Imani Health Privacy Policy

We use the information we collect to:

• Provide healthcare services: facilitate appointment booking, telehealth consultations, home visits, prescriptions, laboratory orders and results, admissions and the maintenance of your medical records.
• Support continuity of care: make your relevant health information available to the healthcare providers and organisations you book with or grant access to.
• Process payments: handle bookings, subscriptions, wallet transactions, refunds and invoices through authorised payment processors.
• Communicate with you: send appointment reminders, test-result notifications, account and security alerts, and respond to support requests.
• Verify healthcare professionals: confirm the identity, licences and credentials of providers and organisations on the platform.
• Maintain safety and security: detect and prevent fraud, abuse and security incidents, and protect patients, healthcare professionals and other users.
• Comply with the law: meet healthcare, financial, tax and other legal and regulatory obligations.
• Improve the Service: analyse usage to develop, test and improve features, and — with your consent where required — send you marketing communications.

We do not sell your personal information. We may share your information with:

• Healthcare Providers and Organisations: When you book an appointment, request a consultation or grant access to your records, we share relevant information — such as your name, contact details, appointment details and applicable health information — with the doctors, nurses, pharmacists, hospitals, clinics or laboratories involved in your care.
• Payment Processors: We use authorised third-party payment processors to handle your transactions. We share the payment information necessary to facilitate payments, subscriptions and refunds.
• Third-Party Service Providers: We may use other third-party companies to perform functions on our behalf, such as cloud hosting, data analytics, communications (e.g. SMS, email and push notifications), telehealth infrastructure and customer support. These providers have access to your information only to the extent necessary to perform their functions and are contractually obligated to maintain its confidentiality.
• For Legal Reasons: We may disclose your information if we believe it is necessary to comply with a legal obligation, to respond to lawful requests from regulators, courts or public authorities, to protect and defend the rights or property of Imani Health, or to ensure the safety of patients, healthcare professionals, the public or our users.

You have control over your information and can exercise the following rights:

• Access and Correction: You can access and update your account information directly within the app's settings.
• Location Data: You can disable the collection of location data at any time through your device's settings, but this may affect location-based features such as home visits and provider search.
• Camera and Microphone: Camera and microphone access is requested only for telehealth consultations and profile photos. You can revoke these permissions at any time through your device's settings.
• Medical Records Access: You can approve or decline requests from healthcare providers to access your medical records from within the app.
• Communications: You can opt out of receiving promotional emails or push notifications from us by following the unsubscribe instructions or adjusting your app settings.
• Data Deletion: You can request the deletion of your account and personal information from within the app or via our account deletion page. See "Data Retention and Deletion" below for details.

Imani Health retains personal information only for as long as reasonably necessary to provide our services, fulfil the purposes described in this Privacy Policy, comply with healthcare, financial, legal and regulatory obligations, resolve disputes, prevent fraud, and enforce our agreements. The period for which we retain information depends on the nature of the information and the purpose for which it was collected.

Retention periods

We generally apply the following retention periods:

• Account and profile information: Retained while your Imani Health account remains active. When you request account deletion, information that is not subject to a legal or regulatory retention requirement will be deleted or irreversibly anonymised within 30 days after your request has been verified.
• Health and medical information: Medical records, consultation notes, prescriptions, laboratory results, uploaded documents and other clinical information may be retained for the period required under applicable healthcare, professional-recordkeeping and data-protection laws. Where Imani Health processes records on behalf of a healthcare provider, the provider may be legally responsible for determining the applicable medical-record retention period. Such records may therefore remain available to the relevant healthcare provider even after your Imani Health account is closed.
• Appointment and telehealth records: Retained while your account is active and afterwards where necessary for continuity of care, the establishment or defence of legal claims, clinical documentation, patient safety, or compliance with applicable healthcare obligations.
• Payment and transaction records: Retained for up to seven years after the relevant transaction, or for any longer period required by applicable tax, accounting, anti-fraud or financial laws. Imani Health does not retain complete payment-card information where payment is processed directly by an authorised third-party payment processor.
• Customer-support communications and complaints: Retained for up to two years after the matter has been resolved, unless a longer period is necessary to manage an ongoing complaint, investigation or legal claim.
• Technical, security and usage logs: Retained for up to twelve months, unless a longer period is reasonably necessary to investigate security incidents, prevent fraud, protect users or comply with a lawful request.
• Marketing information: Retained until you withdraw your consent or unsubscribe from marketing communications. We may retain limited information necessary to record and respect your opt-out request.
• Verification and compliance records: Identity, professional-licence, consent and verification records may be retained for as long as your account remains active and afterwards for the period required to comply with legal, regulatory, professional, fraud-prevention or audit obligations.

Account and data deletion

You may request deletion of your Imani Health account and associated personal information:

• through the account or privacy settings available within the Imani Health application;
• through our online account deletion page; or
• by contacting us at support@imanimed.com.

We may require you to verify your identity before processing a deletion request. Once verified, we will begin processing the request and delete or anonymise eligible information within 30 days.

Deleting the application from your device does not automatically delete your Imani Health account or the information associated with it.

Information we may retain after account deletion

Some information may not be deleted immediately where retention is reasonably necessary to:

• comply with healthcare, tax, accounting, financial or other legal obligations;
• preserve medical records required for continuity of care or professional recordkeeping;
• prevent fraud, abuse or security incidents;
• process outstanding payments, refunds, claims or disputes;
• respond to lawful requests from regulators, courts or public authorities;
• establish, exercise or defend legal claims; or
• protect the rights, safety and security of patients, healthcare professionals and other users.

Where information must be retained, we will restrict its use to the applicable legal, regulatory, security or recordkeeping purpose and delete or anonymise it when the relevant retention period expires.

Backup copies

Deleted information may remain in encrypted backup systems for up to 90 days before being automatically overwritten or securely removed. During this period, backup information is isolated from ordinary use and will only be accessed where necessary for disaster recovery, security or legal compliance.

Anonymised information

We may retain aggregated or irreversibly anonymised information for research, analytics, service improvement and public-health reporting where the information can no longer reasonably be linked to an identifiable individual.

If you have any questions or concerns about this Privacy Policy, please contact us at:

• Email: support@imanimed.com
• Phone: +1 (346) 332-7376