Privacy Policy

Last updated: 11 August 2026

This Privacy Policy explains how Sudan Healthcare Company, acting as a Third Party Administrator (TPA) for health insurance services, collects, uses, shares, and protects your personal and health information when you use the Sudan Health Care mobile application and related services.

By using the app you agree to the practices described here. If you do not agree, please do not use the app.

1. Information We Collect

We collect the following information, most of which originates from the insurance policy held by your employer or policyholder:

• Identity data: name, national ID, date of birth, gender, insurance card number, member photo.
• Contact data: mobile number, email address, geographic location (city/branch).
• Account data: one-time passcodes (OTP) sent to your mobile number for sign-in.
• Health and insurance data: coverage, benefits and ceilings; claims and reimbursement requests; preauthorization requests; doctor visits and bookings; chronic condition and medication dispensing records; and any medical documents or photographs you upload.
• Device data: push notification token (FCM), device model and operating system, app version, IP address, and technical usage logs.

The app does not collect precise GPS location, does not access your contacts or messages, and contains no advertising or advertising trackers.

2. How We Use Your Information

• Verify your identity and eligibility for insurance coverage.
• Display your policy, benefits, ceilings, and member card.
• Process and track claims, reimbursements, and preauthorization requests.
• Manage doctor bookings, chronic care programmes, and medication reminders.
• Send push notifications about approvals, rejections, and updates to your requests.
• Provide customer support and respond to your enquiries.
• Meet our contractual and regulatory obligations and prevent fraud and misuse.

We do not sell your personal or health information, and we do not use it for third-party marketing.

3. Information Sharing

We share your information only as necessary, with:

• Insurance companies that underwrite your policy, for underwriting and claims approval.
• Healthcare providers (hospitals, clinics, pharmacies) in the medical network, to verify coverage and deliver treatment.
• The policyholder (your employer), limited to eligibility and membership information — not your clinical details.
• Technical service providers, specifically Google Firebase Cloud Messaging for push notifications and our SMS provider for one-time passcodes.
• Regulators and judicial authorities where we are legally required to do so.

4. Dependants and Minors

A policy may cover dependants, including children under 18. Dependant information is supplied by the principal member or the policyholder, who is responsible for its accuracy. The app is not directed at children, and we do not collect information from them directly.

5. How We Protect Your Information

• All traffic between the app and our servers is encrypted using HTTPS/TLS.
• Session tokens are stored on your device in the operating system's secure store (Keystore / Keychain).
• Access to health data within our systems is restricted by role-based permissions and audit logs.
• Sign-in requires a one-time passcode sent to your registered mobile number.

While we apply appropriate safeguards, no method of electronic transmission or storage is completely secure.

6. Data Retention

We retain insurance and claims records for the duration of your policy and for the period required afterwards by applicable Sudanese health and insurance regulations. App account data — such as device tokens, passcodes, and medication reminders — is deleted when your account is closed.

7. Your Rights

• Access the personal and health information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal information.
• Withdraw consent for notifications at any time in your device settings.
• Lodge a complaint about how your information is handled.

8. Push Notifications

We use Google Firebase Cloud Messaging to deliver notifications. You can disable them at any time in your device's notification settings, though you may then miss important updates about your claims.

9. Changes to This Policy

We may update this policy from time to time. The last updated date appears at the top of this page, and we will notify you in the app when we make material changes.

10. Contact Us

For any question about privacy or your information:

• Sudan Healthcare Company
• sudan healthcare company, 123 Main Street, Khartoum, Sudan
• Email: info@sudanhealthcare.com
• Phone: +249122122400