Privacy Policy

Effective Date: December 17, 2025 | Last Updated: December 17, 2025

Introduction
Information We Collect
How We Use Your Information
Sharing Your Information
Data Security
Your Rights
Mobile Application
Third-Party Services
Account Deletion
Children's Privacy
Medical Disclaimers
Changes to This Policy
Contact Us

Introduction

KT Memorial Hospital ("we," "us," "our") is committed to protecting the privacy and confidentiality of our patients' personal information. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our hospital, use our website, or use our mobile application ("KT Memorial Hospital App").

This policy applies to all services provided through our hospital facilities, website, and mobile application.

We may collect the following types of information:

a. Personal Information:

This includes your name, address, phone number, email address, date of birth, gender, and other identifying information.

b. Health Information:

This includes medical history, treatment records, test results, prescriptions, allergies, chronic conditions, medications, vital signs, and other health-related information.

c. Financial Information:

This includes billing and payment information, insurance details, health fund subscription data, and other financial information.

d. Technical Information:

This includes your IP address, browser type, operating system, device identifiers, and other technical details when you visit our website or use our mobile application.

e. Emergency Contact Information:

Names, relationships, and contact details of your designated emergency contacts.

f. Location Data:

When you explicitly grant permission in our mobile app, we may collect location data for emergency services and to help you find the nearest hospital facilities.

We use your personal information for the following purposes:

a. Providing Medical Services:

To provide, coordinate, and manage your healthcare and related services, including telemedicine consultations.

b. Billing and Payments:

To process payments, manage health fund subscriptions, and process insurance claims for the services you receive.

c. Communication:

To contact you regarding appointments, test results, prescription refills, and other healthcare-related information via email, SMS, or push notifications.

d. Compliance and Legal Obligations:

To comply with legal and regulatory requirements and to protect our rights and property.

e. Service Improvement:

To analyze usage patterns and improve our services, website, and mobile application functionality.

f. Emergency Services:

To provide emergency contact information and location data to emergency responders when necessary.

We may share your personal information in the following situations:

a. With Healthcare Providers:

To other healthcare providers involved in your care, including specialists and referring physicians.

b. With Insurance Companies:

To process your insurance claims and payments.

c. With Third-Party Service Providers:

To third-party vendors who provide services on our behalf, such as billing, IT support, payment processing (Mobile Money), and analytics. See the "Third-Party Services" section for details.

d. With Emergency Services:

To emergency responders when there is an immediate threat to your health or safety.

e. As Required by Law:

When required to do so by law, regulation, or legal process.

Data Security

We take appropriate technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit using TLS/SSL protocols
Encryption of data at rest in our databases
Access controls and authentication requirements
Regular security audits and assessments
Secure storage in compliance with healthcare regulations

You have the following rights regarding your personal information:

a. Access:

You can request access to your personal information through your account profile or by contacting us.

b. Correction:

You can request corrections to your personal information if it is inaccurate or incomplete.

c. Deletion:

You can request the deletion of your personal information under certain circumstances. See the "Account Deletion" section for details.

d. Restriction:

You can request restrictions on the processing of your personal information.

e. Objection:

You can object to the processing of your personal information for certain purposes.

f. Portability:

You can request the transfer of your personal information to another entity in a commonly used format.

g. Withdraw Consent:

You can withdraw your consent to certain data processing activities at any time. This may affect your ability to use certain features of our services.

Mobile Application Data Collection

When you use our KT Memorial Hospital mobile application, we collect:

a. Device Information:

Device identifiers for push notifications and app functionality, device model, operating system version, and unique device tokens.

b. Push Notifications:

If you enable push notifications, we collect device tokens to send you appointment reminders, health alerts, prescription notifications, and other important updates.

c. Location Data:

Only when you explicitly grant permission, we collect location data for emergency services and to help you find the nearest hospital facilities. You can revoke this permission at any time through your device settings.

d. Camera and Photos:

When you choose to upload medical documents or update your profile picture, we access your camera or photo library. This data is only collected when you initiate the action.

e. Health Data:

Medical records, prescriptions, allergies, medications, vital signs, and other health information you enter or that is recorded by healthcare providers.

f. Usage Analytics:

We collect anonymous usage data to improve app performance and user experience. This includes crash reports, feature usage patterns, and performance metrics.

App Permissions

Permission	Purpose
Camera	Taking photos of medical documents, profile pictures
Storage	Saving and uploading medical documents
Location	Emergency services, finding nearby facilities
Notifications	Appointment reminders, health alerts

Third-Party Services

Our mobile application and website use the following third-party services that may collect and process your data:

a. Firebase (Google):

We use Firebase for user authentication, database storage, and push notifications. Firebase may collect device identifiers, IP addresses, and usage data.

Firebase Privacy Policy

b. Mobile Money Providers:

We use Mobile Money services (MTN Mobile Money, Airtel Money) for secure payment processing. Payments are processed directly through your mobile money account, and we do not store your Mobile Money PIN.

c. Google Analytics:

We use Google Analytics to understand how users interact with our website and app. This service collects anonymous usage data.

Google Privacy Policy

These third-party services have their own privacy policies, and we encourage you to review them.

Account Deletion

You have the right to delete your account and request the deletion of your personal data.

How to Delete Your Account:

Mobile App: Navigate to Profile > Settings > Delete Account
Website: Log in to your account, go to Profile Settings, and select "Delete Account"
Email Request: Send a request to our support team via the Contact Us page

What Happens When You Delete Your Account:

Personal Information: Your personal account information (name, email, phone, address) will be permanently deleted within 30 days.
Medical Records: As required by healthcare regulations in Uganda, your medical records will be retained for a minimum of 7 years from your last visit. These records are kept securely and are not used for marketing purposes.
Payment Records: Transaction records will be retained for 7 years for tax and audit purposes as required by law.
Anonymized Data: Some anonymized, aggregated data may be retained for statistical purposes.

Data Retention Periods:

Data Type	Retention Period
Account Information	Deleted within 30 days of request
Medical Records	7 years (regulatory requirement)
Payment Records	7 years (tax/audit requirement)
Usage Logs	90 days

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately through our Contact Us page. We will take steps to delete such information from our systems.

For pediatric patients, all account registration and consent must be provided by a parent or legal guardian who is at least 18 years old.

Medical Disclaimers

MEDICAL DISCLAIMER:

The KT Memorial Hospital mobile application and website are designed to facilitate communication between patients and healthcare providers. They are NOT intended to replace professional medical advice, diagnosis, or treatment.

Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay in seeking it because of something you have read or accessed through our services.

EMERGENCY DISCLAIMER:

If you are experiencing a medical emergency, call your local emergency services immediately (e.g., 911, 999, 112, or your local emergency number).

Do not rely on this application for emergency care. The app is not monitored 24/7 for emergency situations.

TELEMEDICINE DISCLAIMER:

Telemedicine services provided through our platform are a convenient way to consult with healthcare providers but have limitations. Virtual consultations may not be appropriate for all medical conditions and are not equivalent to in-person visits.

Your healthcare provider will advise you if an in-person visit is required for proper diagnosis or treatment.

ACCURACY DISCLAIMER:

While we strive to provide accurate and up-to-date information, we make no warranties or representations regarding the accuracy, completeness, or reliability of any health information provided through our services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website and mobile application with an updated effective date at the top of this page.

For significant changes, we will notify you through:

Email notification to your registered email address
Push notification through our mobile app
Prominent notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us using the information listed on our Contact Us page.

You may also contact us for:

Accessing your personal information
Correcting inaccurate data
Requesting account deletion
Withdrawing consent
Filing a privacy complaint

We aim to respond to all privacy-related inquiries within 30 days.