Privacy policy

Medical by Moveo Scheduling operates an appointment-scheduling service for clinics and medical screening days, available at bookings.moveomedical.com. Clinics use it to publish bookable times, collect the details they need before a visit, and manage appointments. You can reach us at yohai@moveomedical.com.

For appointments, the clinic that invited you is the controller of your medical and personal data; we process it on that clinic's behalf in order to run their scheduling.

From patients booking an appointment: the name, email address and phone number you enter, your timezone, the appointment you choose, and the answers you give to the intake questions that clinic has configured — which may include identity details and health-related information the clinic needs for the visit.

From clinic staff and clinicians: name, work email address, role, working hours, and — only if the clinician chooses to connect it — access to their Google Calendar (see below).

Automatically: ordinary technical records needed to run and secure the service, such as request logs and operational telemetry. Our telemetry deliberately records identifiers, counts and timings only — never patient names, contact details or intake answers.

A clinician may connect their Google account so that scheduling reflects their real calendar. We request only the access needed for that, and we use it only as described here:

• Reading free/busy times from the connected calendar, so we never offer a patient a time when the clinician is already booked.
• Creating, updating and cancelling appointment events that this service schedules — including adding a Google Meet link when the appointment is remote, and sending the Google calendar invitation to the patient.

We do not read the content of unrelated calendar entries for any other purpose, and we do not use Google user data for advertising, sell or transfer it, or use it to develop, improve or train generalized AI or machine-learning models.

Medical by Moveo Scheduling's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A clinician can disconnect Google at any time from their profile in the app, which deletes the stored tokens, and can additionally revoke access at myaccount.google.com/permissions. Disconnecting stops all future calendar reads and writes; appointment events already created remain on the calendar until the clinic changes or cancels them.

We share your information with the clinic you are booking with, and with the service providers needed to deliver the service on their behalf: our hosting and database providers, our email provider for confirmations and reminders, our messaging provider where the clinic has enabled WhatsApp reminders, and — where a clinic manages its patient lists in Monday.com — that clinic's own Monday.com workspace. We do not sell personal information.

Traffic is encrypted in transit. Sensitive fields — phone numbers, intake answers and the Google tokens described above — are additionally encrypted at rest, and access to the administrative console is restricted to authorized clinic staff with per-role permissions.

We keep appointment records for as long as the clinic needs them for its own medical and administrative obligations. Incomplete intake submissions expire automatically, and operational telemetry is purged on a rolling retention window.

You may ask to access, correct or delete the personal information we hold about you, or to restrict how it is used. Because a clinic is the controller of appointment and medical data, the fastest route is usually to contact that clinic directly; you can also write to us at yohai@moveomedical.com and we will route the request.

The service is intended for use by adults and by clinic staff. Where a clinic schedules care for a minor, it does so under its own legal basis and with the consent of a parent or guardian.

If we change this policy we will update the date above and, where the change is significant, tell the clinics that use the service.