Privacy Policy
Last updated: 20 July 2026
This page is maintained by Africnam to explain how we handle personal and health information across the 26 African nations we serve. It is not a certification and does not replace applicable regional laws (ECOWAS Data Act, Kenya DPA 2019, Senegal Law 2008-12, and equivalents). Where local regulation is stricter than what is described below, the local rule applies.
1. Who we are
Africnam operates a sovereign pan-African health-coverage platform for corporate employers, clinics, and workers. We act as a data processor on behalf of your employer or cooperative when they fund your health wallet, and as a data controller for the account information you provide directly.
2. What we collect
Account data (full name, email, phone number, role, preferred language); wallet and transaction data (funding amounts, clinic checkouts, cross-border settlements in USD); clinical routing metadata (anonymous QR tokens, 6-digit clinic tokens, triage session outcomes); technical data required to operate the service (device type, timestamps, IP truncated to /24). We do not collect full medical records — clinical files remain with your provider under their own local law.
3. Legal basis for processing
We process personal data on the basis of (a) the contract between you or your employer and Africnam; (b) explicit consent captured through USSD/WhatsApp onboarding or the in-app consent gate; and (c) our legitimate interest in preventing fraud and abuse of the 90/10 health-escrow pool.
4. Where your data lives
Data is stored on regional cloud nodes and never transferred outside its origin region without an explicit sovereignty exception approved by the responsible national authority. Cross-border settlement records are consolidated in USD for reporting but the underlying personal identifiers remain in-region.
5. Security
Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production data follows a least-privilege model with role-based access control, audit logging, and MFA for staff. Payment and payout instructions to Mobile Money operators (Onafriq, etc.) are signed and never expose your wallet PIN.
6. Sharing
We share the minimum data necessary with (a) the clinic performing your visit — anonymous QR + 6-digit token only; (b) Mobile Money and payout providers for the specific transaction you authorise; (c) your employer or cooperative for aggregate consumption reporting, never individual medical detail; (d) auditors and regulators when required by law.
7. Retention
Account data is kept for the duration of your relationship with Africnam plus the shortest retention period required by the applicable regional financial and health regulations. Anonymous transaction records may be retained longer for fraud analytics with all direct identifiers removed.
8. Your rights
You may request access to your data, correction of inaccurate data, portability, restriction of processing, and deletion of your account. Rights are exercised through the in-app privacy centre or by writing to privacy@africnam.app. We respond within 30 days.
9. Contact
Data Protection Officer — privacy@africnam.app. Security incident reporting — security@africnam.app.