Hatishu

What information we collect

Account information: your email address (used to create and secure your account). Your name as you enter it.

Health information you add: doctor visit records, notes, diagnoses, prescribed medications, uploaded documents (scripts, referrals, lab results), sick notes, audio recordings of consultations you choose to record, symptom logs, vitals (including temperature, blood pressure, heart rate and glucose), and dates of birth for you and dependents you add.

Location (optional): your city or region, only if you choose to detect or enter it, used to show anonymised local health trends.

Device permissions: camera (scanning documents), microphone (recording visits), notifications (reminders). Each is optional and can be revoked in your device settings.

How we use your information

• To store, organise and display your own health records back to you.
• To prepare summaries you choose to share with a health practitioner.
• To build anonymised, aggregated local symptom trends if that feature is enabled. Aggregates contain only a region, a symptom category and a broad age band. No names, emails or precise locations are ever shared with other users.
• We do not sell your data and we do not use it for advertising.

Where your information is stored

Your data is stored securely with Amazon Web Services in the Africa (Cape Town) region, encrypted in transit and at rest. Each account can only access its own records. Two incidental cross-border touches may occur: account verification emails transit AWS global infrastructure, and if you use “Detect my location” the device’s mapping service (Google or Apple) processes coordinates to derive your city name.

What we do not do

• We do not provide medical advice, diagnosis or treatment. Hatishu is a record-keeping tool.
• We do not knowingly collect information from children. Health information of dependents under 18 must be added by a parent or legal guardian, who is responsible for that dependent’s information.

Your rights (POPIA)

Under the Protection of Personal Information Act you have the right to:

• Access the personal information we hold about you (it is all visible in the app);
• Correct or update it at any time in the app;
• Delete individual records at any time, or delete your entire account and all associated data via Profile > Delete My Account;
• Withdraw consent by deleting your account;
• Lodge a complaint with the Information Regulator of South Africa.

Data sharing

We do not share your personal information with any third party except:

• AWS, as our data processor operating under contract;
• Anyone you deliberately share a summary with (for example via WhatsApp or email) — that sharing is initiated and controlled by you;
• If legally compelled, to the extent required by law.

Retention

Your data is kept only while your account exists. Deleting a record removes it and its uploaded files. Deleting your account removes all records, files and account information.

Recordings of consultations

Recordings capture the voices of both you and your practitioner. You are responsible for obtaining the practitioner’s consent before recording. Recordings are stored privately in your account and are never shared unless you share them.

Contact

Questions, access requests or complaints: hatishuapp@gmail.com
Information Officer: available on request at the same address.