Privacy Policy
Public website
How information is handled on the AfyaMesh public website and when you contact its team.
What this policy covers
This Privacy Policy applies to the AfyaMesh public website at afyamesh.com and www.afyamesh.com. It explains how information is handled when you browse these pages or contact the AfyaMesh team about them.
This is an AfyaMesh policy, not the privacy policy for Taadom Digital's company website. The AfyaMesh app has its own in-app privacy notice for accounts, conversations, health records and care-related activity. Visiting this public website does not create an app account.
Who is responsible
AfyaMesh is operated by Taadom Digital Company Limited, registered in Cameroon under registration number RC. B'DA.2019B.049. Its registered office is Mile 4 Nkwen, Opposite Express Union, Bamenda, P.O. Box 192, Cameroon.
For a question about this website or a privacy request, email contact@taadom.com and identify your enquiry as an AfyaMesh privacy request.
Information involved
Browsing information. Delivering and protecting the website involves technical information such as an IP address, requested page, request time, browser or device information and security-related events. Hosting and network providers may process this information in connection with serving your visit.
Information you send us. If you choose an email link, your email application opens. If you send a message, we receive the sender details, message and any attachments you include. The website has no contact form, mailing-list form or account registration.
The public pages do not ask for symptoms, medical records, payment details, or access to your microphone, camera or precise location. Please do not send patient records or urgent medical requests to the general contact address.
Why information is used
Technical information supports page delivery, troubleshooting, availability and protection against abuse. Contact information is used to respond to your enquiry and manage relevant follow-up. Information may also be used where necessary to meet applicable legal obligations or investigate security incidents.
We do not sell information collected through this website or use it to target advertising. Contacting us about AfyaMesh does not subscribe you to a mailing list.
Providers and international processing
The website infrastructure uses Hetzner for hosting and Cloudflare for network delivery and protection. Technical information may be processed outside the country from which you visit. Email enquiries also pass through the email services used by you and the company.
Information is available to personnel and service providers as needed for the purposes described here. It may also be disclosed where required by applicable law. External websites, including company and team-profile links, have their own policies.
For Cloudflare's handling of network information, see its Privacy Policy. This does not replace AfyaMesh's responsibilities under this notice.
Retention and security
Contact correspondence is retained for handling the enquiry and relevant follow-up, and where needed for legal obligations or resolving a dispute. Technical and security records are subject to the retention settings and policies of the systems processing them. Different records may have different retention periods.
Access to enquiries and operational information should be limited to the people who need it for their work. No website or email system can guarantee absolute security. Please send only the information needed for your enquiry.
Your choices and requests
You can browse without creating an account, decide whether to contact us, and manage cookies in your browser.
You may contact us to request information about personal data associated with your visit or enquiry, or ask for access, correction or deletion, and raise an objection or concern. We will handle requests under the law that applies to them. We may need proportionate information to identify the relevant records and confirm that the request is yours. Some records may need to be retained for a legal obligation or a dispute.
If your concern relates to an AfyaMesh app account or health record, identify it as an app request so it can be handled under the app's privacy notice. You can also raise a complaint with the competent data-protection authority where applicable.
Changes and contact
We will update this page when the website's handling of information changes and revise the date shown above. This notice does not authorise new uses of app health data.
For questions, write to contact@taadom.com. For the conditions of using these public pages, read the AfyaMesh Terms of Use.
Privacy Policy
AfyaMesh app
Draft. These terms have not yet been reviewed by a lawyer and are not final. AfyaMesh is in testing and is not yet offered as a service.
AfyaMesh is operated by Taadom Digital Co. Ltd. This policy explains what we hold about you, where it is kept, and who can see it.
It is written to be read, not to be got past. If a sentence here is unclear, that is our fault and we want to know.
What we hold
Only what the app needs to do the thing you asked it to do.
- Who you are: the phone number or email you signed in with, and the name you chose. Nothing is verified against an identity document.
- About your health: your year of birth, sex, and anything you tell Arya or a clinician - symptoms, conditions, medicines, allergies, family history, and any measurements you record.
- What you did here: consultations, test orders, medicine orders and appointments.
- Where you are, while you are looking: your position is used to find the places near you. It is not kept as a history of where you have been.
- Your device: enough to keep you signed in and to let you sign a lost phone out.
Where each thing is kept
This differs by what the thing is, and it is the most important part of this policy.
- Your conversation with Arya - the words you typed, in the order you typed them - stays on your device, encrypted. We do not keep a copy.
- What that conversation established - a symptom, a diagnosis, a medicine, a test result - is kept on our servers, encrypted, as your health record. That is the part a clinician needs next year and that your phone cannot be the only copy of.
- A message between you and a clinician is encrypted so that only the two of you can read it. We carry it and cannot open it.
- A voice note is transcribed and then the audio is discarded. We do not build a library of recordings of people's voices.
Who can see your record
Three, and no fourth.
- You.
- A clinician you are in a consultation with, while it is open and for one day afterwards so they can write their notes. Not before, not after, and not because they work at a facility you once attended. You can close it sooner, at any moment, without giving a reason.
- AfyaMesh staff, where they have to - a support request, a safety investigation. Every such time is written down, with who and when.
What we do not do
- We do not sell your data, and we do not accept advertising against it.
- We do not give it to an employer, an insurer or a family member without your say-so.
- We do not use your health information to decide what to charge you.
- We do not send your address to a third-party service to work out which country you are in.
What you can do
It is your record. That is not a slogan, it is a list of things the app has to let you do.
- See all of it, in plain language rather than codes.
- Correct anything you told us that we wrote down wrongly. A clinician's note is theirs to correct, and you can add your own account beside it.
- Take a copy with you, in a form another health system can read.
- Shut a clinician out, at once.
- Sign out every device, including one you no longer have.
- Ask us to delete your account. Some of it we must keep: a dispensed medicine and a laboratory result are clinical records with retention rules that exist to protect patients, including you.
How long we keep it
Your health record, for as long as you have an account and then for the period the law requires of clinical records.
Sign-in and access logs, for two years, because they are what lets us answer 'who opened my record' long after it happened.
The conversation on your device, until you delete it or sign out.
How it is protected
Passwords are stored in a form that cannot be turned back into the password. Sessions are short-lived and can be ended from any of your devices. Records are encrypted where they are stored. Every access by staff is logged.
No system is perfect, and we would rather say so than imply otherwise. If something goes wrong we will tell you what happened and what it means for you.
Children
An adult can hold a record for a child they are responsible for, and the app records that the account is being used on somebody else's behalf. A child's record belongs to the child, and passes to them.
Asking us something
Write to privacy@taadom.org. If you are not satisfied with our answer, you can complain to the national data protection authority.