This Privacy Policy explains how Sira Health ("we", "us") collects, uses, stores and shares personal and health information about our users. It is maintained by Sira Health as the operator of sirahealth.life. If any part is unclear, contact privacy@sirahealth.life.
Information we collect
- Account information: name, phone number, email address, date of birth, National ID (NIN) or passport number.
- Health information: visit records, prescriptions, allergies, blood group and other clinical data added by you or your care providers.
- Payment information: transaction references and amounts. Card numbers and mobile money PINs are handled by our payments partner (Flutterwave) and never stored on our servers.
- Technical information: IP address, device type, browser, and log data used to keep the service secure.
How we use your information
- Provide the Sira Health service — records, delivery, payments and communications.
- Match your identity across hospitals and pharmacies so your care is connected.
- Send transactional emails and, where you opt in, notifications.
- Detect abuse, fraud and unauthorised access.
- Comply with Ugandan law and lawful requests from authorities.
Who can see your record
Only you and healthcare workers you have granted access to. Hospitals see records added during your visits with them. Pharmacies see prescriptions you send them for fulfilment. Family members and employers cannot see your record.
Data retention
We retain your health record for as long as your account is active, and for the period required by Ugandan health regulations after account closure. You may request deletion at any time; some records may be retained in anonymised form or where retention is legally required.
Your rights
- Access a copy of your data.
- Correct information that is wrong.
- Request deletion of your account.
- Withdraw consent for optional processing (e.g. marketing emails).
- Lodge a complaint with Uganda's Personal Data Protection Office.
Send any request to privacy@sirahealth.life.
Security
Data is encrypted in transit and at rest. Access is role-based and audited. If we ever detect a breach that affects you, we will notify you and the regulator as required by law.
Children
Children may be added as dependants by a parent or legal guardian who is responsible for their record.
Changes to this policy
We may update this policy. Material changes will be announced by email and on this page. The "Last updated" date at the top reflects the current version.
Contact
Sira Health, Kampala, Uganda — privacy@sirahealth.life.