AfyaKiliPrivacy notice
Draft of 18 October 2026, under legal review. It describes how the app actually works today. The French version prevails.
1. Who we are
AfyaKili is a mental health platform for the Democratic Republic of the Congo: check-ups, consultations with verified professionals, courses and a community. Contact for any question about your data: contact@afyakiliworld.com.
2. The data we process
| Data | Why |
|---|---|
| Email address or phone number | Sign you in with a one-time code (no password). |
| First name, account type, province or city, language and, if you give them, date of birth and sex | Adapt the app and identify you to the professionals you consult. |
| Test answers and results | Calculate your check-up (on our servers) and follow your progress. |
| Appointments, messages, session notes and prescriptions | Organise and record your consultations. Only you and the professional involved can see them. |
| Community posts, support and reports | Run the community. This is never linked to your health record. |
| Consents, notification preferences, device for notifications | Respect your choices and send discreet reminders. |
| Payments (status, amount, last four digits of the phone for mobile money) | Collect a consultation fee or the Plus subscription. We do not store card numbers. |
| Anonymous usage statistics and error reports | Improve the app. No name, email, answers, results or free text. |
3. What your organisation sees
If you join AfyaKili with your employer’s or school’s code, that organisation never sees your answers, results, consultations or community activity. It only receives group trends of at least 10 people; a smaller group is not shown. This rule is enforced in our database, not just on screen.
4. Legal basis
We process your health data with your explicit consent, given at sign-up and changeable at any time. Other processing is based on providing the service you ask for and on our legal obligations.
5. Where your data is and who helps us
Your record is hosted in the European Union (Paris, France). We use providers who process data only on our behalf:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, sign-in, files | European Union (Paris) |
| Resend | Sign-in codes by email | European Union (Ireland) |
| Daily.co | Audio and video calls (not recorded) | United States |
| Expo, Google (Firebase) and Apple | Delivering notifications | United States |
| Sentry | Error reports, without personal data | European Union (Germany) |
| PostHog | Anonymous usage statistics | European Union (Germany) |
| Vercel | Hosting of the website and portal | Global network |
| Apple, Google, mobile money aggregator | Payments | Depends on the provider |
6. Security
Encrypted connections, access limited by rules inside the database, encrypted session on your phone, optional app lock with fingerprint or face, and a log of sensitive actions. Session notes cannot be edited: a correction adds a new note.
7. How long
Your data is kept while your account exists. When you delete your account in the app (Profile → “Delete my account and data”), your data is deleted. The legal retention period for consultation records and prescriptions is being checked and this section will be updated.
8. Your rights
You can export your data (Profile → “Export my data”) or delete your account from the app at any time. To correct your data, withdraw a consent or for any other request, write to contact@afyakiliworld.com.
9. Minors
Students can use AfyaKili through their school. The consent rules for minors and parents are being validated and will be set out here.
10. What we do not do
- We do not sell your data and do not show ads.
- A check-up is not a diagnosis: it gives signs and a recommendation.
- Notifications never show a result or a test name.