Privacy Policy

1. Introduction

Ancestra Health Ltd. ("we", "us", "our") is committed to protecting your privacy and personal health information. This Privacy Policy explains how we collect, use, store, and share your data when you use our telehealth platform.

We serve users across the Africa, Caribbean, and Pacific (ACP) regions and comply with applicable data protection regulations in these jurisdictions.

2. Information We Collect

2.1 Personal Information

• Name, email address, phone number
• Date of birth, gender, blood type
• Profile photographs (if uploaded)
• Professional credentials (for healthcare providers)

2.2 Health Information

• Medical history, allergies, current medications
• Consultation notes and diagnoses
• Prescriptions and lab results
• Vitals and remote monitoring data
• Mental health session records
• Symptom checker submissions

2.3 Usage Data

• Device information and browser type
• IP address and approximate location
• Platform usage patterns and preferences
• Language preferences

2.4 Financial Data

• Health Wallet transaction history
• Payment method details (processed securely by third-party providers)
• Insurance policy information

3. How We Use Your Information

• Providing healthcare services: Facilitating consultations, prescriptions, and care plans
• Account management: Authentication, verification of healthcare professionals
• Communication: Appointment reminders, triage updates, prescription notifications
• Payment processing: Wallet transactions, insurance claims, micro-insurance
• Platform improvement: Analytics, performance optimization, feature development
• Safety & compliance: Fraud detection, regulatory compliance, emergency dispatch

4. Data Storage & Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure password hashing (bcrypt)
• Role-based access controls
• Regular security audits
• Encrypted video consultations via Twilio

Your health data is stored on secure cloud infrastructure. We retain your data for as long as your account is active, or as required by healthcare regulations in your jurisdiction.

5. Data Sharing

We do not sell your personal or health data. We may share information with:

• Healthcare providers: Doctors and nurses treating you through the platform
• Pharmacies: To fulfill prescriptions you have authorized
• Insurance providers: For claims you initiate
• Corporate employers: Only aggregate health metrics for corporate plan members, with consent
• Service providers: Third parties that help operate our platform (hosting, payments, video), bound by confidentiality
• Legal requirements: When required by law or to protect safety

6. Your Rights

You have the right to:

• Access your personal and health data
• Correct inaccurate information
• Delete your account and associated data (subject to legal retention requirements)
• Export your health records (PDF health summary)
• Opt out of non-essential communications
• Withdraw consent for specific data processing activities

7. Community Forums

Content posted in community forums is visible to other users. You can post anonymously. We moderate content to maintain community standards but are not responsible for information shared between users.

8. Children's Privacy

Our platform is not intended for users under 18. Family health profiles for minors must be managed by a parent or guardian through the Family Health Hub feature.

9. International Data Transfers

As we serve the ACP regions globally, your data may be processed in jurisdictions outside your country of residence. We ensure appropriate safeguards are in place for cross-border transfers.

10. Cookies & Tracking

We use essential cookies for authentication and session management. We use analytics to understand platform usage. You can manage cookie preferences through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes via email or in-app notification.

12. Contact Us

For privacy-related inquiries or to exercise your data rights:

Ancestra Health Ltd. — Data Protection
Email: [email protected]