Tymira Care Finder

Privacy notice

Draft for review by Tymira Health's data protection officer before launch.

Who we are

Tymira Care Finder is run by Tymira Health, Nairobi, Kenya. We process personal data under Kenya's Data Protection Act, 2019.

What we collect, and why

  • Your matching answers, such as what you'd like help with and your budget. These are used once to suggest providers and are not stored.
  • Your location, only if you choose "Use my location". It's rounded to about 1 km on your device and used for that search only. Map images come from OpenStreetMap's servers, which receive that rounded area, as for any map.
  • Your name and mobile number when you book, so the provider can confirm or change your session. We share them only with the provider you book. We text you a confirmation code, a confirmation, one reminder and any cancellation, through an SMS provider acting on our behalf. Texts never name the provider or the kind of care.
  • Your language choice, in a small cookie, so pages show in the language you picked. If you arrived through a partner's link (for example from your clinic, school or employer), a second cookie remembers which partner for up to 30 days, so we can count the bookings they help with. Neither cookie identifies you.
  • We count searches, matches and bookings, and searches that found no good match, by area, need and language, to see where more providers are needed. These counts never include who searched, and we never show a group smaller than five.
  • If you choose "Also show places from Google Maps", we send Google your area, rounded to about 1 km, and the type of provider you're looking for, so Google can list places nearby. Google may process this outside Kenya. We never send what you told us you need help with.
  • If you use the care navigator (an AI assistant), what you write is sent to Anthropic, our AI provider, which may process it outside Kenya, to create replies. We remove phone numbers, emails and ID numbers first, and neither we nor the navigator store the conversation. If what you write suggests you may be at risk, we show crisis support and send nothing.
  • We don't ask for symptoms, diagnoses or medical history.

How long we keep it

We remove your name and number from a booking [retention period to be confirmed: default 90 days] after the session. Unconfirmed booking requests are deleted after a day.

Your rights

You can ask to see, correct or delete your data, or withdraw consent, by contacting [privacy contact to be confirmed]. You can also complain to the Office of the Data Protection Commissioner (ODPC).