Indashyikirwa (Indy) Privacy Policy

2.1 Personal details

When you register to Afya Pap, we will ask you for the following information:

• Your name

• Mobile number

• Your date of birth

• Your gender

• Your partner

• Your facilitator

The information you give us must be accurate. If you give us information about yourself or another person, you're confirming that you're authorized to do so.

2.2 Intimate Partner Violence (IPV) details.

When you use our services, we may collect data about your social condition, your intimate partner violence conditions and any therapy assigned to you and your intimate partner. Some of the data we may collect will include:

• Social condition:

  • Type of intimate relationship

  • Marital status

  • Children involved in this relationship.

  • Your vocation

  • Your type of income

  • Food security

  • Sources of IPV

  • Use of substance and any abuse

  • Religious inclination.

• Medical condition:

  • History of Injuries due to IPV

  • Medical interventions sought.

  • Medication being used.

  • State of mental health

  • Any other health challenges you may be having and the intervention you are taking.

Some of this information will come directly from you, while others may come from your interaction with our app or with our councilors and doctors.

If you download Indashyikirwa and register for the service, your account data including your personal and health data will be saved in our system on the cloud.

You personal and social data will be visible only to your facilitator assigned to you, while if you use Afya Pap the health service, your data will only be visible to the doctors. will be visible to Afya Pap medical doctors as well as to your personal doctors through the Afya Pap caregiver portal.

Details of your interactions with us

We also store copies of your consultations with councilors and facilitators for purposes of quality control and service improvement of our services. This is to give us an easy way to perform quality checks of consultations in order to ensure both our service level agreements and quality standards are met.

We will also request you for an optional choice to allow us to collect product glitches in order to help us to improve our product.

We will keep your personal, your social, your health and medical data secure by applying technical and organizational measures to protect it.

Technical information and analytics

When you use our app, our portals or visit our websites, we may collect the following data, where this is allowed by your device or browser settings:

• Login details

• Operating system

• The make and model of your device

• Resettable device identifiers

• Time zone, language and location settings

• Your mobile network provider and your location (based on your IP address)

• The IP address used to connect your mobile phone or other device to the internet

• Images and other files shared with our doctors

• Your browser information, such as Google Chrome, Apple Safari, Firefox etc.

• Information about your visit to our website or use of our app, for example when you first visited the site or how many times you've visited

• Information about the products or services you viewed or used

• App response times and updates

• Information about your interactions, like what notifications you opened

• Any phone number used to call our customer service number

• We may work with other partners that provide us with analytics and advertising services. This is to:

  • Help us understand how people interact with our services

  • Provide the adverts for our services on the internet

  • Measure the performance of our services and our adverts

Your personal, social and health information is not used for these advertising services.

2.4. Cookies

WCurrently we do not use cookies but soon we will and we will notify you on the same. Cookies are files saved on your phone, tablet or computer when you visit a website. They collect information about how you use the website and the pages you visit. We do not use cookies on your medical or health information.

2.5. Information from third-party services

Soon it will be possible to connect your social media accounts with our services. For example, you can sign up for Indashyikirwa using your Facebook or you Google login details. If you choose to do this, we'll receive the following information about you from the third party:

• Name

• Email address

• Username or ID

If you use login details from third parties, they will also process your login data, and they are solely responsible for handling this.

If you have questions about the way your data has been handled, please contact mailto info@baobabcircle.com

3.1 Providing you with a service

We need your personal information to enter into a contract with you and deliver services.

If you are the one paying to use our service, we use your financial details to charge you if you use our paid service or buy our products. But if are sponsored to use the service, no financial details will be collected from you. In the

We use your personal and social information to provide you with service to mitigate IPV issues as well as to provide you with health services. We also use your health data to provide you with health services.

This information is based on:

• Providing you or planning for healthcare services in our 'legitimate interest'

• Performing tasks in the public's interest

• Your consent (for example, when you use our service and agree to share information with your doctor)

• The health and medical information we use includes information from your:

  • Consultations, like notes, recordings, and transcripts

  • Use of products like Symptom Checker

  • Your previous teleconsultation with Afya Pap medic

• We might share this information with other health services. This is so we can give you the right care, including when it's in your vital interests. These services include:

  • Your doctor or medic, if you use our private service

  • Our NHS or clinical service partners

  • Referral services like therapists, pharmacists and hospitals

We use your location to recommend services near you, like pharmacies and hospitals.

Depending on how you access our services, we get your location from your phone, internet browser, IP address or postal address.

3.2 Improving Indashyikirwa services

If you've given explicit consent, we may use your information to improve our services, including our artificial intelligence systems. This helps us deliver better service to you and other Indashyikirwa users.

We remove details that could identify you from this information, such as your name, address and contact details. These are called 'personal identifiers. We use anonymized data to improve our service.

The social, health and medical information we collect (with your personal identifiers removed) includes information from your:

• IPV incidences

• Medical records

• Consultations, like notes, recordings and transcripts

• Use of products like Symptom Checker and Smart glucometer or Pressure Meter

This doesn't involve making any decisions which would have a big effect on you. We only use this information to deliver a better experience to you and other Indishyikirwa users. This explicit consent relates to when we use your personal data.

3.3 Helping with research

If you've given explicit consent, we use your data for IPV research. For example, to better understand IPV behaviour, risks, and outcomes.

We aim to publish our research results in peer-reviewed journals or by working with academia or government.

We may conduct research with partner organisations such as universities, ministries of health or other academic institutions within legitimate ethical approvals from recognized research approver.

The type of information we collect includes your:

• IPV incidences

• Medical records

• Consultations, like notes, recordings and transcripts

• Use of products like Smart glucometers, pressure meter, medication

We remove any details that could identify you from this information. This includes your name, address and contact information.

Our research follows the Declaration of Helsinki ethical principles, which were developed by the World Medical Association.

As part of our research, we may use your contact details to invite you to take part in research or clinical trials. These trials might be about things like how frequently we give you medicine reminders or what exercise has the greatest impact on mood.

3.4 Using your data when it's in our 'legitimate interest'

We sometimes analyse your data and how you use our products to help us manage our business better.

This could be things like fixing bugs in our app, understanding current user trends, or working out what users might want in the future.

This doesn't involve making any decisions which would have a big effect on you. If this information is used alongside your personal data, we will make sure that our interests never come before your rights.

3.5 Keeping you up to date

We may contact you when marketing our service. This includes sending you product updates, surveys and marketing information. You can opt-in or out at any time by going to 'Settings' and 'Privacy Controls' in the app. You can also choose if you want to get app notifications in your device settings.

As part of providing, you with a our service or public service, we may send you relevant information by on-app messages, SMS, email or other ways. For example, we may send you alerts or invite you to book an appointment for health service.

3.6 Regulating the quality and safety of our service

We use your information for the personalisation of our services, picking trends, , safety, training, regulatory, and compliance purposes.

This means that:

• If we're legally required to, or asked by a regulator, we may need to share your information with regulatory bodies like the Ministries of Health, Medicines and Healthcare Products Regulatory Agencies or others within our countries of operations.

• We may audit how you use our services, for example, to review the quality of results provided by our products.

4.1 Personal health and medical information

Your data is stored on secure servers. This includes information like

• Your personal data

• Your IPV related issues

• Your health data

• Your healthcare information received through consultations

• Information about your medications

• Any information about a diagnosis of illness or other problems

If you've chosen a password or authentication method to access the app, you're responsible for keeping this password and/or authentication method confidential. Please don't share it with anyone.

We encrypt data transmitted to and from our apps websites and portals. Once we have your information, we use strict procedures and security features to try to prevent unauthorised access. We will take all steps reasonably necessary to make sure that your data is treated securely.

4.2 Credit and debit card information

We don't store any of your credit or debit card information. Payments are processed through a third-party payment provider that follows strict industry data security standards. These are known as Level 1 Payment Card Industry (PCI) data security standards.

Any payments you make are encrypted using SSL technology (which converts the information into code to stop fraud).

4.3 Where we store and process your data

Your data may be processed or stored on a secure cloud.

This will always be in line with applicable data protection lawful mechanisms (such as appropriate contractual terms) and subject to strict safeguards.

For more information on how we protect your data, contact us by email at: info@baobabcircle.com

5.1 Partner organizations

Some partner organizations sponsor or facilitate your access to Afya Pap health services. We may share your personal data with them so that they can process it for us to provide these services.

These partner organizations` can only use your data based on our instructions and they cannot use the data for their own purposes.

They also have to act in line with data protection laws and contractual terms that specify how they can process data on our behalf.

5.2 Partners

If you use our services through your health insurer or one of our partners, which may be your employer, we may share some of your information with them. This could include your:

• Name

• Date of birth

• Email address

• Policy number

• Location

We may also share with them the fact that you have registered with us and used our services. But we will not share any details about your consultations or medical records unless you consent to this.

5.3 Other healthcare providers

If it's needed for your treatment or care, we will share your data with your other health care providers. These include:

• Our clinical partners who we work jointly with or in connection with to provide you with a service

• Your Insurance details

• Specialist referral services

• Therapists

• Pharmacists

• Hospitals

• Accident and emergency services

• Testing service providers

• Diagnosis centres chosen by you for things like X-rays and other imaging

• Other health and care bodies

By law, we may need to share information with these services to safeguard either you or others or conduct a public task (in the case of MOH services). We may need your consent, or to rely on our legitimate interests to provide you with healthcare before we can share this information.

5.4 Protecting public health

We might process your health data to protect public health. Your data could be vital to help research, monitor, track and manage public health emergencies, like pandemics.

In a public health emergency, your information may be shared in a way that is appropriate and lawful with organisations such as:

• MOH

• CDC Africa

• Public Health within Our markets

• Local authorities

• Health organisations

We will limit the use or sharing of data to the period of the emergency and will only share data to the extent necessary.

5.5 Aggregated or anonymous data

We may show on our website or share with our commercial partner data that does not personally identify you, but which shows general trends. This is 'aggregated' data and is not personal data.

This might include, for example, the number of users of our service or trends with a particular condition.

5.6 Statistical data in the public's interest

We may also use data that does not identify you personally as part of statistics that we collect on certain types of illness, symptoms and conditions. This might include us contributing medical data and participating in disease surveillance through institutions like CDC Africa. We may show these summarized statistics to our partners. They will always be anonymized. This is so we can improve our medical knowledge and help our members and the general public.

You can contact us directly if you do not want your data to be used in this way by email at: info@baobabcircle.com