Patient and User Terms of Use

1. Who operates ShifaTH

ShifaTH is operated by Al Aziz Co., Ltd. (“we”, “us”). Our legal identification and contact address are Al Aziz Co., Ltd. (บริษัท อัล อะซิส จำกัด), Thai registration number 0105567048733; address: 10 Soi Pracha Uthit 54, Yaek 6-2, Bang Mod, Thung Khru, Bangkok 10140, Thailand. Contact us at support@shifath.com; privacy requests may be sent to privacy@shifath.com.

These Terms apply to visitors and Users of ShifaTH. A User may be the patient or may manage another patient's profile with appropriate authority. Participating hospitals and clinics are referred to as “Providers”; their workspace is an “Organization”. Organization participation is governed by its separate platform agreement.

Version: 0.5. This version applies when presented to you for the relevant use or agreement.

2. What ShifaTH provides

ShifaTH helps you discover Providers, submit inquiries and healthcare requests, share selected information, and coordinate related conversations and appointments. Participating Providers offer healthcare services in Thailand.

Providers make their own clinical decisions, choose appropriate professionals and handle their internal routing. ShifaTH does not diagnose, prescribe or replace professional medical care. Read the Medical disclaimer.

ShifaTH is not an emergency service. If urgent medical help is needed, contact local emergency services or seek immediate care where you are.

3. Accounts and authority to act

Public information may be browsed without signing in. Requests, messages, uploads and other account actions require sign-in and the relevant verification and permissions.

Give accurate account and patient information and protect your credentials. Use an account only where you have the legal capacity and permissions required for that activity. Where a patient is a minor or requires a lawful representative, the relevant representative's authority must be established. Choosing “Friend” or a family relationship in the app does not itself establish authority.

You may create or manage another person's profile only with appropriate permission. A verified patient claim may transfer control of the existing profile to that patient. Delegation afterward gives only the permissions granted; it does not transfer ownership or give unrestricted access to every record.

Some identity and ownership procedures require identity documents and a selfie. Providing another person's profile does not itself require that patient to take a selfie. The information and checks required for the particular procedure will be explained before collection.

Report suspected account misuse or disputed authority promptly through support@shifath.com.

4. Requests and Provider choice

You select the patient and the receiving Organization. Hospital request flows may let you choose one, several, or all participating hospitals offered by that flow. In the Clinic request flow, you select one participating Organization at a time. Each Organization receives only its own independent request, conversation, status and authorized information.

A general inquiry may proceed with a basic incomplete patient profile and without passport completion. Other requests may need additional identity information or selected reports; the requirements are shown for that request and Provider. You are not required to upload your entire medical history to make every inquiry.

A submitted request, service selection, professional selection or preferred date does not itself confirm an appointment, a price, a treatment plan or an outcome. Check the Provider's response and the appointment details.

5. Conversations and coordination

You can exchange messages directly with the Provider in a direct conversation. Authorized platform staff may access messages for assigned support, security or audit work; direct messages do not require routine human approval before delivery.

For an Organization using platform coordination, your source messages are visible to you and authorized coordinators; the Organization's source messages are visible to that Organization and authorized coordinators. Coordinators write separate messages, clearly identified as platform messages, to the intended side. They may attach an available conversation file. This service should be identified before you participate; it is not a shared direct chat or a promise of continuous human monitoring.

The platform does not provide your private phone, email or messaging-account details as direct contact information to a Provider, or provide Provider contact details to bypass the platform. A Provider may collect contact details separately during its own external intake. Review the contents of documents you choose to send; a document can itself contain identifiers.

Translations help readers understand content. The original remains available. Confirm clinical instructions, medication names, doses, dates and other consequential details with the Provider if a translation is unclear.

6. Patient information and documents

Read the Privacy Notice before providing personal information. Acknowledging that notice is distinct from agreeing to these Terms and from giving a particular data-processing consent.

Before sending patient data, check the patient, destinations, documents and purpose and actively confirm the applicable submission declaration. A representative's declaration records that representative's statement of authority; it is not presented as the patient's personal consent.

Passport first-send approval applies separately to each Organization and exact current passport version. If you decline, that Organization receives neither that request nor that passport. Other approved destinations may proceed. After successful delivery of the same version to the same Organization, later requests do not send that passport again. A replacement version requires new first-send approval where applicable.

Uploaded private-vault documents are not automatically available to every Provider. A selected delivery may be opened or downloaded by the receiving Organization. A sent file cannot be recalled from an external copy. Deleting the platform copy does not delete a copy already saved independently by the Provider.

You retain your rights in your content. You permit the handling needed for your requested service, subject to the Privacy Notice, applicable permission and law. These Terms do not grant a general right to use private patient material in advertising or unrelated model training.

7. Appointments, care and payments

Check the confirmed date, time, location, preparation requirements and Provider instructions before attending. A reminder or notification is a convenience and does not replace the underlying appointment record. Closing a ShifaTH account does not cancel a Provider appointment.

Clinical services, treatment consent, treatment charges, cancellations and refunds belong to the applicable Provider arrangement. Treatment bills are not paid through ShifaTH. These Terms impose no patient fee or subscription charge.

8. Discovery, reviews and content

Search uses your query, available public Provider content and the filters and sort order you select. Available sorting may include relevance, verified rating, verified-review count or recent publication where applicable. Relevance uses matches between your search and published Organization, service, professional and post content, including supported translations and aliases. Filters limit the eligible results; a rating or review-count sort orders those results by the selected measure. Commercial payments do not influence public ranking. A listing, ranking or review is not a guarantee of clinical quality or suitability.

The User who created the request may review the confirmed visit, including a visit for another managed patient. One eligible attendance record supports one review. The default public author display is anonymous with a verified-visit indication. Do not include patient names, HNs, passports, clinical details or other private information in public reviews.

An unfavorable review is not a violation merely because it is unfavorable. Providers cannot remove a review themselves. You may edit or delete your review using the supported controls; removal updates public display and related summaries.

9. Responsible use

Follow the Acceptable Use Policy. Do not impersonate others, submit data without authority, manipulate reviews, send threats, exploit access controls or engage in automated flooding. Selecting several hospitals, including all hospitals offered in the applicable selection flow, is permitted. Clinic requests select one Organization at a time.

10. Restrictions and ending access

We may apply proportionate restrictions for a material policy breach, fraud, unauthorized data access, security threats, loss of required authorization or a legal requirement. We will identify the reason and relevant review route in writing before or when a restriction is applied, subject to lawful limits on disclosure.

We give at least 30 days’ written notice for ordinary platform-initiated termination. Any shorter period must fit an applicable legal exception, such as a lawful order preventing notice or a clearly specified serious or repeated breach; it is not a general discretion to terminate without reason. You can contest a decision through the complaints process. If a restriction was mistaken or its grounds have been resolved, access will be restored as appropriate.

Restrictions do not erase lawful privacy rights. If you cannot sign in, use support@shifath.com or privacy@shifath.com for review and access requests. Provider suspension prevents new requests to that Provider; historical records remain subject to their own rules.

11. Your account closure and erasure requests

You may request account closure through the supported privacy controls, or contact us for assistance. Closure requires verification and explicit confirmation. It stops ordinary new activity; limited access remains for closure status, blockers, support and related privacy tasks.

An active request or appointment is not by itself a closure blocker. A last-administrator obligation, unresolved profile claim or management issue, or a properly scoped security or retention hold may need resolution. Any applicable unresolved financial obligation is assessed separately.

Account closure and erasure are different actions. Shared conversation history is not automatically deleted when one account closes. Platform-controlled attachments and unnecessary personal content are handled through the applicable deletion or erasure process. Minimum justified audit records may remain.

You may cancel closure before irreversible erasure starts. We do not change or cancel records in a hospital's separate systems and do not certify their deletion.

12. Complaints, responsibility and legal rights

Use the Complaints Policy for platform issues, privacy concerns and review of restrictions. Clinical complaints may also need to be raised with the treating Provider or relevant professional authority.

We remain responsible for our own services and legal duties. Providers remain responsible for their clinical services and obligations. Nothing in these Terms excludes a liability or remedy that cannot lawfully be excluded, or removes statutory consumer, privacy or complaint rights.

Thai law governs these Terms, subject to mandatory rights and jurisdiction rules that apply to you. Disputes may be brought before courts with lawful jurisdiction. Using our complaints process does not prevent contacting a regulator or seeking an available legal remedy.

13. Changes

We will identify the changed version, effective date, material effect and available choices before a material change takes effect. The ordinary advance notice is at least 15 days, longer where reasonably necessary for affected Users or Providers to adapt, subject to applicable legal exceptions. Changes will not be applied retrospectively to remove existing rights unlawfully.

Where renewed agreement or a new privacy acknowledgment is required, we will present the revised document and the relevant choice to you.