1. Introduction
Dikoka is committed to protecting the privacy of individuals whose data is processed via its mobile and web applications[cite: 6]. This Privacy Policy describes how Dikoka collects, uses, stores, shares, and protects Personal Information when a user (a "User") or a medical center (a "Center") interacts with our platform, including via WhatsApp, USSD (in Ghana), or SMS[cite: 7].
2. Definitions
Any information relating to an identified or identifiable individual[cite: 9].
Patients whose data is processed via Dikoka, or administrative users at the Center[cite: 10].
The healthcare facility or provider using the Dikoka Platform[cite: 11].
Includes the mobile app, web app, and related services provided by Dikoka[cite: 12].
3. Data Controllership
Dikoka Acts As:
- Data Processor for patient health data entered by Centers[cite: 15].
- Data Controller for administrative account data (email, user ID, access logs) and analytics collected on Platform usage[cite: 16].
Each Center remains the Data Controller for any patient data they input, including sensitive health data[cite: 17].
4. Data Collected
| Category | Data Points [cite: 19, 20] |
|---|---|
| Identity & Contact | Patient name, phone number, date of birth, gender |
| Vital Signs | Temperature, blood pressure, height (if entered) |
| Scheduling | Subject of appointment, visit timestamps |
| Practitioner | Doctor's name, medical ID, email, username |
| Technical | IP address, device type, login history, WhatsApp/USSD metadata |
5. Purposes of Data Use
Enable appointment scheduling and reminders [cite: 23]
Record patient attendance and session details [cite: 24]
Provide analytics to the Center [cite: 25]
Improve Platform functionality and usability [cite: 26]
Provide support and respond to inquiries [cite: 27]
Detect and prevent security breaches or misuse [cite: 28]
6. Legal Basis for Processing
8. Data Location
Data is hosted on secure cloud infrastructure[cite: 39]. Standard contractual clauses are used to safeguard international transfers during support or analytics processing[cite: 40].
9. Data Retention
- Patient Data: 3 years after last appointment [cite: 42]
- Admin Records: 1 year after deactivation [cite: 43]
- Anonymized Data: Retained indefinitely [cite: 44]
10. Data Security Measures
In the event of a breach, affected parties will be notified in accordance with applicable laws[cite: 51].
11. Cookies and Tracking
The Platform may use session cookies and analytics tools to enhance experience[cite: 53]. These cookies do not collect identifiable health information[cite: 54].
12. User Rights
Users have the right to[cite: 56]:
13. Children's Data
The Platform is for healthcare providers. No services are provided directly to minors. Centers remain responsible for parental consent[cite: 64, 65].
14. Policy Changes
Dikoka reserves the right to update this Privacy Policy. Updates will be posted with a new effective date[cite: 66, 67].
15. Contact Information
Dikoka Health Technologies, Inc. [cite: 70]
16192 Coastal Highway, Lewes, DE 19958 [cite: 70]
Email: ael@dikoka.com [cite: 69]