Learn how NephroSasa Rwanda protects your personal and medical information.
We collect health-related data including blood pressure, blood sugar, vitals history, AI risk scores, and doctor-patient QR sharing metadata necessary to operate the platform.
Your data is used strictly for generating AI risk assessments (using our Random Forest model) and enabling authorized doctor review. It is not used for any purpose beyond the platform.
Your data is stored securely using Supabase PostgreSQL with Row Level Security. We employ JWT authentication with token blacklisting. No data is sold or shared with third parties.
AI risk scores are decision-support tools only and do not constitute a clinical diagnosis. The model has a false negative rate of ~10.8%. Doctor review is strictly required for any flagged cases.
You have the right to access, correct, or request the deletion of your personal and health data. You also maintain the right to withdraw your consent at any time.
Only RMDC-verified doctors can access the platform. Furthermore, doctor access is scoped per-patient and strictly requires explicit QR consent from the patient. There is no open database access.
Data collected during the research testing phase of this project is retained for 3 months following the researcher's graduation, then securely destroyed, in line with ALU's ethics approval. For registered users, vitals and account data are retained for as long as the account remains active. Users may request deletion of their data at any time by contacting us.
For any questions regarding your data or this policy, please contact: i.pedro@alustudent.com