Privacy Policy

Effective Date: 01/07/2025
Owner: Mount Meru Regional Referral Hospital (MMRRH)
Product: Mt Meru Online Mobile Application

Mt Meru Online is a digital health platform developed by Mount Meru Regional Referral Hospital to provide telemonitoring, e-consultations, medication tracking, appointments, physiotherapy services, and access to health records. This Privacy Policy outlines how we collect, use, store, and secure your information.

1. Information We Collect

1.1 Personal Information

Full name
Phone number
Email address
Gender and date of birth
National ID / Hospital ID
Next of kin details

1.2 Medical Information

Diagnosis, medical history
Vital signs from telemonitoring
Medications and adherence
Laboratory results and imaging
Consultation notes and appointments
Physiotherapy and rehabilitation progress

1.3 Device & Technical Data

Device model and OS version
IP address
Crash logs and analytics
Push notification token

1.4 Usage Data

Pages and features used
Time spent on the app
User interaction events

2. How We Use Your Information

Your information is used to provide, improve, and secure digital health services:

Telemonitoring and virtual consultations
Appointment booking and reminders
Medication reminders and tracking
Access to laboratory and imaging results
Secure chat with healthcare providers
System diagnostics and improvement

We do not sell your data or use it for advertising.

3. Sharing of Information

We may share information only when necessary:

3.1 With Authorized Healthcare Providers

Doctors and nurses
Pharmacists
Laboratory and radiology teams
Physiotherapists

3.2 With Third-Party Service Providers

Cloud hosting platforms
Real-time communication services (e.g., Laravel WebSockets)
SMS/Email delivery services

3.3 Legal Requirements

We may disclose your data to comply with Tanzanian laws, court orders, or public health regulations.

4. Data Security

We use strict security measures including:

Encrypted databases
Secure HTTPS APIs
Access controls based on staff roles
Audit logs
End-to-end encrypted chat

We follow Tanzania’s eHealth Strategy and international health data safety standards inspired by HIPAA/GDPR.

5. Data Retention

Medical information is retained according to hospital policy and the Ministry of Health regulations. After the retention period, data is securely archived or deleted.

6. Your Rights

Access your medical records
Request correction of inaccurate data
Request deletion of your account (medical records remain as required by law)
Request restriction of non-essential processing
Request a copy of your data

📧 ict@mtmerurrh.go.tz
📧 erick.lyimo@mtmerurrh.go.tz

7. Children’s Privacy

Parental or guardian consent is required for minors under 18 years when using the App, especially for telemonitoring and medical data access.

8. Cookies & Tracking

The app may use anonymous analytics, crash reporting, and session tracking for performance improvement. These do not personally identify users.

9. Updates to This Policy

We may update this Privacy Policy periodically. Updates will be communicated through the app and published on this page.

10. Contact Information

Mount Meru Regional Referral Hospital (MMRRH)
ICT Department
Arusha, Tanzania
📧 ict@mtmerurrh.go.tz
📧 erick.lyimo@mtmerurrh.go.tz