Privacy Notice

Last updated 2026-10-16 · Data Privacy Act of 2012 (RA 10173)

Who we are

Sapientia Information Solutions Inc. is the personal information controller for the Sapientia MD platform. Doctors and clinics using the platform are controllers of the medical records they create.

What we collect

• Account details: name, mobile number, e-mail, birth date, sex, city, photo.
• Health information you or your doctor enter: reason for consult, notes, vitals, diagnoses, prescriptions, lab results, dependents' details.
• Doctor verification: PRC ID, PTR, S2 license, selfie, signature.
• Payment references from PayMongo (we never see your card or wallet credentials).
• Device data for notifications and security logs.

Why

To run consultations and bookings, issue prescriptions and certificates, process payments and payouts, send reminders, meet DOH, FDA and PhilHealth requirements, and keep the platform safe.

Who sees your health records

Only you, the doctors you consult, doctors you are referred to (with your consent), clinic staff of the clinic you visit, and platform administrators acting on a support request. Every access to a record is written to an audit log you can ask for.

Retention

Medical records are kept for at least 10 years as required for health records in the Philippines, or longer where the law requires. Account data is deleted on request when no longer needed for legal obligations.

Your rights

You may access, correct, download or ask for the deletion of your personal data, object to processing, and complain to the National Privacy Commission. E-mail support@sapientiainformationsolutions.com.

Security

Data is stored encrypted at rest in Supabase (Singapore region), transmitted over HTTPS, protected by row-level access rules, with sign-in by one-time code, password or Google.