Trust & compliance
How we protect your child's information
In plain language: what we collect, who can see it, and how we keep it lawful.
What we collect
Only what a nurse or doctor needs to care for your child: vaccination, growth, and antenatal records, plus your name and phone number.
Who can see it
Only authorized facility staff, scoped to their role and facility, plus you as the guardian. There is no public or research access.
You can check it yourself
Open your child's record from any phone through the Parent Portal, verified by a one-time SMS code — no account needed.
Every entry is accountable
Every record shows who entered it, at which facility, and when — a full audit trail, not an anonymous database.
Our security practices
- Mandatory multi-factor authentication for administrator and Ministry-level accounts
- Role-based access, scoped to each facility — a nurse at one facility cannot browse another
- All traffic encrypted in transit (HTTPS) between devices and our servers
- Offline records are queued safely on the device and cannot be duplicated on sync
- Three independent review passes to date, with every high-severity finding closed
Legal & regulatory compliance
Personal Data Protection Commission (PDPC) registration
Fedha Technologies Limited is registered with Tanzania's Personal Data Protection Commission as a Data Processor (Certificate No. 0-000-011-700, issued 3 September 2026, valid until 3 September 2031).
How long we keep information
Clinical data is kept only as long as needed for a child’s ongoing care and for legal recordkeeping, then deleted or anonymized under a retention schedule developed for review with the Ministry of Health.
Formal documentation
The project readiness overview is available below. The Data Processing Agreement template, retention schedule, and NIDA/eGA integration readiness assessments are available directly to partner facilities and the Ministry of Health on request.