Privacy Policy
GG'APP ("we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you use GG'APP.
1. Information We Collect
1.1 Personal Information
We may collect:
- Full name
- Phone number
- Email address
- National ID or passport details
- Date of birth
- Gender
- Profile photo
- Address and location data
1.2 Medical and Healthcare Information
We may collect:
- Prescriptions
- Referral letters
- Appointment history
- Healthcare provider interactions
- Medical invoices
- Uploaded medical documents
Uploaded medical documents are stored securely and used only for the purpose for which they were provided (for example, fulfilling a prescription or reviewing an invoice).
1.3 Financial Information
We may collect:
- Credit application data
- Wallet balances
- Transaction references
- Payment authorization records
GG'APP does not store full financial payment information unless explicitly stated.
1.4 Technical Information
We may automatically collect:
- Device identifiers
- IP addresses
- Browser information
- Operating system details
- App version
- Crash logs
- Usage analytics
- Login activity
1.5 Location Information
With user permission, GG'APP may access geolocation data to:
- Locate nearby healthcare providers
- Improve service delivery
- Enhance fraud prevention and security
Users may disable location permissions, though certain features may become unavailable.
2. How We Use Information
We use collected information to:
- Create and manage accounts
- Verify user identity
- Process healthcare financing requests
- Facilitate appointments and healthcare services
- Process payment authorizations
- Improve platform security
- Detect fraud and abuse
- Provide customer support
- Send notifications and updates
- Send account verification, security, and transactional emails (for example, email verification, password resets, invoice and appointment notifications)
- Improve platform functionality and user experience
- Meet legal and regulatory obligations
3. Legal Basis for Processing
We process personal data based on:
- User consent
- Contractual necessity
- Legal obligations
- Legitimate business interests
- Protection of vital interests
- Regulatory compliance
4. Data Sharing and Disclosure
We may share information with:
4.1 Healthcare Service Providers
To facilitate appointments, treatment, invoicing, and healthcare services.
4.2 Credit Finance Partners
To:
- Assess financing applications
- Process payments
- Verify transactions
- Manage repayment obligations
4.3 Service Providers and Vendors
Including:
- Cloud hosting providers
- Email delivery providers used for account verification, password resets, and transactional notifications (including Resend)
- Analytics providers
- Security and fraud prevention services
4.4 Legal and Regulatory Authorities
Where required by:
- Law
- Court orders
- Regulatory obligations
- Fraud investigations
- National security requirements
We do not sell user personal data to third parties.
5. Data Security
GG'APP implements administrative, technical, and organizational safeguards including:
- Encryption in transit using TLS
- Encryption at rest
- Secure password and PIN hashing
- Role-based access controls
- Session management and lockouts
- Audit logging
- API security measures
- Restricted infrastructure access
Despite our efforts, no system is completely secure, and users acknowledge inherent internet security risks.
6. Data Retention
We retain personal data only as long as necessary for:
- Service delivery
- Legal compliance
- Fraud prevention
- Financial recordkeeping
- Dispute resolution
- Regulatory obligations
Retention periods may vary depending on applicable laws and operational requirements.
7. User Rights
Subject to applicable law, users may have the right to:
- Access their personal data
- Correct inaccurate data
- Request deletion of personal data
- Withdraw consent
- Object to certain processing
- Request data portability
- Lodge complaints with regulators
Requests may be submitted through the Platform or official support channels.
Identity verification may be required before processing requests.
8. Cookies and Tracking Technologies
GG'APP may use:
- Cookies
- Session storage
- Analytics tools
- Push notification tokens
- Device identifiers
These technologies help maintain sessions, improve performance, personalize experiences, analyze usage trends, and enhance security.
Users may manage cookie settings through their browsers or device settings.
9. Children's Privacy
GG'APP is not intended for children under 18 without guardian involvement.
We do not knowingly collect personal data from minors without lawful authorization.
If we become aware of unauthorized child data collection, we may delete such information.
10. International Data Transfers
User data may be processed or stored in jurisdictions outside the user's country.
Where international transfers occur, GG'APP will implement reasonable safeguards to protect personal information in accordance with applicable laws.
11. Third-Party Services
GG'APP may integrate with third-party services including:
- Google authentication services (see "Google Sign-In and Google User Data" below)
- Push notification services
- Payment and finance systems
- Cloud infrastructure providers
Third-party services operate under their own privacy policies and terms.
GG'APP is not responsible for third-party privacy practices.
12. Google Sign-In and Google User Data
If you choose to register or sign in with your Google account, GG'APP asks Google only for basic sign-in information (the openid, email and profile scopes). From Google we receive:
- Your name
- Your email address, and whether Google has verified it
- Your Google account ID
- Your profile photo (we do not store it)
We use this information only to create your GG'APP account, sign you in, and keep your account secure, for example to confirm that the email address belongs to you and to link later Google sign-ins to the same account.
We store your name, email address and Google account ID with your GG'APP account. We do not access your Gmail, contacts, files, calendar or any other data in your Google account.
We do not sell Google user data, use it for advertising, or share it with anyone other than the infrastructure providers that host GG'APP on our behalf, or where the law requires it.
You can remove GG'APP's access at any time in your Google Account (Security, then Third-party apps with account access). To delete your GG'APP account and the Google data linked to it, email privacy@gatewayglobal.africa.
GG'APP's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
13. Data Breach Notification
In the event of a data breach affecting user personal information, GG'APP may:
- Investigate the incident
- Mitigate risks
- Notify affected users
- Notify regulators where legally required
14. Automated Decision-Making
Certain processes, including fraud detection, account security monitoring, and financing workflows, may involve automated processing.
Financing decisions remain the responsibility of the relevant finance partner.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Updated versions will be published through:
- The application
- Official websites
- Email notifications where appropriate
Continued use of GG'APP after updates constitutes acceptance of the revised Privacy Policy.
16. Contact Us
For privacy-related inquiries, complaints, or data requests, contact:
- GG'APP Data Protection Office
- Email: privacy@gatewayglobal.africa
- Website: https://gatewayglobal.africa
17. Consent
By using GG'APP, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your information as described herein.