Privacy
Privacy Policy
Health information deserves stricter handling than ordinary data. This explains how ClinicYangu treats yours.
What we collect
Account details (name, email, phone, county, preferred language), the health concerns you choose to describe, consultation records created by clinicians, files you upload, and technical records such as sign-in times and device information.
Why we collect it
To give you access to qualified clinicians, to keep an accurate care history, to protect your account, to meet legal and professional record-keeping duties, and to improve the safety of the service.
Who can see your health information
You, and the clinicians involved in your care. Support and administrative staff may access records only where necessary for a specific task, and every such access is written to an audit trail.
Consent
You are asked to consent when you create an account and, separately, before a telehealth consultation. Consent records show what you agreed to, the version, and when. You may withdraw consent, though this may mean we cannot continue providing the service.
Storage and security
Information is encrypted in transit and at rest. Access is role-based and least-privilege. Clinicians and administrators use additional sign-in protection. Sessions expire, and you can sign out of all devices.
Retention and deletion
Clinical records are retained for the period required by Kenyan professional and legal obligations. You may request a copy of your data or the deletion of information not subject to a retention duty.
Your rights
You may access your data, correct it, object to certain processing, request deletion, and complain to us or to the Office of the Data Protection Commissioner in Kenya.
Contact
Privacy questions and requests go to our privacy team through the Help & Support page.
This policy is drafted for a Kenyan context and is pending review by qualified Kenyan legal and data-protection professionals before production launch.