Privacy

PinKenya is the data controller for the personal data described here. That means we decide why and how it is processed, and we are the ones answerable for it under the Act.

Section 18 of the Act says no one may act as a data controller or data processor unless registered with the Data Commissioner. PinKenya has not completed that registration yet. This page will carry the certificate number as soon as it is issued.

We only hold what the service actually needs.

• Your account. Your email address, and your name and phone number if you give them. If you sign in with Google we receive your email address, name and profile picture from Google, nothing else.
• Home care requests. The patient’s name, a phone number, and whatever else you choose to add: email, county, address, the kind of care needed, a start date, hours a day, and your notes. The request is linked to the account that sent it.
• Biomedical engineer contact requests. Your name, a phone number or email, and your message, linked to the account that sent it.
• Consultations. The appointment time and how it happens, what you told the doctor when booking, your consent records, and the clinical notes and summary the doctor writes.
• Video calls. We record which room belongs to which consultation. The call itself is not recorded, by us or by the video provider, so no copy of what was said or shown is kept. While you have the video room open, the other person on that booking can see that you are there, and nobody else can.
• If you apply as a provider. Your name, phone number, the kind of practice you have, your licence or registration number and the council that issued it, and the documents you upload, such as your practising licence and your national ID or passport. The documents are kept in private storage that only you and PinKenya staff can open, and are used to check you against your council’s public register.
• Payments. The amount, the doctor’s share and our 10% fee, the payment reference, whether it succeeded, and the M-Pesa receipt number if you paid that way. Card numbers and M-Pesa PINs go to Paystack and never reach us.

The Act treats health status and health data as sensitive personal data. That covers anything you tell us about a condition, anything in a home care request, and every clinical note from a consultation.

We process it to provide the care you asked for, and for nothing else. We do not sell it, we do not use it for advertising, and we do not hand it to an employer, an insurer or anyone else without your consent or a court order.

• Your consent, which you can withdraw at any time.
• To perform a contract with you, such as arranging the care you requested or taking a payment you authorised.
• To comply with the law, including records a health provider is required to keep.

• The provider you chose. A doctor, nurse or biomedical engineer sees what they need to treat you or do the job, and no more.
• PinKenya staff working your request. A coordinator arranging home care, or an admin making an introduction to a biomedical engineer.
• Our service providers, who process data on our instructions and are listed below.

We do not sell your personal data. We do not share it with advertisers.

Our database and files are hosted by Supabase in Germany (eu-central-1). So your personal data is stored outside Kenya, and sections 25(h) and 48 of the Act apply to that transfer.

A video consultation also leaves Kenya: we route the call through Daily’s servers in Cape Town, South Africa, and Daily is a United States company. Paystack is a Kenyan company but may store payment data in Ireland. Each one is listed with what it sees in section 5.

We rely on what the Act allows: each transfer is necessary to perform our contract with you, whether that is storing your booking, connecting your call or taking your payment, and you are told about it here so it is not something you find out afterwards.

Section 26 of the Act gives you the right:

• to be informed of the use your personal data is put to,
• to access the personal data we hold about you,
• to object to all or part of the processing,
• to have false or misleading data corrected, and
• to have false or misleading data deleted.

Section 38 also gives you the right to receive your data in a structured, commonly used, machine-readable format, and to have it sent to another provider.

Exercising any of these is free and we will answer as quickly as we can. We may ask you to confirm who you are first, so that nobody else can use these rights to get at your records.

Account data stays until you close your account. Home care and biomedical engineer requests are kept while they are being worked and for a reasonable period afterwards so we can answer questions about them. A provider’s licence and identity documents are kept while they are listed, so the check can be shown to have been made, and deleted when they leave.

Clinical records are the exception: a health provider is required by law to keep them for a set period, so a consultation note survives your account being closed. Paystack is also required by law to keep its own record of a payment for at least seven years, whatever we delete on our side. Everything else is deleted or anonymised once the purpose it was collected for has passed.

Closing your account. You can close it yourself from Your details. It is switched off at once and deleted 7 days later, so you can sign in and keep it if you change your mind. On that day we delete your login, your name, phone and address, the contact details in your requests, and any documents or photos you uploaded. Your consultation records, doctors’ notes, consent records and payment records are kept with your name removed, for the legal reasons above.

Access is controlled at the database itself, row by row, so a signed in user can reach their own records and not anyone else’s. Traffic is encrypted in transit. Provider phone numbers and email addresses are not published, and patient contact details are not readable by anonymous visitors.

If personal data is accessed by someone who should not have it and there is a real risk of harm to you, section 43 requires us to notify the Data Commissioner within 72 hours and to tell you in writing. We will.

We set cookies for one thing: keeping you signed in. There are no advertising cookies, no third-party analytics and no tracking pixels on this site. Clearing them signs you out.

A few settings are kept in your browser rather than with us, such as whether you turned on dark mode. When you install PinKenya or open it from your home screen, your device tells us once, anonymously: no number that identifies the device and not who you are, only the kind of device and whether someone was signed in. That is how we count installs.

If you start the booking, home care or biomedical engineer request form and leave before sending it, what you typed is kept in that browser tab so it is still there when you come back. It never leaves your device, and it is deleted when you send the form or close the tab.

Every cookie and stored setting, what it does and how long it lasts is listed on our cookie policy, along with the cookies Daily, Paystack and Google set when you use them.

An account is for people aged 16 and over. Sign-up asks for your age and stores it once; you cannot change it from your account afterwards. If you are under 16, a parent or guardian can request care for you from their own account, and the Act requires consent from them rather than from you.

Come to us first and we will try to fix it. If you are not satisfied, section 56 of the Act lets you take it straight to the regulator, and you do not need our permission to do so.

Office of the Data Protection Commissioner
Britam Towers, 12th Floor, Hospital Road, Upperhill, Nairobi
P.O. Box 30920-00100 GPO, Nairobi
Complaints: complaint@odpc.go.ke
Telephone: 020 780 1800
odpc.go.ke

Data protection requests: info@pinkenya.com
General enquiries: info@pinkenya.com
Ongata Rongai 00511, Kajiado County, Kenya

See also our terms, cookie policy and how we verify providers.