A. Data Collection
We collect sensitive personal health data, including medical history, diagnostic images (MRI, CT scans), and lab reports. By using our platform, you provide explicit consent for us to process this data.
B. Cross-Border Data Transfer (Kenya & India)
In compliance with the Kenya Data Protection Act (2019) and the Indian Digital Personal Data Protection Act (2023/2025):
- Purpose: Your data is shared with specialists in India solely for the purpose of providing a second opinion and treatment recommendations.
- Safeguards: We only transfer data to partner hospitals that meet international security standards. Data is encrypted during transmission.
- Legal Compliance: We adhere to the Digital Health Act (2023) of Kenya regarding the storage and sharing of health records.
C. Automated Processing & WhatsApp
- Prescription Delivery: We use an automated system to deliver recommendations and prescriptions to your registered WhatsApp number and Email.
- Security: While we use secure automated tools, users acknowledge that third-party apps like WhatsApp have their own privacy terms.
D. User Rights
Under Kenyan law, you have the right to:
- Access your data.
- Object to the processing of your data.
- Request the deletion of your records (subject to medical record retention laws).
E. Data Retention
We retain your health records only as long as necessary to facilitate your treatment journey or as required by Kenyan and Indian statutory laws for medical record keeping.