Privacy Policy

1. Overview 2. Data Collected 3. Data Usage 4. Third Parties 5. Permissions 6. Security 7. Deletion Rights 8. Children 9. Contact
Privacy Summary

Code Blue Africa is a professional clinical training platform for healthcare personnel and students. We respect your privacy, collect only data essential for providing educational services, enforce encrypted transport & storage, and never sell or monetize your personal information. You maintain full control over your data, including the right to request full account and data deletion at any time.

1. Overview & Scope

This Privacy Policy describes how Code Blue Africa ("we", "our", or "us") collects, uses, discloses, and protects sensitive user and device data when you use our mobile application.

By using Code Blue Africa, you agree to the collection and use of information in accordance with this Privacy Policy and the Google Play User Data Policy requirements.

2. User & Sensitive Data We Collect

We collect data to provide, personalize, and improve clinical learning modules, assessment tracking, and certificate generation.

A. Personal Identification Data

  • Account Credentials: Full name, professional role (e.g., Physician, Nurse, Medical Student), specialization, and email address collected during registration or authentication.
  • Profile Information: Optional user avatar or profile photograph uploaded via camera or photo picker.

B. Academic & Training Progress Data

  • Course enrollment history, completion status, assessment scores, certificates earned, and clinical module progress.
  • Queries and interaction history submitted to the in-app AI Tutor feature for medical education queries.

C. Device & Technical Information

  • Operating system version, device model, app version, language preference, network connection state, and standard performance metrics required to ensure app stability and prevent crash events.

3. How We Use Your Information

We process collected data exclusively for valid operational and educational purposes:

Data Category Primary Purpose Legal / Operational Basis
User Profile & Credentials User authentication, account management, identity verification on training certificates. Service Provision / Contract Fulfillment
Learning & Assessment Data Tracking course progress, score analytics, certificate issuance. Service Functionality
AI Tutor Input Generating clinical guidance, answering medical education questions. User-Requested Service
Device & System Data App performance optimization, debugging crash reports, securing account access. Legitimate Interest / Security

4. Third-Party Services & Data Sharing

We do not sell, rent, trade, or share your personal information or sensitive device data with third-party advertisers, data brokers, or marketing networks.

We work with trusted infrastructure providers who adhere to strict data security standards:

  • Supabase (Cloud Backend & Database): We use Supabase for authentication, user session persistence, database operations, and secure file storage (e.g. avatar images and certificates). Supabase processes data under enterprise-grade encryption and Row-Level Security (RLS) policies.
  • Google Gemini API / AI Service: When using the AI Tutor feature, clinical text queries are transmitted securely via API to process answers. Inputs are strictly used for response generation and are not repurposed for public model training without user consent.

5. Device Permissions Transparency

Code Blue Africa requests only the minimal system permissions necessary for app functionality. You can grant or revoke these permissions at any time via your device settings:

  • Camera / Media Library (READ_EXTERNAL_STORAGE / Photo Picker): Requested only when you choose to upload or update a profile picture or save clinical certificate files to your device.
  • Internet Access (INTERNET / ACCESS_NETWORK_STATE): Required to synchronize training progress, authenticate with Supabase, and communicate with the AI Tutor.
  • Storage & File Sharing (WRITE_EXTERNAL_STORAGE / Expo Print): Required when exporting, printing, or sharing PDF completion certificates.

6. Data Security & Storage

We prioritize the security of sensitive user data:

  • Encryption in Transit: All communications between the mobile application and backend services use encrypted HTTPS / TLS 1.3 channels.
  • Encryption at Rest: Data stored in our database and cloud storage is encrypted at rest.
  • Access Control: Fine-grained Row-Level Security (RLS) ensures users can only access their own authorized records.
  • Local Security: Local session tokens on mobile devices are stored securely via encrypted device storage (AsyncStorage / SecureStore).

7. Data Retention & Account Deletion Rights

In compliance with the Google Play User Data Policy, users have full control over their account data, including the right to request complete account and data deletion.

Account & Data Deletion Request Process

You may request account deletion at any time directly in the mobile application:

  1. Navigate to Settings > Profile > Delete Account in the application.
  2. Confirm your account deletion request.

Upon confirmation, all personal identification data, profile details, course attempt logs, and stored credentials will be permanently erased from our primary databases within 30 days.

8. Children's Privacy Notice

Code Blue Africa is designed exclusively for medical professionals, clinical trainees, and healthcare students. Our application is not intended for children under 13 years of age (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us by email at onyangojuma984@gmail.com or via the support section in the Code Blue Africa mobile application.