Privacy & data protection

DE-TRANSFORMER Health Intelligence is a service that turns a facility's own spreadsheet records into a cleaned data file, a dashboard and a written report. The service is operated from Nigeria and is available to hospitals, clinics, diagnostic centres and health organisations anywhere in the world. For data protection purposes, your facility is the controller of the records it uploads and we act as the processor on your instructions.

Account information: facility name, facility type, contact person, phone number and email address.

Uploaded records: only the columns in our fixed template — appointment date, department, anonymous patient reference, patient age, sex, diagnosis, attendance status, service, amount charged and payment method. Additional columns may be retained only when their names and sampled values do not appear to identify a person.

Activity records: a log of actions taken in your account (uploads, downloads, deletions, share links) with the date and time.

We do not ask for and do not want patient names, phone numbers, addresses or any other direct identifier. An anonymous card or file number may be used only to connect repeat visits; it is never shown in a chart or report. Columns that appear identifying are left out of the cleaned data automatically, but you should still delete the upload and submit a corrected file if identifiers were included by mistake.

The template is designed to reduce identifying information by accepting clinical and operational fields rather than names or contact details. The service analyses visit-level rows and presents grouped totals. An anonymous patient reference can connect repeat visits, but it is not displayed in the dashboard or report.

• Files travel over an encrypted connection (HTTPS/TLS) and are stored encrypted at rest.
• Files sit in a private storage area that is not reachable from the public internet.
• Access is restricted to your signed-in account by database-level rules, not just by the interface.
• Download links are signed and expire after two minutes.
• Every meaningful action in your account is written to an activity log you can review in Settings.
• Share links use an unguessable token, show totals only, and can be switched off at any time.

Written insights are produced from computed totals and percentages only. Individual rows, and any file you upload, are never sent to an AI model. Insights are guidance for a human to review, not clinical advice.

Uploads and their figures are kept until you delete them. Deleting an upload permanently removes the original file, the cleaned file and the computed figures. Closing your account removes your profile and all associated uploads. Activity log entries are retained for up to 12 months so that access can be audited.

We do not sell data and we do not share one facility's data with another. We use trusted infrastructure providers for hosting, database and storage, who process data on our instructions only. Data may be disclosed where we are legally required to do so.

Wherever you are based, you may ask us to give you a copy of your data, correct it, delete it, or stop processing it. Most of this you can do yourself from your dashboard; for anything else, contact us and we will respond within 30 days. These rights are recognised under the Nigeria Data Protection Act, the UK and EU GDPR, and comparable laws elsewhere.

Facilities in any country are welcome to use the service. Because we operate from Nigeria and use international hosting providers, records you upload may be processed on servers outside your own country. Since the template contains no patient names or contact details, what is transferred is de-identified visit-level data rather than directly identifying personal data.

European Union and United Kingdom: we act as your processor and will sign a data processing agreement, including standard contractual clauses for transfers, on request.

United States: we are not currently offering the service as a HIPAA business associate and we do not sign business associate agreements. Do not upload protected health information; the template's de-identified fields are what the service is designed for. Contact us first if your records fall under HIPAA.

If your local law imposes additional requirements on your facility, please contact us before uploading so we can confirm what we can and cannot support.

Questions about this policy or about your data can be sent to the contact address shown on our home page. We will confirm receipt and respond within 30 days.