Your Privacy
Matters to Us
We are committed to protecting your personal and medical information. This policy explains how we collect, use, and safeguard your data.
Information We Collect
Personal Information
When you create an account or use our services, we may collect your name, email address, phone number, date of birth, and other contact details necessary for healthcare management.
Health & Medical Data
To provide healthcare services, we collect medical history, diagnoses, prescriptions, lab results, appointment records, and other clinical data shared by you or your healthcare provider.
Wearable & Connected Health App Data
If you choose to connect Apple Health or Google Health Connect in our mobile app, we read your heart rate, steps, sleep duration, blood oxygen, blood pressure, weight and height. This is optional and off unless you turn it on. See “Connected Devices & Health Apps” below.
Usage Data
We automatically collect information about how you interact with our platform, including pages visited, features used, device information, browser type, and IP address.
How We Use Your Information
Healthcare Services
We use your information to facilitate appointments, consultations, diagnoses, prescriptions, and other healthcare services between you and your providers.
AI-Powered Features
With your consent, we use anonymized and aggregated data to power our AI diagnostic tools, health predictions, and personalized care recommendations.
Communication
We may use your contact information to send appointment reminders, health alerts, platform updates, and respond to your inquiries.
Improvement & Analytics
We analyze usage patterns to improve our platform, develop new features, and ensure the quality and safety of our services.
Data Protection & Security
Encryption
All data transmitted between your device and our servers is encrypted using TLS 1.3. Data at rest is encrypted using AES-256 encryption standards.
Access Controls
We implement strict role-based access controls ensuring only authorized healthcare professionals can access relevant patient data.
Compliance
Our platform is designed to comply with HIPAA, GDPR, and local healthcare data protection regulations applicable in Rwanda and internationally.
Connected Devices & Health Apps
What We Read, and Only What We Read
In the Be Okay mobile app you may connect Apple Health (iPhone) or Google Health Connect (Android) so readings from your smartwatch, fitness band or blood pressure monitor appear in the app. We read only heart rate, steps, sleep duration, blood oxygen, blood pressure, weight and height. We read no other category of health data. Connecting is entirely optional and remains off until you enable it.
We Only Read, Never Write
Be Okay never writes to, modifies or deletes anything in Apple Health or Google Health Connect. Access is read-only.
How This Data Is Used
These readings are stored in your medical record and shown to the doctor treating you, so they can review them during and between consultations. We also record which app or device produced each reading, so your doctor can distinguish a measurement taken by a device from one you entered by hand.
Never Used for Advertising
We never use data obtained from Apple Health or Google Health Connect for advertising or marketing, never sell it, and never share it with advertisers, data brokers, or any third party outside your care.
Withdrawing Access
You can revoke access at any time in your Apple Health or Google Health Connect settings, and Be Okay immediately stops reading new data. Readings already saved to your medical record remain part of that record; you can request their deletion using the contact details below.
Data Sharing & Third Parties
Healthcare Providers
We share relevant medical data with your authorized healthcare providers, hospitals, and specialists to facilitate your care.
Service Providers
We may share data with trusted third-party services that help us operate our platform (hosting, analytics, communication), under strict data processing agreements.
Legal Requirements
We may disclose information when required by law, court order, or governmental regulation, or to protect the rights and safety of our users.
No Sale of Data
We never sell your personal or medical data to advertisers, data brokers, or any third parties for commercial purposes.
Your Rights
Access & Portability
You have the right to access your personal data and request a copy in a portable format at any time through your account settings.
Correction
You can request correction of any inaccurate or incomplete personal information we hold about you.
Deletion
You may request deletion of your account and personal data, subject to legal retention requirements for medical records.
Consent Withdrawal
You can withdraw your consent for optional data processing (such as AI features) at any time without affecting the core healthcare services.
Contact Us
Questions or Concerns
If you have questions about this privacy policy or how we handle your data, please contact our Data Protection Officer at privacy housemajorrwanda@gmail.com
Address
Be Okay Health, Kigali, Rwanda. Phone: +250 788 258 922.