Privacy, kept simple.

What this app uses

Patients receive a queue number, selected service, visit status, room assignment and timestamps. No patient account is required. Names and phone numbers are optional and disabled by default. A facility that enables them must explain why. Do not enter medical information.

Who can see it

Authorized staff in the location can see optional details. Public entrance pages and waiting-room displays show numbers and room destinations. A private browser cookie authorizes access to your own tickets; your number alone grants no access.

Necessary browser storage

We use necessary session cookies for staff sign-in and private patient/display access, browser storage for local preferences and safe request retries, and no advertising trackers. Keep the original browser to resume your ticket. Clearing its cookies removes that browser’s ticket access.

Retention choices for review

The proposed defaults remove optional patient details within seven days after visit closure, expire ticket access 24 hours after session closure, and retain de-identified operational events for 90 days. Backup expiry differs from immediate deletion. Final billing retention follows the merchant’s approved accounting policy.

Your choices

You can join without optional details and leave a waiting or called queue. Closing a browser does not cancel your ticket. Ask the facility’s staff about information access or deletion. The live operator’s support identity will be added before launch.

Staff accounts

Staff account email supports sign-in security, verification, invitations and recovery. The local test environment captures staff security emails in a development inbox.

Optional WhatsApp alerts

When the clinic enables WhatsApp, patients can separately consent and verify their WhatsApp number by sending a ticket connection code. Twilio and WhatsApp process that number and queue messages. Messages include the clinic name, waiting number and room, but no medical results or patient names. Descriptive room names can reveal the type of service. Messages may appear on your phone’s lock screen. Reply STOP or stop alerts from your ticket at any time; a message already in transit may still arrive.

WhatsApp connection details and associated message records are deleted within the configured personal-detail retention period after visit closure, or eight days after connection, whichever is earlier. You can also ask the clinic owner to delete them. The local capture mode uses fictional phone slots and does not contact WhatsApp.