Play4Health ("we," "our," or "us") is committed to protecting the privacy of patients, caregivers, healthcare professionals, and organisational users who interact with our platform. This Privacy Policy explains how we collect, use, store, and share personal and operational data across our services.
Play4Health is operated by Play for Earth, headquartered in Nairobi, Kenya. Where patient or caregiver data is processed as part of a pharmaceutical company's patient support programme, the deploying organisation acts as data controller and Play4Health acts as data processor.
We collect the following categories of data depending on how you interact with the platform:
We do not collect clinical data, diagnoses, prescriptions, or any data that constitutes a medical record. We do not process data that identifies patients by name unless explicitly provided by the deploying organisation as part of programme configuration.
We do not sell personal data. We may share data with:
Each client programme runs in an isolated multi-tenant environment. Data from one programme is never accessible to, or shared with, another client organisation.
Where the platform processes data that may be considered health-related or special category data under applicable data protection law (including GDPR or equivalent national frameworks), the deploying pharmaceutical or healthcare organisation is responsible for ensuring that an appropriate legal basis exists for such processing — including obtaining any required patient consents — before deploying Play4Health as part of their programme.
Play4Health processes this data solely on the documented instructions of the deploying organisation and does not use it for any independent purpose.
Verified action data — including photographs, timestamps, and engagement records — is retained for 24 months by default. Account data is retained for the duration of the active programme and deleted within 90 days of programme closure upon written request. Aggregated, anonymised data may be retained indefinitely for benchmarking and platform improvement purposes.
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Patients and caregivers whose data is processed as part of a pharmaceutical programme should direct data rights requests to the deploying organisation in the first instance, as they act as data controller for that programme.
For all other requests, contact us at hello@play4health.org. We will respond within 30 days.
We implement industry-standard technical and organisational measures to protect data, including encryption in transit and at rest, access controls, and regular security reviews. Each client environment is logically isolated. No system is perfectly secure; we encourage programme administrators to protect account credentials and follow access management best practices.
Our website uses essential cookies for navigation and session management. We do not currently use advertising or tracking cookies. You can manage cookie preferences through your browser settings.
Play4Health is operated from Kenya. Data may be processed by cloud infrastructure providers in other jurisdictions. Where data originating from the European Economic Area or other regulated regions is processed, we ensure appropriate transfer mechanisms are in place consistent with applicable data protection law.
We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notification. Continued use of the Services after changes constitutes acceptance of the revised Policy.
For privacy-related questions or requests, contact us at hello@play4health.org or visit our contact page.