Your health information is some of the most personal data there is. This policy explains what Mednaire collects, why, who can see it, and the choices you have, in line with Kenya’s Data Protection Act, 2019.
01Who we are
HENEXA LIMITED, a company registered in Kenya, runs Mednaire and is the data controller for your information.
Our data protection officer can be reached at support@mednaire.com.
02What we collect
You give us
- Account: name, phone number, email (optional), country, language and password (stored only as a one-way hash).
- Diet profile: age, sex, height, weight, goal, health conditions, medicines and their times, allergies, foods you avoid and your eating habits. This is sensitive personal data (health data).
- Tracking: meals, water, readings such as blood sugar, blood pressure, HbA1c, cholesterol, creatinine and weight, and plate photos you take.
- Messages: chat messages and photos you send your nutritionist.
- Accountability partner: if you choose to add one, their name and phone number. Please only add someone who agrees to receive a weekly SMS.
Collected when you use Mednaire
- Payments: the M-Pesa number used, amount, date and M-Pesa receipt code. We never receive your M-Pesa PIN.
- Calls: who called whom, when and for how long. Calls are not recorded.
- Health Connect: only the data types you allow (such as steps), read-only.
- Device: a notification token, app version, phone model and error reports, so the app works and we can fix bugs.
We do not collect your location, and we remove location data from plate photos before they leave your phone.
03Why we use it, and on what basis
- To give you nutrition care — matching you with a nutritionist, building and reviewing your plan, reminders, alerts and reports. Basis: our contract with you, and your explicit consent for health data, which you give when you complete your diet profile.
- To take payments and keep records — basis: contract, and legal obligations such as tax law.
- To keep Mednaire safe — preventing fraud, securing accounts and investigating misuse. Basis: our legitimate interests.
- To improve Mednaire — using totals and trends, not individual health records. Basis: legitimate interests.
- To message you — service messages by SMS and push. We only send marketing if you opt in, and you can opt out at any time.
You can withdraw consent for health data at any time by deleting your profile or account. Without it we can’t give you a plan.
04Who can see your information
- Your assigned nutritionist sees your profile, diary, readings, plate photos and messages while your plan is active. They do not see your phone number or your partner’s.
- Mednaire staff see what they need for support, payments and safety. Staff sign in with two-step verification, and opening a patient record is written to an activity log.
- Your accountability partner, if you add one, gets a short weekly summary of how often you logged — never your readings, medicines or conditions.
- Other patients never see anything about you. Mednaire has no groups or public profiles.
- Authorities, only when Kenyan law requires it.
Medicine reminders say “Time for your medicine” by default, so medicine names don’t appear on your lock screen unless you turn that on.
05Service providers
We use these companies to run Mednaire. Each may only use your data to provide its service to us.
| Provider | What for | What they get |
|---|---|---|
| Safaricom (M-Pesa) | Payments, refunds and nutritionist payouts | Phone number, amount |
| Africa’s Talking | SMS codes, reminders and partner texts | Phone number, message text |
| Google Firebase | Push notifications | Device token; message content is sealed |
| Agora | Connecting voice and video calls | Call connection data; audio and video are encrypted phone to phone |
| Anthropic | Recognising food in plate photos | The photo only — no name, number or health details |
| Contabo | Server hosting | Encrypted data stored on our servers |
| Cloudflare | Network security and protection from attacks | Encrypted traffic, IP address |
06Where your data is stored
Our servers are in Germany, in the European Union. Some providers above process data in other countries. When data leaves Kenya we rely on the safeguards in sections 48 to 50 of the Data Protection Act — appropriate contracts and, for health data, your consent — and we choose providers with strong security.
07How we protect it
- Every request between the app and our servers is encrypted with our own protocol on top of HTTPS. Chat and notifications are sealed the same way.
- Plate photos are stored sealed. Data kept on your phone is in an encrypted database.
- Staff access is limited by role, protected by two-step sign-in and logged.
- Backups are encrypted and kept off-site.
No system is perfectly secure. If a breach puts your data at risk, we’ll tell the regulator within 72 hours and tell you without undue delay.
08How long we keep it
- Plate photos: 90 days, then deleted.
- Account, profile, diary and messages: while your account is open. When you delete your account we delete them within 30 days.
- Payment records: 7 years, because tax law requires it.
- Backups: deleted data leaves our backups within 30 days.
09Your rights
Under the Data Protection Act you can:
- be told how your data is used (this policy);
- get a copy of your data;
- correct anything that’s wrong — most of it directly in the app;
- have your data deleted — delete your account in the app, or ask us;
- object to, or restrict, how we use it;
- receive your data in a format you can take elsewhere;
- withdraw consent at any time.
Email support@mednaire.com and we’ll reply within 7 days. If you’re not happy with our answer you can complain to Kenya’s data protection regulator.
10Children
Mednaire is for adults. We only process a child’s data with a parent’s or guardian’s consent, as section 33 of the Act requires. If you think a child has signed up without it, contact us and we’ll delete the account.
11If you’re a nutritionist
To verify you we collect your KNDI licence, national ID or passport, a selfie, KRA PIN and M-Pesa payout number. Only Mednaire’s verification staff see these documents, and each time they are opened it is logged. We keep them while you work with Mednaire and for 7 years after, for tax and regulatory records.
12Changes and contact
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect, and ask again for consent where the law requires.
HENEXA LIMITED, Data Protection Officer
Email: support@mednaire.com
Phone: +254 738 915 502