PRIVACY POLICY 

Last Updated: 1st May 2026

1. Introduction

Afyacode Limited (“Afyacode”, “we”, “our”, or “us”) is a healthcare organization based in Kenya, providing digital and in-person services focused on diabetes care, lifestyle medicine, and management of non-communicable diseases.

We are committed to protecting the privacy, confidentiality, and security of all personal and health information collected through our services.

This Privacy Policy explains how we collect, use, and protect your information across all platforms, including:

• www.afyacode.com
• Afyacode digital platforms and applications
• WhatsApp Business communication
• SMS communication
• In-clinic and remote healthcare services

2. Information We Collect

We may collect the following categories of data:

a) Personal Information

• Full name
• Phone number
• Email address
• Date of birth
• Gender

b) Health Information (Sensitive Data)

• Blood glucose data
• Medical history (e.g., diabetes, hypertension, PCOS)
• Laboratory results
• Weight and metabolic parameters
• Lifestyle and nutrition information

c) Communication Data

• Messages sent via WhatsApp
• SMS communications
• Appointment and follow-up interactions

d) Technical Information

• IP address
• Device type
• Browser data
• Usage analytics

3. How We Use Your Information

Your information is used strictly for healthcare and service delivery purposes, including:

• Providing medical care and lifestyle interventions
• Monitoring chronic conditions
• Sending appointment reminders and follow-ups
• Delivering health education and program updates
• Improving our services and patient outcomes

We do not sell or rent your personal or health data.

4. Communication Channels (WhatsApp & SMS)

By providing your phone number and opting into our services, you consent to receive communications from Afyacode via:

• WhatsApp Business API
• SMS (text messaging)
• Phone calls (where necessary)

These communications may include:

• Appointment reminders
• Program updates
• Health-related follow-ups
• Educational content

You may opt out at any time by:

• Replying “STOP” via SMS or WhatsApp
• Contacting us directly

5. Legal Basis for Processing

We process your data based on:

• Your consent
• Provision of healthcare services
• Compliance with applicable laws
• Legitimate operational needs (e.g., service improvement, safety)

6. Data Sharing

We only share data when necessary with:

• Authorized healthcare professionals within Afyacode
• Partner laboratories and diagnostic providers
• Secure technology and hosting providers
• Regulatory authorities when legally required

We do not share data with third-party advertisers.

7. Data Protection and Security

We implement appropriate safeguards, including:

• Secure systems and controlled access
• Data encryption where applicable
• Confidentiality protocols for healthcare data

8. Compliance with Data Protection Laws

Afyacode operates in accordance with applicable data protection laws in Kenya, including the Data Protection Act, and follows internationally accepted principles for handling personal and health data.

9. Data Retention

We retain data only as long as necessary for:

• Medical care
• Legal and regulatory requirements
• Service delivery

10. Your Rights

You have the right to:

• Access your data
• Request correction
• Withdraw consent
• Request deletion

11. Data Deletion

Please refer to our Data Deletion Instructions page for detailed guidance on how to request deletion of your data.

12. Contact Information

Afyacode Limited
Website: www.afyacode.com
Email: info@afyacode.com
Phone: 0111056056