Privacy Policy

Last updated: June 2026

1. Information We Collect

Dawa360 collects information necessary to provide healthcare services, including: patient demographics, medical history, vital signs, diagnoses, prescriptions, lab results, appointment records, and billing information. We also collect contact information for clinic staff and administrators.

2. How We Use Information

Patient data is used solely for healthcare delivery within your clinic or hospital. Data is not shared across organizations without explicit consent. Platform administrators have access only to operational metrics, not individual patient records.

3. Data Storage & Security

All data is stored in Supabase PostgreSQL with Row Level Security (RLS). Each clinic's data is isolated. Data is encrypted in transit (HTTPS) and at rest. Video consultations use encrypted Jitsi connections.

4. Data Retention

Clinical records are retained per Kenyan healthcare regulations. You may request data export or deletion by contacting your clinic administrator or our support team.

5. Contact

For privacy questions: support@dawa360.co.ke