Privacy Policy

Who is responsible?

This platform is provided under the Afri-Mama name. The responsible service operator is Afri-Mama (operator details pending). For questions or requests concerning your personal information, contact the operator through the Help & Support area. A public privacy email must be published before collecting real healthcare information..

Information we handle

• Account information: name, email/phone, role, profile photo and authentication records.
• Optional health information: pregnancy information, menstrual cycle entries, child information, personal care journals, appointments and uploaded medical records.
• Communications: messages, chat attachments, community posts and support requests.
• Transactions: basket, delivery details, order history and payment confirmations. Payment credentials are managed by the configured payment provider; the platform stores transaction references and statuses.
• Technical information: security logs, session identifiers and basic device/network information needed to operate and protect the service.

Why we use information

We use relevant information to provide requested account, care, appointments, communication and marketplace functions; manage access permissions; respond to support requests; safeguard the service; meet applicable legal obligations; and, where required, obtain your consent. Health information is especially sensitive and should not be added unless you understand the purpose and who can access it.

Who may access information?

Access is based on account role and platform permissions. Mothers can choose whether to grant individual clinicians access to their health records. Messaging and appointments may require the other participant to see information necessary to provide the requested service. Sellers and delivery staff receive only the order information needed for fulfilment. Service providers such as hosting, email and payment providers may process limited information to operate the service. Do not assume a clinician can access your private medical files merely because you booked an appointment.

Sharing and transfers

We do not intend to sell personal health records. Information may be shared where necessary to deliver a service you request, with service providers acting on instructions, with your permission, or when lawfully required. Hosting and other providers may process information outside Uganda; the service operator must assess any such transfers and apply applicable safeguards before launch.

Retention and deletion

Information should be kept only as long as needed for the specific purpose, required health-record or financial-record retention, dispute resolution, and applicable law. Exact retention periods must be published by the operator before live service. Deletion requests may be limited where preservation is legally required; sensitive records must be handled securely during deletion.

Your choices and rights

Depending on applicable law, you may request access to your personal information, correction of inaccurate information, restriction or objection to processing, withdrawal of consent where consent is relied upon, and deletion where permitted. You may manage your profile and certain clinician-sharing permissions within the app. Please send requests to the privacy contact identified above; identity verification may be required to protect your information.

Security

Afri-Mama uses account authentication, access restrictions and protected storage paths. No system can promise absolute security. The service operator must configure HTTPS, database backups, strong passwords, secure hosting, monitoring and incident-response arrangements before processing real health information.

Children and medical decisions

Information about children and babies requires appropriate authority from a parent or guardian and additional care. Afri-Mama's self-tracking features are informational tools and are not substitutes for diagnosis, emergency help or direct medical care. In a medical emergency, contact a qualified healthcare professional or emergency service.

Updates and oversight

We may update this policy when the service or applicable requirements change. We will revise the date above and provide appropriate notice of material changes. The platform operator is responsible for reviewing this notice against Uganda's Data Protection and Privacy Act and all applicable requirements before launch.