Privacy Policy

Oracle Healthcare is a connected digital healthcare platform that enables patients, doctors, pharmacies, laboratories, institutions and government health programmes to access and manage healthcare services. We are committed to protecting the privacy and security of your personal information, particularly the sensitive health information entrusted to us.

This Privacy Policy explains how Oracle Healthcare collects, uses, shares and protects personal information when you use our platform. By using Oracle Healthcare, you agree to the practices described in this policy.

Oracle Healthcare is a digital healthcare platform operated from Harare, Zimbabwe, designed to connect patients with healthcare providers across Africa. The platform facilitates telemedicine consultations, digital prescriptions, laboratory services, pharmacy services, health monitoring and emergency support.

For any privacy-related enquiries, you can contact us at support@oraclehealthcare.com or +263 (24) 274 5000.

This policy applies to all users of the Oracle Healthcare platform, including patients, doctors, institution administrators, pharmacy staff, laboratory staff, government and public health users, and super administrators. It covers information collected through the website, mobile applications and connected services.

Where healthcare services are provided by independent doctors, clinics, hospitals, pharmacies or laboratories through the platform, those providers may have their own privacy practices. This policy covers the information processed by the Oracle Healthcare platform itself.

Oracle Healthcare collects information that you provide directly, information generated through your use of the platform, and information from connected devices and services. The types of information we collect are described in the sections below.

We only collect information that is necessary for providing healthcare services, maintaining account security and meeting applicable legal obligations. We practise data minimisation — collecting only what is needed for the stated purpose.

When you create an account, we collect your full name, email address, phone number, and role (patient, doctor, institution administrator, etc.). For patients, we may also collect date of birth, gender, national ID, blood type, address and emergency contact information.

For healthcare professionals, we collect professional details such as specialty, licence number and institution affiliation. For institutions, we collect the institution name, type, address and licence information.

Oracle Healthcare processes sensitive health information that you or your healthcare providers enter into the platform. This may include medical history, allergies, current medications, chronic conditions (such as hypertension, diabetes, HIV/AIDS, asthma and others), past surgeries, family medical history, immunisation records and lifestyle information.

This information is used to provide you with healthcare services, maintain your Health Passport and support clinical decision-making by authorised healthcare professionals. Access to this information is controlled through role-based permissions and consent settings.

We collect and store information related to your consultations and appointments, including the type of consultation (video, audio or messaging), scheduled date and time, chief complaint, consultation notes, clinical notes and consultation status. This information links patients to their healthcare providers and supports continuity of care.

The platform stores digital prescription records, including medication names, dosages, frequencies, quantities, instructions, prescribing doctor details and pharmacy information. Prescription status is tracked from request through to dispensing and collection. This information is accessible to the patient, the prescribing doctor and the dispensing pharmacy where appropriate permissions apply.

Laboratory test requests and results are stored on the platform, including test type, ordering doctor, laboratory institution, sample collection details, results and result notes. Results may be flagged as normal, abnormal or critical. This information is accessible to the patient, the ordering doctor and the laboratory where appropriate permissions apply.

The My Health Passport feature consolidates your medical history, consultations, prescriptions, laboratory results, health readings and other relevant health information into a single, secure record. You control who can access your Health Passport through consent and permission settings. Family proxy access can be granted for carers, parents or guardians where appropriate.

When you use the AI symptom assessment feature, we process the symptoms and descriptions you provide to generate a preliminary risk assessment and care guidance. AI assessments are stored in your record and may be reviewed by a qualified healthcare professional. AI-powered features provide information and guidance only — they do not constitute a medical diagnosis and are not a replacement for a qualified healthcare professional.

Where you use Oracle Voice features, voice input may be transcribed and processed to enable voice-based interaction with the platform. Voice transcripts may be stored to support the functionality and improve the service. You can manage voice consent through the platform settings.

When you make payments for consultations, subscriptions or other services, we process transaction information including payment method, amount and payment status. Payment card details are processed through secure payment providers and are not stored on the Oracle Healthcare platform itself.

We collect technical information such as device type, browser type, IP address and operating system to provide and maintain the service, ensure security and troubleshoot issues. This information is used in an aggregated and anonymised form for analytics where possible.

We collect information about how you use the platform, including pages visited, features used, session duration and interaction patterns. This helps us improve the service and understand user needs. Usage analytics are conducted on an aggregated basis and do not identify individual users where possible.

Oracle Healthcare uses your information to: provide healthcare services including consultations, prescriptions, laboratory tests and pharmacy services; maintain your health records and Health Passport; facilitate communication between you and your healthcare providers; support emergency response where you activate SOS features; process payments and subscriptions; maintain platform security and prevent fraud; comply with legal obligations; and improve and develop the platform.

Authorised healthcare professionals (such as your doctor) can access your health information where you have consented and where there is a legitimate healthcare purpose. Access is controlled through role-based permissions — a doctor can only see records of patients they are treating, and only for the information necessary to provide care.

Healthcare institutions (hospitals, clinics, pharmacies, laboratories) can access patient information through the platform where appropriate permissions, consent and legitimate healthcare purposes apply. Institution administrators can manage staff access and oversee activity within their institution. Access is scoped to the institution's patients and services.

You have control over who can access your health information. You can grant or revoke consent for AI processing, data sharing and family proxy access through your account settings. You can manage permissions for healthcare providers and institutions. Your consent choices are respected across the platform.

Oracle Healthcare does not sell your personal or health information. We share information only where necessary to provide the service, where you have consented, or where required by law. This includes sharing with your healthcare providers, connected pharmacies and laboratories, and emergency services where you activate SOS features.

Your health information may be shared with healthcare providers (doctors, pharmacies, laboratories) who are connected to you through the platform, where there is a legitimate healthcare purpose and appropriate consent. These providers are independent entities responsible for their own data protection practices.

Government and public health users can access aggregated and anonymised healthcare data through dedicated dashboards. This data is used for public health monitoring, healthcare access analysis and service planning. Government dashboards are designed to show population-level statistics and should not expose identifiable patient information.

We may use and share aggregated, anonymised information that does not identify individuals for analytics, research, public health reporting and service improvement. This information cannot be used to identify any individual person.

Oracle Healthcare is designed with security, privacy and data-governance principles appropriate for a connected digital healthcare platform. We use encryption to protect data in transit and at rest, role-based access controls to limit access to authorised users, and audit trails to monitor access to sensitive information. Access to health records requires authentication and is logged.

While we take appropriate measures to protect your information, no system can guarantee complete security. We continuously work to improve our security practices and respond to potential incidents.

We retain your personal and health information for as long as your account is active and for as long as necessary to provide services, comply with legal obligations and maintain records. Health records may be retained for a period consistent with applicable healthcare record-keeping requirements. You can request deletion of your account and associated data, subject to legal retention obligations.

Oracle Healthcare operates from Zimbabwe and processes data in accordance with applicable local laws. Where data is processed or stored using cloud infrastructure that may transfer data across borders, we take steps to ensure appropriate safeguards are in place. We aim to comply with applicable data protection requirements for cross-border data transfers.

You have the right to access your personal information, request correction of inaccurate information, request deletion of your data (subject to legal retention requirements), and withdraw consent for data processing. You can exercise these rights through your account settings or by contacting us.

You can access and update your personal and health information through your account dashboard. If you need to correct information that you cannot edit yourself, contact us at support@oraclehealthcare.com and we will assist you.

You can request deletion of your account through your profile settings. When you delete your account, we will remove your personal information from active use. Some information may be retained where required by law or for legitimate healthcare record-keeping purposes. Deletion requests are processed in accordance with applicable legal requirements.

Oracle Healthcare is not intended for use by children without the involvement of a parent, guardian or authorised carer. Family proxy access can be configured for guardians managing the healthcare of children or dependants. Where a child's health information is added to the platform, it is managed by the authorised adult account holder.

Oracle Healthcare uses cookies and similar technologies to maintain user sessions, provide security features, remember preferences and support analytics. For details on the specific cookies used, please refer to our Cookie Policy at /cookie-policy.

Oracle Healthcare integrates with third-party services for payment processing, cloud infrastructure and other platform functions. These third parties process information according to their own privacy policies. We share only the information necessary for the service to function and do not share more than is required.

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. We will notify users of significant changes through the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

If you have any questions about this Privacy Policy or how your information is handled, please contact us:

Email: support@oraclehealthcare.com
Phone: +263 (24) 274 5000
Location: Harare, Zimbabwe