Privacy Policy

1. Introduction

Welcome to AfyaDepo, operated by AfyaSave Limited. We are committed to protecting your privacy and ensuring that your personal and medical information is handled in a safe and responsible manner in accordance with the laws of the United Republic of Tanzania.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, delivery address.
• Health Information: Prescriptions uploaded, lab test results, and medical history shared during consultations.
• AI & Triage Data: Symptoms, triage responses, and chat transcripts generated through our AI Digital Midwife and Smart Quizzes.
• Payment Information: Transaction details securely processed by our payment partners (e.g., Flutterwave). We do not store your full credit card details.

3. How We Use Your Information

We use the information collected to:

• Provide and deliver medical products and home-based care services.
• Process payments securely.
• Communicate with you regarding your orders, lab results, or consultations.
• Improve our platform and services.

4. Data Security

We implement strict security measures to protect your personal and medical data. All health-related documents, including prescriptions, are encrypted and accessible only to authorized clinical staff and pharmacists for fulfillment purposes.

5. Sharing of Information

We do not sell your personal information. We only share necessary information with verified healthcare providers, delivery personnel (for fulfilling orders), and secure payment processors.

6. Data Storage and Cross-Border Transfers

To provide high-availability and secure services, your personal and medical data is encrypted and securely stored on AfyaDepo Cloud Servers, which may be hosted on infrastructure located outside the United Republic of Tanzania. By using our services and providing explicit consent at the point of collection, you agree to this cross-border transfer of data. We ensure our cloud providers comply with international security standards (e.g., SOC 2) to maintain the adequate protection of your data as required by the Personal Data Protection Act of 2022.

7. Data Retention

We retain your personal and health data only for as long as necessary to provide our services, comply with medical record-keeping laws, or resolve disputes. Once the retention period expires, your data is securely deleted or anonymized.