Privacy Policy

1. Who we are

“CHD,” “we,” or “us” refers to the organization operating this software on behalf of your screening program. Your employer, ministry, or implementing partner is usually the data controller for personal and health data you enter; we provide the technical platform as a data processor on their instructions. For questions about how your data is used in a specific deployment, contact your program administrator.

2. Information we process

• Account and profile: identifiers you use to sign in (for example email or username as configured by your program), your name or display name, role, and optional profile photograph if you choose to upload one.
• Screening and program data: information you record during community screening, such as client demographics, location context (state, LGA, ward as applicable), screening type, clinical or program answers, referrals, lab or hospital follow-up details, and related notes required by the program.
• Device location (mobile): when the app requests location permission, it is used to support verifying that screening activity is consistent with the selected administrative area (for example state and LGA). Precise coordinates may be processed only as needed for that check and as allowed by your program’s policy.
• Camera and photos (mobile): camera access is used only if you choose “Take photo” when updating your profile picture. You may use the photo library instead without using the camera.
• Technical data: IP address, device type, app version, timestamps, and similar logs needed for security, troubleshooting, and service improvement.
• Local storage: the mobile app may store queued records on your device so you can work offline; those copies are synchronized to servers when connectivity is available, according to your program’s configuration.

3. How we use information

We use the data above to run the screening program: authentication, data entry and review, referrals and coordination with labs and hospitals, reporting to authorized supervisors, duplicate detection, audit trails where enabled, and to keep the service secure and reliable. We do not sell your personal information.

4. Sharing

Information is shared within the program as your role requires—for example between field staff, laboratories, hospitals, and national or state administrators authorized by the data controller. We may use trusted hosting and infrastructure providers (such as cloud servers) under agreements that require protection of your data. We may disclose information if required by law or to protect rights and safety.

5. Retention

Screening and account records are kept for as long as your program’s policies and applicable law require. When data is no longer needed, the data controller or their delegates may delete or anonymize it according to internal procedures.

6. Security

We apply reasonable technical and organizational measures, including encryption in transit where configured (HTTPS), access controls aligned to roles, and secure handling of credentials. No method of transmission or storage is completely secure; please protect your password and report suspected misuse to your administrator.

7. Your choices and rights

Depending on your jurisdiction, you may have rights to access, correct, restrict, or delete certain personal data, or to object to particular processing. Because health programs often have legal retention duties, some requests may be limited. Submit requests through your program’s privacy contact or administrator; we will assist the data controller as required.

8. International transfers

Data may be processed in the country where servers are located and, if applicable, protected by contractual safeguards approved by the data controller.

9. Children

The service is intended for authorized health workers. Information about minors may be recorded only as part of lawful screening activities under program rules and guardian consent where required.

10. Changes

We may update this policy from time to time. The “Last updated” date will change; for material changes, your program may provide additional notice.

11. Contact

For privacy questions related to a specific deployment, contact your organization’s CHD program lead or data protection officer. For technical issues accessing this policy page, contact your IT support team.