Privacy Policy

CHIL FemTech Center (“CHIL,” “we,” “us,” or “our”) operates as a specialized digital health and women’s health technology platform, including our KETI AI infrastructure, connecting healthcare facilities, patients, healthcare professionals, diagnostic laboratories, and pharmacies. CHIL is committed to protecting the privacy, confidentiality, security, and integrity of personal and health information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal data when you use our platforms, visit our website, register as a healthcare facility or provider, utilize our specialized women's health and clinical intelligence tools, submit clinical data, or otherwise interact with our services.

CHIL is fully committed to complying with applicable data protection and privacy laws, including the Uganda Data Protection and Privacy Act, 2019, the Data Protection and Privacy Regulations, 2021, and, where applicable, international data protection standards such as the EU General Data Protection Regulation (GDPR). Health data, genomic markers, reproductive health records, and clinical profiles receive heightened protection as special personal data under Uganda's legal framework.

The legal entity is CHIL FemTech Center and KETI AI Solutions. Our physical address is located at the 4th Floor, Bible House, Kampala, Uganda. Our country of primary operation is Uganda, and our official website is www.keti.ai. For privacy-related questions, requests, complaints, or regulatory concerns, our privacy contact email is info@ketiai.tech. Our designated Data Protection Officer is Agaba Peter, who can be reached directly at info@ketiai.tech.

CHIL operates as a specialized technology platform and healthcare intelligence infrastructure provider. Depending on the specific service, clinical module, or partnership involved, CHIL may act as a data controller, a data processor, a joint controller, or another legally recognized role under applicable data protection legislation. For instance, a partner hospital or clinic determines why and how a patient's medical history is collected for clinical care, while CHIL processing that information on the facility's behalf to provide telemedicine connectivity, diagnostic routing, and AI-powered clinical decision support.

Because CHIL focuses on comprehensive healthcare and specialized women's health intelligence, we process sensitive personal data. This includes full names, dates of birth, contact details, and location data, alongside clinical history, symptoms, diagnoses, treatments, and prescriptions. We also process specialized health records, including reproductive health data, gynecological records, clinical profiles, laboratory test results, imaging files, pathology data, genomic indicators where applicable, consultation notes, digital referral records, and care coordination details.

If you register as a physician, general practitioner, specialist, or consultant, we collect your professional credentials, medical license details, specialties, institutional affiliations, contact information, consultation preferences, and verification documentation.

For hospitals, clinics, medical centers, laboratories, and pharmacies joining the network, we collect corporate registration data, licensing credentials, physical facility locations, authorized representative details, and service portfolios.

Where financial transactions or provider compensation occur, we process billing details, transaction logs, invoices, and secure banking or mobile-money information through certified third-party financial partners.

When accessing our web or mobile applications, we automatically log IP addresses, device types, operating systems, login timestamps, security metrics, and platform activity to safeguard system integrity.

We collect data directly from you, from participating healthcare facilities, attending physicians, partner diagnostic laboratories, and authorized pharmacies, as well as through secure platform integrations, API connections, and lawful administrative records.

We process personal and health data strictly for legitimate operational, clinical, and research purposes. This includes healthcare delivery and telemedicine by facilitating virtual specialist consultations, connecting frontline general practitioners with remote experts, routing lab orders, and managing e-prescriptions. We also utilize data for specialized health intelligence by powering predictive clinical decision-support tools and analytical workflows designed to optimize healthcare delivery and patient outcomes. Furthermore, data is used for platform security and integrity by authenticating users, preventing unauthorized data access, detecting technical anomalies, and maintaining audit trails, as well as for legal and regulatory compliance by fulfilling statutory obligations under Ugandan law, responding to lawful regulatory inquiries, and managing legal claims.

We process personal data only when a valid lawful basis is established. Depending on the activity, this includes explicit user consent, contractual necessity, the provision of medical and healthcare services, compliance with statutory obligations, and protection of vital clinical interests. Under Uganda's Data Protection and Privacy Act, processing is authorized for medical purposes, public health interests, and statutory duties.

CHIL may process information relating to minors when pediatric or adolescent healthcare services are administered through the network. We exercise heightened care, securing verifiable consent from a parent, legal guardian, or authorized decision-maker in strict alignment with Ugandan statutory protections.

We disclose personal data strictly on a secure, need-to-know basis to authorized entities. This includes healthcare providers such as hospitals, clinics, doctors, and specialists directly involved in a patient's clinical care journey, as well as diagnostic and pharmacy partners comprising accredited laboratories processing tests and pharmacies fulfilling medical prescriptions. We also share data with technology infrastructure providers offering secure cloud hosting, encryption, and software maintenance partners bound by strict data processing agreements, regulated payment processors and mobile-money networks handling platform disbursements, and regulatory authorities including government bodies, courts, or law enforcement agencies when mandated by Ugandan law or binding judicial orders. CHIL does not sell, rent, or trade patient medical records or personal data to commercial advertisers.

All CHIL employees, technical contractors, and network clinicians are bound by strict statutory and contractual confidentiality obligations. Access to sensitive health records is governed by strict role-based access control. Third-party data processors utilized for cloud storage or technical architecture are vetted to ensure they maintain technical and organizational security measures meeting or exceeding Ugandan regulatory standards.

Where personal data is hosted or processed across international borders, CHIL ensures full compliance with the Uganda Data Protection and Privacy Act. We implement robust safeguards, including end-to-end encryption and contractual protections, to ensure that transferred data maintains a standard of security equivalent to domestic requirements.

CHIL deploys military-grade technical and organizational safeguards, including multi-factor authentication, robust encryption standards in transit and at rest, continuous system monitoring, and immutable security audit logs. In the event of a qualifying security breach affecting personal or health data, CHIL will conduct an immediate investigation and formally notify the Personal Data Protection Office of Uganda without undue delay, fulfilling all statutory notification requirements outlined in the Data Protection and Privacy Regulations, 2021.

CHIL retains personal and clinical data only for as long as necessary to fulfill the specific purposes for which it was collected, satisfy clinical record-keeping mandates, comply with medical auditing standards, and resolve disputes. Upon expiration of retention periods, data is securely archived, deleted, anonymized, or irreversibly de-identified.

Under Ugandan law and applicable international standards, data subjects hold several enforceable rights. These include the right of access to request confirmation of data processing activities and obtain copies of personal or medical records, the right to correction to request the rectification of inaccurate, incomplete, or outdated information, the right to erasure to request the deletion of personal data where legally permissible, the right to object or restrict to challenge or limit specific data processing workflows, and the right to withdraw consent to revoke previously provided consent at any time without affecting prior lawful processing. To exercise these rights, individuals may contact our Data Protection Officer, Agaba Peter, at info@ketiai.tech. We verify identities before fulfilling requests and respond within statutory timeframes, typically within 30 days under Ugandan law.

If you have privacy concerns or believe your data has been handled improperly, please contact our Data Protection Officer first so we can resolve the matter. If unresolved, you retain the statutory right to file a complaint with Uganda's national data protection authority, the Personal Data Protection Office operating under the National Information Technology Authority-Uganda located in Kampala, Uganda.

CHIL utilizes advanced artificial intelligence and machine-learning models, including predictive algorithms and clinical decision-support tools, to assist healthcare providers with workflow efficiency and analytical insights. Our human-in-the-loop principle ensures that AI tools never replace professional medical judgment, as licensed healthcare professionals retain absolute, independent authority over all clinical decisions, diagnoses, and treatment plans. Furthermore, patient clinical data is never utilized to train generalized, public commercial AI foundation models without explicit consent and rigorous anonymization frameworks.

We update this Privacy Policy periodically to reflect technological upgrades, structural expansions, or shifts in regulatory mandates. Material modifications will be published on our platform with the updated effective date clearly indicated.

This Privacy Policy is governed by and construed in accordance with the laws of Uganda, including the Uganda Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021, alongside applicable international framework standards where cross-border operations intersect.

For any questions, disclosures, or data rights requests, please contact CHIL FemTech Center at our physical address on the 4th Floor, Bible House, Kampala, Uganda. You can reach our Data Protection Officer, Agaba Peter, via email at info@ketiai.tech, or visit our website at www.keti.ai.

CHIL FemTech Center — Advancing Healthcare Intelligence. Protecting Trust.