AfyaRad Community Privacy Policy

Last updated: 22 June 2026

Africa Afya Healthcare Limited ("Africa Afya," "AfyaRad," "we," "us," or "our") operates AfyaRad Community, a free educational radiology learning platform. This Privacy Policy explains what information we collect from AfyaRad Community members, why we collect it, how we use and protect it, and the rights you have over it.

AfyaRad also operates AfyaRad Marketplace, a separate paid teleradiology service handling real patient data on behalf of hospitals. This policy covers only AfyaRad Community. The marketplace's privacy practices, including how patient data is handled, are described separately at africaafya.co.ke/privacy-policy.

1. Who We Are

Africa Afya Healthcare Limited is a company incorporated under the laws of Kenya, with its registered office at Karen Flame Business Centre, Dagoretti Road, Nairobi, Kenya. We are the data controller for the personal data described in this policy.

2. Information We Collect

2.1 Account Information

• Username, email address, and password (stored as a salted hash, never in plain text)
• Optional full name, country, and short biography, shown on your public profile if you choose to add them
• Subspecialty interests, selected at signup and editable at any time
• IP address at signup and login, retained for fraud-prevention and abuse-detection purposes only

2.2 Activity Data

• Cases you interpret, your written impressions, and your self-reported confidence score
• Cases you bookmark, react to, or flag
• Activity statistics (such as cases interpreted and streaks), used to power your own profile page -- we do not compute or store any accuracy or agreement score
• Streak data (consecutive days of activity)

2.3 If You Propose a Case

If you are a network radiologist proposing a case for posting, we collect the case content you submit and a record of when you submitted it, used solely to review and, if approved, publish the case with patient identity fully removed.

3. How We Use Your Information

We use the information described above to operate, maintain, and improve AfyaRad Community; personalise your feed and learning experience (for example, prioritising cases in your stated subspecialty, or spacing repeat exposure to a case you've already read); detect and prevent fraud, abuse, multiple-account creation, and policy violations; communicate with you about your account and security; comply with applicable law; and produce de-identified, aggregated analytics about platform usage that do not identify any individual. We do not sell personal data to third parties, and we do not use your data to train commercial AI products without separate, explicit notice and consent.

4. Legal Basis for Processing

We process your personal data primarily on the basis of your consent, given when you create an AfyaRad Community account, and our legitimate interest in operating a secure, abuse-resistant platform. You may withdraw consent at any time by deleting your account.

5. Data Sharing and Disclosure

We do not sell your personal data. We share information only with service providers acting on our behalf (such as hosting and email delivery) under confidentiality obligations, or where required by law. We never share your data with case-source institutions, nor do we publicly display your email address, full name (unless you voluntarily add it to your profile), or IP address. Other members can see your username, public profile content, and the interpretations you submit on cases you have both engaged with.

6. Third-Party Services

We use Google OAuth as an optional sign-in method. Google processes only the information necessary to authenticate you and does not receive your AfyaRad Community activity data. We also use email delivery providers to send verification emails and notifications, and cloud infrastructure providers to host our servers and databases.

7. Data Retention

We retain your account data for as long as your account remains active. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where retention is required for fraud prevention or legal compliance. If you have submitted interpretations on cases, your written impressions may be retained in anonymised form to preserve the integrity of aggregate case-discussion records, even after your account is deleted.

8. Data Security

We encrypt data in transit using HTTPS/TLS, store your password using industry-standard hashing, and apply access controls to limit who can view account-level data. No system can guarantee absolute security; we encourage you to use a strong, unique password.

9. Your Rights

Subject to the Kenya Data Protection Act, 2019, you have the right to access, correct, delete, restrict, object to processing of, and export your personal data, and to withdraw consent at any time. You can update most of your information directly from your account settings, or contact us using the details in Section 12 to exercise any of these rights.

10. Children's Privacy

AfyaRad Community requires members to confirm they meet the minimum age permitted under applicable law in their jurisdiction at signup. We do not knowingly collect personal data from children, and we will delete any such data we become aware of.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date and take reasonable steps to notify you of material changes.

12. Contact Us

Africa Afya Healthcare Limited
Karen Flame Business Centre, Dagoretti Road
Nairobi, Kenya

Email: info@africaafya.co.ke
Phone: +254 799 657 949

This Privacy Policy is intended to comply with the Kenya Data Protection Act, 2019. For our broader, organisation-wide data protection approach, see africaafya.co.ke/data-protection-compliance.