Legal
Privacy Policy
How we collect, use, and protect your personal and health information. Last updated: 1 September 2026.
1. Information we collect
We collect identity information (name, phone number, date of birth), clinical information (vital signs, lab and imaging results, prescriptions, medical records, allergies), appointment and consultation data, and payment metadata required to process mobile money transactions. We do not store full mobile money PINs or card numbers.
2. How we use your information
Your information is used to deliver care (consultations, prescriptions, lab and referral coordination), maintain your medical record, communicate appointment and care reminders via SMS and WhatsApp, and meet our regulatory reporting obligations to Ghana Health Service and NHIA where applicable.
3. Legal basis and Ghana Data Protection Act, 2012 (Act 843)
We process personal and health data in accordance with the Ghana Data Protection Act, 2012 (Act 843). Health data is treated as a special category of data and is only accessed by authorized clinical and administrative roles on a need-to-know basis.
4. Who can access your data
Access is role-restricted: your treating clinicians and the facility staff directly supporting your care can view relevant clinical records. Administrative and platform staff have narrowly scoped access limited to operational support and are bound by confidentiality obligations. We do not sell personal or health data.
5. Data security
The Platform uses encrypted transport (TLS), JWT-based authentication, role-based access controls, request throttling, and audit logging of access to sensitive clinical actions such as critical lab result review and prescription dispensing.
6. Data retention
Medical records are retained for the period required by Ghanaian healthcare recordkeeping regulations and professional clinical standards, after which retention is reviewed in line with applicable law.
7. Your rights
Subject to applicable law, you may request access to, correction of, or clarification about your personal data held on the Platform by contacting us through the Contact Us page. Certain clinical records may be subject to retention requirements that limit deletion.
8. Third-party processors
We use vetted infrastructure and communication providers (including SMS and WhatsApp Business messaging providers and mobile money payment processors) strictly to deliver Platform functionality, under data processing agreements consistent with Act 843.
9. Changes to this policy
We may update this Privacy Policy periodically. Material changes affecting how health data is used will be communicated through the Platform before taking effect.
10. Contact
For privacy questions, data access requests, or to report a suspected data incident, please reach out through the Contact Us page.