Privacy policy

1. Who we are

Chengeto is operated by CyberSelp Incorporation, 4th Floor Karigamombe Building, Northwest Wing, Harare, Zimbabwe. Chengeto lets patients find verified doctors’ rooms in Zimbabwe and book appointments, and gives practices tools to run their rooms: bookings, patient records, billing and medical aid claims.

For your account and bookings, we decide how your information is used. For the clinical records a practice keeps about you (visits, vitals, notes, diagnoses and documents), the practice is responsible for that information and we store and process it on the practice’s behalf.

2. Information we collect

From patients

• Account details: name, email address, mobile number and password (stored only as a secure hash).
• The people you book for, such as family members: name, date of birth, sex and contact details.
• Medical aid details you save: medical aid, scheme, membership number and dependant code, and a photo of your card if you upload one.
• Bookings: practice, doctor, service, time, reason for the visit and booking status.
• Health forms you complete before a visit, including your answers and consent.

Created by the practices you visit

• Your patient file: file number, identification and next-of-kin details, allergies and chronic conditions.
• Visit records: vitals, consultation notes, diagnoses, prescriptions, sick notes, referral letters, results and other documents.
• Invoices, payments, statements and medical aid claims.

From practices and their staff

• Practice details, practice number, verification documents, payment details shown to patients, and staff names, emails and roles.

Collected automatically

• Security records: sign-ins, failed attempts, and an audit trail of who viewed or changed records, with the IP address and time.

3. How we use your information

• To run your account and make, change and remind you about bookings.
• To share your booking and the details needed for your care with the practice you book with.
• To let practices keep your records, bill you and claim from your medical aid.
• To send booking confirmations, reminders, health form requests and account emails or SMS messages.
• To keep Chengeto secure, prevent fraud and misuse, and meet our legal obligations.

4. Who we share it with

• Practices you book with or are registered at. Only that practice sees your bookings and records there. Other practices cannot see them.
• Your medical aid, when a practice submits a claim or checks your cover. Claims may be sent through the Health 263 claims switch.
• Service providers that host Chengeto and deliver our emails and SMS messages, under agreements to keep it confidential.
• Video consultations run on Jitsi Meet. Your name, picture and voice pass through the Jitsi service while the call is in progress. Each call has its own private link, which is only available to you and the practice around the appointment time. Chengeto does not record calls.
• Authorities, when the law requires it.

We do not sell your information, and we do not use it for advertising.

5. How we protect it

• Information is sent over encrypted connections.
• Sensitive fields, including membership and ID numbers, clinical notes, documents and health form answers, are encrypted when stored.
• Each practice’s records are kept separate at the database level, and staff see only what their role allows.
• Passwords are hashed, accounts lock after repeated failed sign-ins, and administrators must use two-step verification.
• Access to patient records is logged.

6. How long we keep it

We keep your account information while your account is open. Medical and billing records are kept for as long as the practice is required to keep them by law and by professional rules. When information is no longer needed, we delete it or make it anonymous.

7. Your rights

Under the Cyber and Data Protection Act [Chapter 12:07] you can:

• ask for a copy of the information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, unless we or a practice must keep it by law;
• object to, or ask us to restrict, how we use it; and
• withdraw consent you have given, for the future.

You can update most of your details yourself in your account. For records a practice keeps, you can also ask that practice directly. To make a request, contact us at admin@cyberselp.com or 0776504919. If you are not happy with our response, you can complain to the Data Protection Authority (POTRAZ).

8. Cookies and storage on your device

We only use cookies and storage needed for Chengeto to work. There are no advertising or tracking cookies.

• Sign-in cookies keep you signed in securely and are removed when you sign out.
• A small setting remembers if you closed the “Get the Chengeto app” prompt.
• The installed app keeps copies of public pages so they open without a connection. Your bookings, records and dashboards are never stored on your device, and saved pages are cleared when you sign out.

9. Children

Accounts are for adults. A parent or guardian can add a child to their account and book appointments for them.

10. Changes to this policy

If we make important changes, we will tell you by email or on Chengeto before they take effect. The date at the top shows when this policy last changed.

11. Contact us

For questions about your privacy, contact us at admin@cyberselp.com or 0776504919.