Privacy Policy

Welcome to GreenVit Health Tanzania. We are dedicated to protecting your privacy and ensuring that your personal and medical information is processed with the highest level of security and integrity.

This Privacy Policy is fully compliant with the Tanzania Personal Data Protection Act, 2022 (Act No. 11 of 2022) and all regulations set forth by the Personal Data Protection Authority (PDPA) of Tanzania. Furthermore, we adhere to the core principles of data privacy frameworks including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Health Insurance Portability and Accountability Act (HIPAA), and the Lei Geral de Proteção de Dados (LGPD). This policy applies to our website, digital health tools, and all services offered by GreenVit Health.

We collect two primary categories of information through our platform:

We process collected data for the following legitimate purposes:

• To provide personalized guidance on managing Non-Communicable Diseases (NCDs) like Diabetes and Hypertension.
• To enable tracking of your health metrics via the digital Health Diary feature.
• To deliver educational health tips and updates via email/SMS (only when explicitly requested/subscribed).
• To enhance security, detect fraudulent activities, and maintain server integrity.
• To comply with regulatory guidelines and laws governing digital healthcare in Tanzania.

GreenVit Health employs robust technical and organizational security measures to protect your personal and medical data against unauthorized access, loss, or manipulation:

• Industry-standard encryption for data in transit (SSL/TLS) and at rest.
• Strict role-based access control, ensuring only authorized medical and care staff can access health data.
• Routine vulnerability scans, server hardening, and security audits to mitigate potential cyber threats.

We do not sell, rent, or lease your personal and medical data to third parties.

We may share information in the following limited circumstances:

• With Consent: When you authorize sharing of logs with your nominated physician or clinic.
• Legal Requirements: If required by Tanzanian law to comply with judicial processes, court orders, or legitimate regulatory requests.

Under the Tanzania Personal Data Protection Act, 2022, you possess key rights:

• The right to request copies of your stored personal and medical records.
• The right to correct or update inaccurate or obsolete records.
• The right to request deletion of your information from our active databases (Right to Erasure).
• The right to restrict or object to certain processing types, such as direct communications.
• The right to withdraw processing consent at any time.

If you have questions or concerns regarding this policy, or wish to exercise your data protection rights, please contact our Data Protection Officer (DPO):