Privacy notice.

This draft covers people who contact Ginja AI, authorised product users and individuals whose information is processed through a participating healthcare provider. The responsible Ginja AI legal entity and its contact details must be added before this notice is approved.

Website enquiries include your name, work email, organisation and request. Product use may involve account details, clinical records, claims, activity logs and, where enabled with the required consent, consultation audio.

Please do not include patient information in a website enquiry.

Information supports enquiries, service delivery, authorised clinical and claims workflows, customer support and security. The approved notice must identify the lawful basis for each use and the conditions for processing health information.

Your healthcare provider controls its clinical record and authorises access. Ginja AI’s controller or processor role depends on the activity and the applicable agreement. Our ODPC registrations do not replace a facility’s own responsibilities.

Access is role-based and logged. Sharing with payers and service providers follows the authorised workflow and applicable agreements. The final notice must identify relevant recipients and explain permitted AI uses, including any model-improvement processing.

Ginja AI uses encryption, access controls, tenant isolation, audit logs and monitoring to protect information.

Under applicable Kenyan data protection law, individuals can ask how their data is used, request access, object to processing and seek correction or deletion of false or misleading information. Requests may require identity checks; patients should also contact the healthcare provider responsible for their record.

You may raise a concern with the Office of the Data Protection Commissioner.

Placeholder only: privacy@example.com. This is not a working Ginja AI inbox. For current enquiries, use support@ginja.ai.

Before approval, confirm the legal entity, processing purposes, lawful bases, recipients, rights procedure and operational contacts. The final notice must reflect actual practices and all applicable disclosure requirements.