MOAI TECH PVT LTD ("we," "our," or "us") operates the Kadapatha mobile application (the "App"). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal and health-related information when you use our App. By using the App, you agree to the practices described in this policy.
This App is intended for use in Sri Lanka. Users outside Sri Lanka should be aware that data protections may differ from those in their jurisdiction.
Information We Collect
We collect the following categories of information:
Full name, email address, age, and gender, collected for account creation.
Medical history, lifestyle risk factors, health habits, oral health symptoms, and self-reported health data provided by you for the purpose of oral cancer risk assessment.
Name, professional credentials, and clinical notes entered by clinicians using the App in a professional capacity.
Device type, operating system version, anonymised usage logs, and error reports, collected for security monitoring and App performance improvement.
We do not collect any information beyond what is necessary for the App's stated functions.
How We Use Your Information
We use the information we collect to:
- Provide and operate the oral cancer risk assessment features of the App.
- Store and display your screening history and assessment results for clinical follow-up.
- Enable clinicians to access patient records that have been explicitly assigned to them.
- Send you important updates, reminders, or results relating to your use of the App, where you have provided consent.
- Monitor App performance, detect errors, and improve the security and reliability of our systems.
- Generate anonymised, aggregated statistical data to improve the accuracy of risk models. This data cannot be used to identify you personally.
We do not use your personal or health data for advertising, marketing profiling, or any purpose unrelated to the App's core health functions.
Sharing of Information
We do not sell, rent, or trade your personal or health data to any third party.
We may share your data only in the following limited circumstances:
- With clinicians assigned to your case, to the extent necessary to provide the clinical features of the App.
- If required by law, such as in response to a court order, regulatory requirement, or lawful request by a government authority in Sri Lanka.
- To protect rights and safety, where disclosure is necessary to prevent fraud, protect the safety of users, or enforce our Terms and Conditions.
No third-party commercial cloud providers, analytics platforms, or payment processors have access to your personal or health data.
Data Storage and Security
- All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
- Data stored on our servers is encrypted at rest using industry-standard encryption protocols.
- Access to personal and health data is restricted to authorised personnel only, on a need-to-know basis.
- We conduct periodic reviews of our security practices to maintain appropriate safeguards.
While we implement these protections, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, we will notify affected users in a timely manner.
Data Retention
We retain your personal and health data for as long as your account is active and for a period of five (5) years following account closure or your last interaction with the App, in line with standard health record retention practices.
We retain this data to:
- Enable continuity of care and access to historical screening records.
- Comply with applicable legal and regulatory obligations relating to health records.
After this retention period, your data will be securely deleted or irreversibly anonymised. Anonymised and aggregated data (which cannot identify you) may be retained indefinitely for research and model improvement purposes.
You may request deletion of your account and personal data at any time (see Section 6). Where a legal obligation requires us to retain certain records, we will inform you of this at the time of your request.
Your Rights
You have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Request that inaccurate or incomplete data be corrected.
Request deletion of your personal data, subject to legal retention obligations.
Withdraw consent for data processing at any time, without affecting prior processing.
Request your data in a structured, machine-readable format where feasible.
To exercise any of these rights, contact us at the email address in Section 10. We will respond to all requests within 30 days.
Children's Privacy
This App is intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental or guardian consent. If we become aware that data has been collected from a minor without appropriate consent, we will delete it promptly.
Medical Disclaimer
Kadapatha is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. The App provides risk assessment tools for informational and early awareness purposes only. Always consult a qualified healthcare professional for medical advice, diagnosis, or treatment. Do not disregard or delay seeking professional medical advice based on information provided by this App.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or App functionality. When we make material changes, we will update the "Last updated" date at the top of this policy and notify users through the App. Your continued use of the App after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your data, please contact us:
moaitechnology@gmail.com
We aim to respond to all privacy-related enquiries within 14 business days.