Privacy Policy

This privacy policy covers how the BasiraTech System (“the System”) collects, processes, and protects user data.
The System is operated and managed by the Ministry of Defense – Kingdom of Saudi Arabia (“the Service Provider” or “the Ministry”).

Any user who accesses, uses, or attempts to use the System expressly agrees to the terms of this Privacy Policy and the data collection and processing mechanisms described herein.

Scope of the System

the BasiraTech System is designed to support rehabilitation and follow-up programs for children and their families through a digital platform that connects the child, their guardian, and a specialist within an integrated therapeutic system.

The Ministry of Defense is committed to protecting the privacy of all users, especially children.

Processing of Personal Data

The Ministry of Defense processes personal data only to the extent necessary to:
- Provide and operate the System services.
- Monitor rehabilitation and therapeutic programs.
- Improve the quality of digital services.

Comply with applicable regulatory requirements within the Kingdom of Saudi Arabia.
No data is processed except in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia and related regulations.

Types of Data Collected

The following data may be collected and processed:
1) Account Creation Data
When creating or managing an account, such as:
- Username
- Parent or Guardian Data
- Professional Data
- Rehabilitation Program Information

2) System Usage Data
When using digital activities and services, such as:
- Child's progress in sessions
- Activity results
- Interaction and usage records
- Performance and follow-up indicators

3) Remote Session Data
During secure virtual sessions between the child and the professional, the following may be processed:
- Session data
- Rehabilitation follow-up records
- Professional feedback from the professional

4) Technical Data
This includes:
- Device type and operating system
- Technical malfunction records
- Performance and service improvement data

Sensitive Data

The system may include health or rehabilitation data related to the child when operationally necessary.

This data is processed only:
- For the purpose of providing rehabilitation services.
- With the explicit consent of the parent or legal guardian. In accordance with the information security controls adopted by the Ministry of Defense.

Data Retention Period

Personal data is retained only for the period necessary to fulfill operational or regulatory purposes, including:
- The duration of the training program.
- Regulatory or legal requirements.

Data will be deleted or anonymized after it is no longer needed, in accordance with the approved data management policies.

Data Processing and Storage Location

Data is processed and stored within the digital infrastructure of the Kingdom of Saudi Arabia or within technical environments approved by the Ministry of Defense and subject to national cybersecurity controls.

Data Sharing

Personal data is not shared with any third party except in the following cases:
- With the consent of the guardian or authorized user.
- When required by law or court.
- When operationally necessary to provide the service (such as sharing a child's data with the supervising professional).

Data is not used for any commercial purposes.

User Rights

The user or guardian has the right, in accordance with applicable regulations, to:
- Request access to personal data.
- Request correction of inaccurate data.
- Request deletion of data upon completion of the regulatory purpose.
- Request a copy of the data in a usable digital format.

Requests can be submitted through the communication channels listed below.

Children's Privacy

The BasiraTech system was developed specifically for children participating in rehabilitation programs. Children's data is not collected or processed without the explicit consent of their parent or legal guardian.

If you suspect data collection without proper consent, please contact the service provider immediately.

Information Security

The Ministry of Defense implements advanced information security controls, including:
- Access control.
- Data encryption.
- Continuous security monitoring.
- Protection of digital infrastructure.

This is to ensure the confidentiality and integrity of data.

Change of Policy

The Ministry of Defense reserves the right to update the Privacy Policy at any time. The updated version will be posted within the system.

Continued use of the system after an update constitutes acceptance of the revised policy.