updated" date above. Material changes will be reflected here before they take effect.