Effective Date: 12 October 2026
Platform Owner: Mobile Facilitation Team (MOFATE), Tanzania
This Privacy Policy explains how MOFATE collects, uses, shares, retains and protects personal data when you use the MOFATE OneHealth platform. It applies to all users of the platform, including health professionals, facility administrators and community members. It should be read together with our Terms and Conditions.
We may collect the following categories of information:
Information you provide: your name, email address, phone number, region and district, professional role, specialty, licence or registration numbers, affiliated facility, profile and passport photograph, professional CV, and the text, images, documents or files you upload to the platforms.
Health-related information: where you use referral, teleconsultation or community-support features, we process the health information necessary to deliver those services, which may include patient details, clinical summaries, diagnoses and treatment notes. This information is handled with additional care and restricted by role.
Account and authentication data: account credentials, session and refresh tokens, and, where you choose it, the identifier provided by a linked Google account.
Payment and transaction records: consultation bookings, payments, payment references and evidence, and related records.
Technical and usage data: device and browser information, IP address, log and audit records, and platform activity required for security and reliability.
We process personal data lawfully and only for legitimate purposes, including: providing and operating the platform and its services; creating and managing your account; enabling referrals, teleconsultations and professional directories; maintaining education and CPD records; communicating with you; processing payments and verifying transactions; providing support; ensuring security, preventing misuse and maintaining audit trails; and meeting legal and regulatory obligations. We do not sell your personal data to third parties.
We process personal data on the basis of your consent, the performance of a service or contract with you, compliance with legal obligations, and our legitimate interests in operating secure and effective platforms. Where processing is based on consent, you may withdraw that consent at any time, subject to legal and contractual restrictions.
Personal data may be shared only where necessary and appropriately authorized, including with: authorized service providers and infrastructure partners that help us operate the platform; relevant health professionals, facilities and administrators involved in a referral or consultation; institutions where relevant to the stated purpose; and authorities where required by law. Directories and promotional activities disclose only the information appropriate to the stated purpose and applicable consent.
We implement reasonable technical, organizational and administrative safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss or misuse. Access is restricted according to authorized roles and responsibilities. You must protect your password and devices, provide accurate information, and promptly report suspected unauthorized access to your account. No digital system can guarantee absolute security.
If a personal data breach occurs, MOFATE will investigate, contain and assess the incident, take appropriate corrective measures, and notify affected users and relevant authorities where required by applicable law. Users should promptly report suspected breaches through MOFATE's designated contact channels.
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, to meet legal obligations, for legitimate recordkeeping and to resolve disputes. Certain records, including clinical, CPD, financial and audit records, may need to be retained after an account is closed or deleted where the law or professional obligations require it.
Subject to applicable law, you may request access to and a copy of your personal data; request correction of inaccurate or incomplete data; request deletion of your personal data; withdraw consent where processing is based on consent; object to or request restriction of certain processing; and exercise any other rights available under applicable data protection law. You can update much of your information directly from your profile page. To exercise other rights, contact us using the details below.
The platforms are intended for use by health professionals, facility administrators and authorized users. Where health information relating to a child is processed as part of a service, it is handled by the relevant professionals in accordance with applicable law and professional obligations. We do not knowingly allow children to create accounts on the platforms.
Where personal data is processed or stored outside the United Republic of Tanzania, we take reasonable steps to ensure it remains protected in accordance with this Policy and applicable law.
We may update this Privacy Policy to reflect operational, technological or legal changes. Material changes will be communicated appropriately, and continued use of the platforms after the effective date of a revised Policy constitutes acceptance where legally valid.
For questions about this Privacy Policy, to exercise your data protection rights, or to report a suspected data breach, contact us:
Privacy Contact: Mobile Facilitation Team (MOFATE)
Terms and Conditions · Home · MOFATE OneHealth