Legal Center & Policies
Clear, readable guidelines and agreements governing our community.
Privacy Policy
Effective Date: October 08, 2026 · Last Updated: October 08, 2026
At OneHealthLine Connect ("we," "our," "us"), accessible via web application, mobile application, and USSD interfaces, we prioritize the protection of your privacy and personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our healthcare ecosystem.
1. Data Controller Information
OneHealthLine Connect processes personal data under Law No. 058/2021 relating to the Protection of Personal Data and Privacy in Rwanda. Our Data Controller certificate with the National Cyber Security Authority (NCSA) is underway. Our operations follow the compliance guidelines set by the NCSA.
- Registered Entity: OneHealthLine Connect
- Location: Kigali, Rwanda
- Contact Email: onehealthlineconnect@gmail.com
- Hosting Partner: Local data hosting via AOS (Kigali, Rwanda)
2. Information We Collect
We collect personal and health-related data to provide end-to-end digital health services. The type of data collected depends on how you interact with our platform (Web, Mobile App, or USSD):
A. Personal Identification Data
- Basic Information: Full name, phone number, national ID/passport number, email address, date of birth, gender, and residential location.
- Authentication Credentials: Passwords, login PINs for USSD access, and authentication tokens.
B. Health and Medical Information (Special Category Data)
- Medical Records: Electronic Health Records (EHR), medical histories, diagnoses, treatment notes, and physician notes.
- Appointments & Consultations: Booking dates, virtual teleconsultation audio/video metadata, doctor notes, and referral details.
- Pharmacy & Prescriptions: E-prescriptions, pharmacy order histories, medication fulfillment, and delivery addresses.
- Emergency Data: Emergency assistance requests, location coordinates, and severity indicators.
C. Financial and Billing Information
- Payment Details: Mobile Money (MTN MoMo, Airtel Money) transaction references, bank payment confirmations, and billing receipts processed in compliance with e-invoicing standards (RRA EBM).
D. Technical and System Usage Data
- Device Information: IP address, operating system, browser type, device identifiers, and USSD session metrics.
3. How We Collect Your Data
- Direct Interactions: When you register an account, book an appointment, initiate a teleconsultation, or request an emergency service via our App, Web, or USSD code.
- Healthcare Providers: When authorized doctors, clinics, or hospitals update your medical record or issue e-prescriptions on the platform.
- Health Access Agents: When human-led onboarding ambassadors at participating pharmacies or community centers assist you in setting up your account.
- Automated Technologies: Cookies, web beacons, and server logs when you browse our digital interfaces.
4. Purpose and Legal Basis for Data Processing
We process your personal and medical data under the following legal grounds:
| Purpose of Processing | Category of Data | Legal Basis (Law No. 058/2021) |
|---|---|---|
| Facilitating Medical Services & Bookings | Personal ID, Medical History, Appointment Data | Provision of medical diagnosis and healthcare services |
| USSD & Mobile Accessibility | Phone Number, Session PIN, Usage Logs | Execution of user contract / Service delivery |
| Emergency Dispatch | Real-time Location, Medical History | Vital interest of the data subject |
| E-Prescriptions & Delivery | Prescription Data, Delivery Address | Execution of healthcare contract |
| Invoicing & Regulatory Compliance | Billing Data, Transaction Reference | Compliance with legal obligations (RRA EBM) |
| Platform Improvement & Analytics | Technical & Aggregated Usage Data | Legitimate interest in platform enhancement |
5. Data Sharing and Disclosures
We do not sell, rent, or trade your personal data. We share your information only under the following necessary conditions:
- Healthcare Providers & Clinics: Authorized doctors, nurses, and medical staff directly involved in your care to manage your appointments and health history.
- Partner Pharmacies: E-prescriptions and order details shared with selected pharmacies for medication fulfillment and delivery.
- Emergency Responders: Emergency services and ambulance teams in urgent medical situations.
- Technology & Infrastructure Partners: Secure local hosting providers (AOS Rwanda) and payment gateways (MTN MoMo, Airtel) strictly for transaction processing.
- Legal & Regulatory Authorities: When required by law or in response to valid legal requests by Rwandan authorities or the NCSA.
6. Data Security and Localization
- Local Hosting: In compliance with national data sovereignty regulations, all user data, medical histories, and system logs are stored securely on local servers within Rwanda in partnership with AOS.
- Security Safeguards: We employ end-to-end encryption for data in transit and at rest, role-based access controls for doctors/admins, regular vulnerability assessments, and secure authentication protocols for USSD and web channels.
7. Data Retention
We retain your personal and medical records only for as long as necessary to fulfill the purposes outlined in this policy or as mandated by Rwandan health laws and medical record retention regulations. Once data is no longer required, it is securely anonymized or permanently deleted.
8. Your Data Rights
Under Law No. 058/2021, you have the following rights regarding your personal data:
- Right to Access: Request a copy of your personal data and health records stored on our platform.
- Right to Rectification: Request corrections to inaccurate or incomplete personal information.
- Right to Erasure: Request the deletion of your personal data, subject to legal and medical record retention requirements.
- Right to Object/Restrict Processing: Restrict or object to certain processing activities, such as non-essential marketing communications.
- Right to Data Portability: Obtain your data in a structured, commonly used electronic format.
- Withdrawal of Consent: Withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, please contact our Data Protection Office at onehealthlineconnect@gmail.com.
9. Third-Party Links and Services
Our platform may contain links to external websites or third-party applications. We are not responsible for the privacy practices or content of these third-party platforms. We encourage you to review their respective privacy policies.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our legal obligations or operational procedures. Any updates will be published on our platform with an updated "Last Updated" date. Continued use of our platform after updates indicates acceptance of the revised policy.
11. Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please reach out to us at:
- Email: onehealthlineconnect@gmail.com
- Phone: +250 788 777 888
- Address: OneHealthLine Connect, Kigali, Rwanda