01
Personal by design
A distinct profile for each person, with information kept in the context it belongs to.
Governance & trust
Your health story.
Our responsibility.
Understand the choices, safeguards and human responsibilities behind your Afiyah experience. Clear explanations. Visible scope. Practical ways to act.
The foundation
Personal information.
Deliberate decisions.
Three principles connect the experience, from choosing a profile to reviewing the next step.
02
Permission with purpose
A specific person, recipient and reason guide the information proposed for sharing.
03
Accountable at every step
You make sharing choices. Qualified professionals make clinical decisions. Partners confirm their part.
Privacy in practice
A clear request.
A considered choice.
Review what is proposed, who would receive it and why, before consequential sharing.
Understand permissions
AfiyahControl modelBefore information is shared.
- Person
- The selected private profile
- Recipient
- The named care team
- Purpose
- Prepare for a consultation
Your approval comes first.
Safeguards in the interaction
The right protection.
At the right moment.
Access, source information, public channels and reported concerns each need a defined control.
Identity & sessions
Check access at the request.
Identity, current sessions and authority for the selected person are checked by the private backend.
Explore access safeguardsInformation integrity
Keep the original in view.
The source report, date, units and laboratory range stay beside an explanation. Missing or conflicting details need review.
Read the data-quality approachSeparated channels
Keep public and private apart.
The website guide and enquiry forms cannot open private app profiles or medical records.
Understand the website guideCybersecurity & response
Make concerns actionable.
The reporting route supports assessment, containment, investigation and appropriate follow-through.
Report a security concern
Hosting & information flows
Know where your
information goes.
Our commitment is GCC hosting of core health records. Separate AI, voice and website processing have their own scope and notices.
Read the processing detailAfiyahControl modelDifferent flows. Clear scope.
- Core health records
- GCC hosting commitment
- AI & voice processing
- Service-specific review
- Public website
- Separate processing scope
Approved locations, backups and retention must be confirmed for the service you use.
Evidence, review & assurance
Know the evidence.
Understand its limits.
A clinical review, software tests and independent assurance establish different things. Each claim needs the right supporting evidence.
A defined clinical scope.
The v0.3 rules catalogue records clinical approval for bounded adult document explanation and controlled next-step guidance.
Scoped review recordRead the clinical scopeChecks with a clear boundary.
Internal software tests cover specified behaviours. Deployment, service operations and market activation require separate verification.
Internal verificationExplore the quality frameworkA basis for control design.
WHO health-AI guidance, NIST AI RMF and relevant security and privacy standards inform control mapping and review.
Design referencesRead the reference frameworkEvidence for broader claims.
Certification, independent security assessment and whole-app clinical effectiveness each require current evidence of their own.
Separate assessment requiredUnderstand the evidence status
Human responsibility
Technology supports.
People decide.
Sanad helps with understanding and preparation. Clinical judgement and professional care remain with qualified people.
Explore the care modelAfiyahControl modelEvery action has an owner.
- You
- Approve consequential sharing
- Qualified clinicians
- Assess, diagnose and prescribe
- Participating partners
- Confirm their service actions
Employer administration does not grant access to private health records or Sanad conversations.
Your choices & rights
Your information.
Practical ways to act.
Find the relevant control or start a request through the appropriate route.
Family permissions
Review the selected profile and the authority to use that person’s information.
Review family accessSanad & AI choices
Understand continuity, the information Sanad may use and separate processing choices.
Review AI choicesYour data requests
Find the verified route for access, a copy, correction, authorised sharing or deletion.
Make a data requestWebsite preferences
Review essential storage and change optional analytics through cookie preferences.
Review cookie choicesQuestions & support
Clarity when
you need it.
For a privacy question or security concern, start with a brief description. We can arrange a suitable channel for sensitive evidence.
Keep health records, credentials and identity documents out of an initial message.Can my employer see my health records or Sanad conversations?
No. Sponsoring a membership does not grant access to individual health records or Sanad conversations. Employer programme reporting is limited to the agreed aggregate scope.
Does Sanad on this website know my private health history?
No. The public website guide explains Afiyah and helps you find the right information or contact route. It cannot open private app profiles, medical records or personal continuity.
What does the clinical review establish?
It records review of a bounded adult document-explanation and next-action scope. It does not establish diagnosis, prescribing, whole-app health outcomes or independent certification.
Policies & supporting detail
Go deeper where it matters.
Privacy policyConsent & family accessYour data & rightsSecurity & reportingSanad & AI transparencyMedical & wellbeing disclaimer
Service availability, deployment controls, hosting arrangements and independent assurance must be confirmed within their stated scope. Afiyah is operated by Ironleaf Group FZE.
Trust, every day
Built on trust.
Guided by you.
Your health story deserves clear boundaries, meaningful choices and people who take responsibility.
Your data and rightsAfiyahYour information. Your choices.
- Permission
- A clear person and purpose
- Responsibility
- Defined roles and review
- Your rights
- Access, sharing and deletion
Find the safeguards and request route for your information.