Privacy Policy

# Privacy Policy

**Last Updated: 17 February 2026**

## 1. Introduction

NotifyMe ("we," "our," or "us") operates NotifyMe (the "App"), a healthcare communication platform designed to facilitate one-way communication from healthcare providers to patients.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App. We are committed to protecting your privacy and complying with applicable data protection laws, including the Protection of Personal Information Act (POPIA) of South Africa.

## 2. Information We Collect

### 2.1 Information You Provide Directly

**Healthcare Provider Information:**
- Full name and professional credentials
- Medical license number and verification details
- Professional contact information (email, phone)
- Practice or clinic information
- Account and service information
- Specialty and areas of practice

**Patient Information:**
- Full name
- Contact information (email, phone number)
- Communication preferences
- Consent and authorization records

**Communication Content:**
- Messages sent from Providers to Patients
- Appointment information
- Health-related information shared through the App

### 2.2 Information Collected Automatically

**Device and Usage Information:**
- Device type, operating system, and version
- Unique device identifiers
- IP address and approximate location
- App version and settings
- Usage patterns and feature interactions
- Time stamps of activities
- Error logs and diagnostic information

**Technical Information:**
- Browser type and version
- Network connection type
- Performance and analytics data

### 2.3 Information from Third Parties

- Account management information from service providers
- Authentication data from sign-in providers

## 3. How We Use Your Information

### 3.1 To Provide and Maintain the Service

- Create and manage user accounts
- Facilitate communication between Providers and Patients
- Manage account access and service delivery
- Deliver messages and notifications
- Provide customer support

### 3.2 To Improve and Develop the Service

- Analyze usage patterns and trends
- Develop new features and functionality
- Improve user experience and performance
- Detect and prevent technical issues

### 3.3 For Security and Compliance

- Prevent fraud and unauthorized access
- Ensure platform security and integrity
- Comply with legal obligations and regulations
- Enforce our Terms and Conditions
- Respond to legal requests and prevent harm

### 3.4 For Communication

- Send service-related notifications
- Provide important updates about the App
- Respond to inquiries and support requests
- Send account and service-related information

## 4. Legal Basis for Processing (POPIA Compliance)

Under the Protection of Personal Information Act (POPIA), we process your personal information based on:

- **Consent:** Where you have given explicit consent for specific processing activities
- **Contract:** Where processing is necessary to fulfill our contract with you
- **Legal Obligation:** Where processing is required by law
- **Legitimate Interests:** Where processing is necessary for our legitimate business interests, balanced against your rights

## 5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

### 5.1 With Service Providers

We share information with third-party service providers who perform services on our behalf:
- Cloud hosting and storage providers (Supabase)
- Account management services
- Push notification services (Firebase Cloud Messaging)
- Email notification services

All service providers are contractually bound to protect your information and use it only for specified purposes.

### 5.2 For Legal Requirements

We may disclose information when required by law or to:
- Comply with legal processes, subpoenas, or court orders
- Respond to government or regulatory requests
- Enforce our Terms and Conditions
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Protect the rights and safety of our users and the public

### 5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

### 5.4 With Your Consent

We may share information with third parties when you explicitly authorize us to do so.

## 6. Data Security

We implement industry-standard security measures to protect your information:

- **Encryption:** Data is encrypted in transit (TLS/SSL) and at rest
- **Access Controls:** Role-based access restrictions and authentication
- **Network Security:** Firewalls, intrusion detection, and monitoring systems
- **Regular Audits:** Security assessments and vulnerability testing
- **Incident Response:** Procedures for detecting and responding to security incidents

However, no system is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

## 7. Data Retention

### 7.1 Retention Periods

- **Active Accounts:** We retain data for as long as your account is active
- **Provider Records:** Provider data retained for 5 years after account closure for legal and compliance purposes
- **Patient Communications:** Message history retained for 5 years or as required by law
- **Account Records:** Account data retained for 5 years for legal and compliance purposes
- **Logs and Analytics:** Technical data retained for 12 months

### 7.2 Deletion Procedures

When data is no longer needed, we securely delete or anonymize it using industry-standard methods.

## 8. Your Rights and Choices

Under POPIA, you have the right to:

### 8.1 Access and Portability
- Access your personal information
- Request a copy of your data in a portable format
- Review what information we hold about you

### 8.2 Correction and Updates
- Update your account information through the App settings
- Request correction of inaccurate information
- Contact us to update information you cannot change yourself

### 8.3 Deletion
- Request deletion of your account and personal information
- Note: Some information may be retained as required by law or for legitimate business purposes

### 8.4 Objection and Restriction
- Object to processing of your information for certain purposes
- Request restriction of processing in certain circumstances

### 8.5 Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time, though this will not affect the lawfulness of processing before withdrawal.

### 8.6 Information Regulator
South African users have the right to lodge a complaint with the Information Regulator (South Africa).

## 9. Children's Privacy

The App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

## 10. International Data Transfers

### 10.1 Data Storage Location

Your information may be stored and processed in South Africa or other countries where we or our service providers operate.

### 10.2 Transfer Safeguards

For transfers outside of South Africa, we use appropriate safeguards as required by POPIA to ensure your data is protected.

## 11. Cookies and Tracking Technologies

### 11.1 Types of Cookies We Use

- **Essential Cookies:** Required for the App to function
- **Analytics Cookies:** Help us understand how users interact with the App
- **Preference Cookies:** Remember your settings and preferences

### 11.2 Your Cookie Choices

You can control cookies through browser and App settings. Note that disabling certain cookies may affect App functionality.

## 12. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

## 13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on the App
- Sending an email notification to registered users
- Displaying a prominent notice in the App

Your continued use of the App after changes take effect constitutes acceptance of the updated Privacy Policy.

## 14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

**NotifyMe**
Email: support@notify-me.net

## 15. Effective Date

This Privacy Policy is effective as of 17 February 2026 and will remain in effect except with respect to any changes in its provisions, which will be in effect immediately after being posted on this page.

## 16. Your Acceptance

By using the App, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.