Privacy Policy

Your privacy and data security are our top priorities

Effective Date: September 15, 2025Last Updated: September 15, 2025

Introduction

Synapsis ("Platform") is operated by Myelin Sheath Africa Limited ("we," "us," or "our"), a company registered in Kenya. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in compliance with the Constitution of Kenya (2010), the Data Protection Act, 2019, the Digital Health Act, 2023, and other applicable laws. By registering for or using Synapsis, you agree to the terms of this Privacy Policy.

Information We Collect

We may collect and process the following categories of personal and professional data:

  • Full name and photograph
  • National Identification Number or Passport details (including date of birth)
  • Email address and telephone number
  • Professional cadre, speciality, registration details, and practice location
  • Account credentials (username and password)
  • Biometric information (where expressly consented to)
  • Engagement and usage patterns within the Platform

We may also process anonymised patient data shared by users for clinical collaboration, provided such data is fully de-identified and shared only with informed consent in compliance with the Data Protection Act (2019) and Digital Health Act (2023).

How We Use Your Information

Your data is used to:

  • Verify your eligibility to access the Platform
  • Provide and personalise Platform services
  • Enhance functionality and improve user experience
  • Facilitate secure peer-to-peer professional exchange
  • Generate anonymised insights for research, education, and public health purposes
  • Deliver relevant content and tailored engagement, including sponsored or educational material from carefully selected healthcare and medicine-adjacent partners (such as pharmaceutical, medical device, insurance, or educational organisations)

We do not sell your personal information to third parties. Where we work with partners, any data shared is aggregated or anonymised unless you provide explicit consent. Sponsored content or advertisements that you may see on the Platform are managed by us, and your identifiable personal data remains under our control.

Lawful Basis for Processing

We process your personal data on the following lawful bases:

  • Consent – where you have provided explicit consent (e.g., biometric data collection)
  • Contract – to perform our obligations under the Terms and Conditions
  • Legal Obligation – to comply with Kenyan laws and regulations
  • Legitimate Interest – to improve the Platform and provide secure, evidence-based collaboration

Data Sharing and Disclosure

We may share anonymised or aggregated data with trusted partners in healthcare, pharmaceuticals, medical education, and insurance to:

  • Understand professional engagement trends
  • Tailor relevant educational content and services
  • Support research and evidence-based outreach

We do not disclose identifiable personal information unless: required by law or lawful government request; necessary to protect our legal rights or user safety; or you provide explicit consent.

Data Security

We employ robust technical and organisational measures, including encryption, access controls, and secure storage systems, to protect your data against loss, misuse, or unauthorised access. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute protection. Users are responsible for safeguarding their login credentials.

Your Rights

Under the Constitution of Kenya (2010) and the Data Protection Act (2019), you have the right to:

  • Know how your data is collected and processed
  • Access personal data held about you
  • Request correction or deletion of inaccurate or outdated data
  • Object to certain forms of data processing
  • Withdraw consent at any time (without affecting prior lawful processing)
  • Request erasure of your account and associated personal data

To exercise these rights, please contact us at support@synapsis-africa.com.

Retention of Data

We retain personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, comply with legal obligations, or resolve disputes. Anonymised or aggregated data may be retained indefinitely for research and educational purposes.

Cookies and Analytics

We may use cookies, log files, and analytics tools to enhance functionality and improve user experience. You may disable cookies through your browser settings, but some features of the Platform may be limited as a result.

Third-Party Services

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such external sites. We encourage you to review their privacy policies.

Children's Data

The Platform is intended for use by healthcare professionals only. We do not knowingly collect personal data from minors under the age of 18.

Changes to This Privacy Policy

We may amend this Privacy Policy from time to time to reflect legal, technical, or operational changes. We will notify users of any significant updates via email or in-platform notifications. Continued use of the Platform after such updates constitutes acceptance of the revised Policy.

Governing Law

This Privacy Policy is governed by the laws of Kenya. Any disputes shall be resolved under the provisions of the Arbitration Act, 1995, with arbitration conducted in Nairobi, Kenya.

Contact Information

For questions, requests, or complaints regarding this Privacy Policy, please contact:

Myelin Sheath Africa Limited
Block E, KMA Building, Chyulu Road
P.O. Box 19624 – 00202
Kenyatta National Hospital, Nairobi, Kenya
Email
support@synapsis-africa.com