Privacy Policy

1. Introduction

Welcome to Malae Tech (“Malae”, “Multiple Alternatives”). We are committed to protecting the privacy and security of our users' personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website (https://www.malaetech.com/), and related services (collectively, the “Services”).

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Name
• Email address
• Phone number
• Professional credentials (medical registration number, institution affiliation)
• Password (encrypted)

Profile Information:

• Professional specialty
• Year of graduation
• Current practice location
• Professional interests

Clinical Documentation:

• Patient history notes (de-identified)
• Clinical case presentations
• Reports and documentation generated through the app
• User-generated content within the platform

2.2 Automatically Collected Information

Usage Data:

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, access times, pages viewed, app features used)
• Location data (with your permission, for service optimization)
• App performance data and crash reports

Cookies and Similar Technologies:

Our website uses cookies and similar tracking technologies to enhance user experience. You can control cookie preferences through your browser settings.

2.3 Information We Do NOT Collect

Patient Identifiable Information:

Malae is designed with patient anonymity as a core principle. We do NOT collect, store, or process:

• Patient full names
• National identification numbers
• Medical record numbers
• Specific address details or specific geographic identifiers
• Photographs of patients
• Any other personally identifiable patient information

Our AI-powered history-taking feature is structured to maintain complete patient de-identification throughout the documentation process.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• To create and manage your account
• To provide AI-powered clinical documentation assistance
• To generate automated reports and presentations
• To deliver diagnostic guidance and clinical decision support
• To enable offline functionality and data synchronization

3.2 Service Improvement

• To analyze usage patterns and improve app features
• To develop and train our AI algorithms (using only de-identified data)
• To troubleshoot technical issues and optimize performance
• To conduct research and analytics on clinical documentation practices

3.3 Communication

• To send service-related notifications and updates
• To respond to your inquiries and support requests
• To provide educational content and feature announcements
• To send marketing communications (with your consent, which you may withdraw at any time)

3.4 Legal and Security

• To comply with legal obligations and regulatory requirements
• To protect against fraud, abuse, and security threats
• To enforce our Terms of Service
• To protect the rights, property, and safety of Malae, our users, and the public

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Cloud hosting and data storage
• Analytics and app performance monitoring
• Customer support services
• Payment processing (if applicable)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Professional Collaboration (With Your Consent)

If you choose to share case presentations or clinical reports with colleagues or educational institutions, we will facilitate this sharing only with your explicit consent.

4.3 Legal Requirements

We may disclose information when required by law, such as:

• In response to valid legal processes (subpoenas, court orders)
• To comply with regulatory requirements from Uganda's Ministry of Health or other governmental bodies
• To protect against legal liability
• To investigate potential violations of our Terms of Service

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized data that cannot identify you or any patient for:

• Research purposes
• Industry reports and publications
• Service improvement and development

5. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• End-to-end encryption for data transmission
• Encrypted storage of sensitive data
• Secure authentication protocols
• Regular security audits and vulnerability assessments
• Firewall protection and intrusion detection systems

Organizational Safeguards:

• Access controls limiting employee access to personal data
• Regular staff training on data protection
• Confidentiality agreements with all personnel
• Incident response protocols

Patient Anonymity by Design:

Our platform architecture ensures that clinical documentation remains de-identified, with automated removal of potentially identifying information.

While we employ robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using commercially reasonable means.

6. Data Retention

Account Information:

We retain your account information for as long as your account is active or as needed to provide you with Services.

Clinical Documentation:

User-generated clinical notes and reports are retained according to your preferences and can be deleted by you at any time through the app settings.

Deletion Requests:

You may request deletion of your account and associated data at any time. Upon request, we will delete your information within 30 days, except where retention is required by law or legitimate business purposes (such as fraud prevention). See our Account Deletion page for instructions.

Backup and Archive Data:

Deleted data may persist in backup systems for up to 90 days before permanent deletion.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a structured, commonly used format

7.2 Correction and Updating

• Update or correct inaccurate personal information through account settings or by contacting us

7.3 Deletion

• Request deletion of your personal information (subject to legal retention requirements)

7.4 Objection and Restriction

• Object to certain processing of your information
• Request restriction of processing under certain circumstances

7.5 Withdraw Consent

• Withdraw consent for marketing communications or optional data collection at any time

7.6 Complaint

• Lodge a complaint with Uganda's data protection authority or relevant supervisory authority

To exercise these rights, contact us at privacy@malaetech.com or through the in-app support feature.

8. Children's Privacy

Our Services are intended for medical professionals and trainees aged 18 and above. We do not knowingly collect information from individuals under 18. If we become aware that we have collected information from a person under 18, we will delete it promptly.

9. International Data Transfers

While Malae primarily serves users in Uganda, your information may be transferred to and processed in countries outside Uganda where our service providers operate. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

10. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes through:

• In-app notifications
• Email notification to your registered email address
• Prominent notice on our website

Your continued use of our Services after such notification constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

13. Compliance with Uganda Data Protection and Privacy Act

Malae Tech complies with the Uganda Data Protection and Privacy Act, 2019, and regulations issued thereunder. We are committed to processing personal data lawfully, fairly, and transparently, and protecting the privacy rights of all users.

Data Controller:

Malae Tech is the data controller responsible for your personal information collected through our Services.

Legal Basis for Processing:

We process your information based on:

• Your consent
• Performance of our contract with you (Terms of Service)
• Compliance with legal obligations
• Our legitimate interests in providing and improving our Services