Privacy policy

The Santé-Connect service is published by EasyGet-Services, SARL unipersonnelle, whose registered office is in Nyalla, Douala (Cameroon).

For patient data entered by a health facility or by a doctor, that facility or doctor is the data controller: they decide what is entered and why. Santé-Connect acts as a processor, on their behalf and on their instructions. For user accounts and the personal medical record that a patient keeps themselves, Santé-Connect is the data controller.

• User account: name, email address, phone, password (never stored in plain text: only a bcrypt hash is kept), the facility the user belongs to, and their role.
• Patient records, entered by the facility: identity, date of birth, sex, phone, address, blood group, allergies, medical history, consultations (reason, vital signs, symptoms, diagnosis), prescriptions, medicines dispensed, inpatient stays and payments.
• Personal medical record, kept by the patient: identity, date of birth, sex, blood group, allergies, medical history and person to notify. It is shared only with the professionals the patient chooses.
• Doctors: identity, specialty, place of practice, Medical Council registration number, experience, and the verification documents (Medical Council certificate, degree, identity document, photo with the document). These documents are kept in private storage: no public link leads to them, and only the doctor and the Santé-Connect team can open them.
• Teleconsultations: the patient’s name, email, phone, age and reason, the day requested, then the doctor’s report, prescription and follow-up notes. Video calls are not recorded. The follow-up link sent by email to a patient without an account expires 6 months after the teleconsultation; a patient account opened with the same email address then finds it.
• Payments: amount, payment method and reference. Card numbers and Mobile Money codes are entered with the payment provider, never with Santé-Connect.
• Technical data: connection and error logs needed for the security and proper functioning of the service.

• Enabling the facility to manage its patients, consultations, pharmacy, cash desk and inpatient care.
• Enabling patients to request a teleconsultation and doctors to respond, to conduct it by video call and to follow up the patients.
• Verifying doctors’ identity and registration with the Medical Council before presenting them to patients.
• Authenticating users and securing access to records.
• Sending service messages by email: verification codes, password resets, teleconsultation requests and appointments.
• Collecting payment for subscriptions, credits and Doctor Pro months.
• Producing, for each facility only, its own activity statistics.

Data is neither sold nor used for advertising purposes.

• Each facility sees only its own data: any request concerning a record of another facility is refused by the server.
• Sessions rely on httpOnly cookies, inaccessible to the page’s JavaScript, sent only over HTTPS in production and protected against cross-site requests.
• Sensitive actions leave a trace: each stock movement and each receipt shows its author; a cancelled receipt is kept with the reason for the cancellation.
• Repeated sign-in attempts are limited to slow down attacks.

Santé-Connect uses no advertising or audience measurement cookies. Only strictly necessary cookies are set:

• session (15 minutes) and session renewal (7 days);
• request anti-forgery token (7 days);
• when signing in with Google, two 5-minute security cookies.

If you tick “Remember me”, your identifier (email or phone number) is kept in the device’s browser, only to prefill the sign-in form. In a centre, offline mode keeps on the device a copy of the data needed, erased when you sign out, as well as the entries waiting to be sent, until they are sent.

The service relies on technical providers, each limited to its role:

• hosting of the application: Vercel, running in Frankfurt (Germany);
• database: Neon (PostgreSQL), in Frankfurt (Germany);
• limiting the number of requests: Upstash;
• private storage of doctors’ documents: Cloudinary;
• sending service emails: Resend;
• teleconsultation video calls: Daily;
• payments: Fapshi and Nyole;
• signing in with a Google account, if you choose it: Google.

Several of these providers are American companies (Vercel, Upstash, Cloudinary, Resend, Daily, Google): the data they process may leave Cameroon. These transfers are governed by their contractual data protection commitments.

• Patient records: for the retention period that regulations require for the medical record. The facility or doctor acting as data controller ensures that it is respected.
• User accounts: for the duration of the subscription or of the use of the account, then 1 year.
• Accounting documents (receipts, payments): 10 years, the period set by OHADA law.
• Verification codes: 15 minutes, then unusable.

In accordance with the Cameroonian regulations applicable to the protection of personal data, you have a right of access, rectification, objection and erasure of your data, within the limits of the legal retention obligations.

Patients: for data entered by a health facility or a doctor, address your request to that facility or doctor; only they can act on it. For your personal medical record, as for any user account, write to contact@sante-connect.com.

You can also refer the matter to the personal data protection authority provided for by Cameroonian law.