Privacy Policy

1. Data We Collect

A. Data you provide:

• Phone number (required for all accounts)
• Full name
• Email address (optional for Ghana subscribers, required for visitor accounts)
• Nationality and country of residence (visitor accounts)
• Passport number (optional, visitor accounts only, encrypted)
• Travel insurance provider and policy number (optional, visitor accounts)
• Blood type (optional, for emergency information)
• Known allergies (optional, for emergency information)
• Trusted contact names and phone numbers
• Ghana arrival and departure dates (visitor accounts)

B. Data collected automatically:

• GPS location (only when you use the emergency routing feature — not stored continuously)
• Emergency flag data (GPS coordinates at time of emergency trigger, hospital selected, time)
• Subscription and payment data (stored by Paystack or Stripe, not by BedWatch Africa directly)
• Platform usage logs for security and abuse prevention

C. Data from facilities:

• Ward and bed status data entered by facility staff
• Emergency acknowledgement data when a facility confirms receipt of an emergency alert

2. How We Use Your Data

• To provide the emergency routing and hospital notification service
• To send SMS alerts to your trusted contacts when you trigger an emergency
• To process your subscription payment
• To generate international insurance documentation when requested
• To send subscription reminders and platform updates
• To improve the platform and fix bugs
• To aggregate anonymised data for health intelligence dashboards accessed by government and research partners
• To comply with legal obligations

We do NOT sell your personal data to third parties. We do NOT use your data for advertising. BedWatch Africa products are ad-free.

3. Data Sharing

We share your data only in these limited circumstances:

• With the health facility you are being routed to during an emergency (name, phone, emergency type)
• With your trusted contacts via SMS during an emergency trigger
• With our technology service providers (Supabase, Vercel, Hubtel, Africa’s Talking, Resend, Paystack, Stripe) under strict data processing agreements
• With government health agencies and international organisations through anonymised, aggregated intelligence data only — no individual identification
• When required by Ghanaian law or valid legal process

4. Data Retention

• Active subscription data: retained for the duration of your subscription plus 12 months
• Emergency flag data: retained for 24 months for safety and audit purposes
• Passport data: retained for 12 months after subscription end for insurance claim purposes, then permanently deleted
• Payment records: retained for 7 years as required by Ghanaian tax law
• Anonymised usage and health intelligence data: retained indefinitely in aggregated form

5. Data Security

• All data is encrypted in transit using TLS 1.2 or higher
• Passport data is encrypted at rest using AES-256 encryption
• Access to personal data is restricted to authorised staff on a need-to-know basis
• All third-party providers are subject to data processing agreements
• We conduct regular security audits

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to specific processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent where consent is the legal basis for processing

To exercise any of these rights, contact us at legal@bedwatchafrica.com. We will respond within 14 days.

7. Cookies and Tracking

BedWatch Africa uses only essential cookies necessary for platform functionality and session management. We do not use advertising cookies, tracking pixels, or third-party analytics that identify individuals.