Privacy Policy

MedSync Pro Digital Platform ("MedSync Pro", "we", "us", or "our") provides a hospital pharmacy performance reporting platform used by the Alkhidmat Foundation hospital network to track procurement, pharmacy, and medication safety key performance indicators (KPIs). This Privacy Policy explains what information we collect through the platform, how we use it, and the choices available to you.

The platform is designed to collect operational and administrative data only. We do not collect, store, or process any patient-identifiable health information.

Specifically, we collect:

• Procurement data — purchase order counts and values, supplier and distributor names
• Pharmacy KPI data — stock values, supplies and GRNs received, prescriptions filled, sales figures
• Medication error data — aggregate error counts by category and severity, adverse drug reaction counts
• Account information — hospital name, city, access codes, and submitter names provided at submission
• Usage information — login timestamps and basic technical logs needed to operate the platform

We use the information collected to:

• Generate hospital, network-wide, and annual performance reports
• Calculate and benchmark KPIs across the hospital network
• Detect and flag data quality issues, such as underreporting or missing submissions
• Maintain and improve the reliability and security of the platform
• Respond to correction requests and administrative inquiries

MedSync Pro uses the Anthropic Claude API to help generate narrative summaries of the KPI data described above. Only aggregate, non-patient operational data is sent to this service for the purpose of drafting report text. Anthropic processes this data solely to generate the requested output and does not use it to identify individuals. All AI-generated reports are reviewed and released by an administrator before being made available to hospitals.

Data submitted to the platform is stored on secured servers with access restricted to authorized administrators, managers, and the hospital that submitted the data. Access to the platform is controlled through unique access codes issued by the platform administrator. We take reasonable administrative and technical measures to protect information against unauthorized access, alteration, or disclosure.

Submitted KPI data and generated reports are retained for as long as necessary to support the hospital network's ongoing performance tracking and historical trend analysis, or until deletion is requested by an authorized administrator.

We do not sell or rent submitted data. Hospital-level data is visible to that hospital, to platform administrators and managers, and — in aggregate, network-wide form — to authorized regional viewers. Data may be disclosed where required by applicable law.

If you believe data submitted on behalf of your hospital is inaccurate, you may submit a correction request through the platform, or contact us using the details below. Administrators can review, resolve, or decline correction requests.

This platform is intended for use by authorized hospital staff, administrators, and viewers. It is not directed at, and does not knowingly collect information from, children.

We may update this Privacy Policy from time to time to reflect changes to the platform or applicable law. The "Effective date" above indicates when this policy was last revised.

MedSync Pro Digital Platform is operated from Lahore, Pakistan. If you have questions about this Privacy Policy or how your hospital's data is handled, contact us at support@medsyncpro.org.