Privacy Policy

1. Introduction

Welcome to Malae Tech (“Malae”, “Multiple Alternatives”). Malae Tech is a product of Malae Manufacturers Limited, a company registered in Uganda (“we”, “us”, “our”). We are committed to protecting the privacy and security of our users' personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website (https://www.malaetech.com/), and related services (collectively, the “Services”).

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Name
• Email address
• Phone number
• Professional credentials (medical registration number, institution affiliation)
• Password (encrypted)

Profile Information:

• Professional specialty
• Year of graduation
• Current practice location
• Professional interests

Clinical Documentation:

• Patient history notes (de-identified)
• Clinical case presentations
• Reports and documentation generated through the app
• User-generated content within the platform

2.2 Automatically Collected Information

Usage Data:

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, access times, pages viewed, app features used)
• App performance data and crash reports

Cookies and Similar Technologies:

Our website uses cookies and similar tracking technologies to enhance user experience. You can control cookie preferences through your browser settings.

2.3 Information We Do NOT Collect

Patient Identifiable Information:

Malae is designed with patient anonymity as a core principle. We do NOT request or intentionally collect, store, or process:

• Patient full names
• National identification numbers
• Medical record numbers
• Specific address details (patient histories record only a general area of residence, such as a district)
• Photographs of patients
• Any other personally identifiable patient information

Our AI-powered history-taking feature is designed to keep patient information de-identified throughout the documentation process. Users should not enter identifying patient details into the app.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• To create and manage your account
• To provide AI-powered clinical documentation assistance
• To generate automated reports and presentations
• To deliver diagnostic guidance and clinical decision support
• To enable offline functionality and data synchronization

3.2 Service Improvement

• To analyze usage patterns and improve app features
• To develop and improve our AI features (using only de-identified data)
• To troubleshoot technical issues and optimize performance
• To conduct research and analytics on clinical documentation practices

3.3 Communication

• To send service-related notifications and updates
• To respond to your inquiries and support requests
• To provide educational content and feature announcements
• To send marketing communications (with your consent, which you may withdraw at any time)

3.4 Legal and Security

• To comply with legal obligations and regulatory requirements
• To protect against fraud, abuse, and security threats
• To enforce our Terms of Service
• To protect the rights, property, and safety of Malae, our users, and the public

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• AI processing (Google Gemini)
• Cloud hosting and data storage
• Analytics and app performance monitoring
• Customer support services
• Payment processing (if applicable)

Our AI features are powered by Google's Gemini models. De-identified clinical content you submit through these features is sent to Google for processing, in line with Google's applicable terms and privacy policy.

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Professional Collaboration (With Your Consent)

If you choose to share case presentations or clinical reports with colleagues or educational institutions, we will facilitate this sharing only with your explicit consent.

4.3 Legal Requirements

We may disclose information when required by law, such as:

• In response to valid legal processes (subpoenas, court orders)
• To comply with regulatory requirements from Uganda's Ministry of Health or other governmental bodies
• To protect against legal liability
• To investigate potential violations of our Terms of Service

4.4 Business Transfers

If Malae Manufacturers Limited is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized data that cannot identify you or any patient for:

• Research purposes
• Industry reports and publications
• Service improvement and development

5. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• Encryption of data in transit
• Encryption of stored data (at rest)
• Secure authentication protocols
• Regular security reviews
• Firewall and network protections provided by our cloud hosting providers

Organizational Safeguards:

• Access controls limiting employee access to personal data
• Regular staff training on data protection
• Confidentiality agreements with all personnel
• Incident response protocols

Patient Anonymity by Design:

Our platform is designed to keep clinical documentation de-identified.

While we employ robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using commercially reasonable means.

6. Data Retention

Account Information:

We retain your account information for as long as your account is active or as needed to provide you with Services.

Clinical Documentation:

Clinical notes and reports are retained until you delete them or delete your account. You can request deletion of specific notes or reports at any time by contacting us, or delete them directly in the app where this option is available.

Deletion Requests:

You may request deletion of your account and associated data at any time. We will delete your information within 30 days of verifying your request, except where retention is required by law or for legitimate business purposes (such as fraud prevention). See our Account Deletion page for instructions.

Backup and Archive Data:

Deleted data may remain in encrypted backups for up to 90 days before permanent deletion.

7. Your Privacy Rights

Under Uganda's Data Protection and Privacy Act, 2019, you have the following rights:

7.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a structured, commonly used format

7.2 Correction and Updating

• Update or correct inaccurate personal information through account settings or by contacting us

7.3 Deletion

• Request deletion of your personal information (subject to legal retention requirements)

7.4 Objection and Restriction

• Object to certain processing of your information
• Request restriction of processing under certain circumstances

7.5 Withdraw Consent

• Withdraw consent for marketing communications or optional data collection at any time

7.6 Complaint

• Lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda

To exercise these rights, contact us at info.malaetech@gmail.com or through the in-app support feature.

8. Children's Privacy

Our Services are intended for medical professionals and trainees aged 18 and above. We do not knowingly collect information from individuals under 18. If we become aware that we have collected information from a person under 18, we will delete it promptly.

9. International Data Transfers

Malae currently serves users in Uganda. Your information may be transferred to and processed in countries outside Uganda where our service providers, including Google, operate, and may be accessed by members of our technical team based outside Uganda for development and maintenance. We ensure that such transfers comply with the Data Protection and Privacy Act, 2019, and that appropriate safeguards are in place.

10. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes through:

• In-app notifications
• Email notification to your registered email address
• Prominent notice on our website

Your continued use of our Services after such notification constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

13. Compliance with Uganda Data Protection and Privacy Act

Malae Manufacturers Limited complies with the Uganda Data Protection and Privacy Act, 2019, and the Data Protection and Privacy Regulations, 2021. We are committed to processing personal data lawfully, fairly, and transparently, and protecting the privacy rights of all users.

Data Controller:

Malae Manufacturers Limited is the data controller responsible for your personal information collected through our Services.

Legal Basis for Processing:

We process your information based on:

• Your consent
• Performance of our contract with you (Terms of Service)
• Compliance with legal obligations
• Our legitimate interests in providing and improving our Services