Privacy policy
This policy covers the Central MedLab / Central 24 iOS and Android apps, including the Harare and Domboshava laboratory connections. The apps give authorised healthcare professionals access to records made available by their connected laboratory.
Information we handle
- Account information: email address, account identifier, authentication information and the doctor profile supplied by the laboratory.
- Laboratory information: patient details, visits, requested services, test results and report documents available to the signed-in account.
- Technical information: device information, IP address and IP-derived approximate location, app and software versions, device or installation identifiers, screen and interaction events, performance measurements, crashes and error diagnostics.
- Support information: information you choose to provide when contacting us.
How we use information
We use information to authenticate accounts, synchronise and display records, make reports available, maintain security, investigate errors, measure performance, understand product usage and respond to support or privacy requests. Account identifiers and email addresses can link usage and diagnostic information to an account.
Service providers
Supabase provides authentication, database and document storage services. PostHog provides usage analytics, lifecycle events, performance measurements and error information. Analytics include account identifiers, signed-in email addresses and email addresses entered during sign-in, including unsuccessful or abandoned attempts. Mobile session recording is disabled. The mobile analytics code filters patient identifiers, clinical search text, report contents and credentials from PostHog events.
The mobile apps use Sentry for errors, diagnostic logs and performance monitoring. Diagnostic information can include account identifiers, email addresses, device information, IP addresses, error types, stack traces and performance measurements. Mobile diagnostic filters exclude console breadcrumbs, request payloads, clinical query context and authentication callback credentials. These providers process information to operate their services and may process it outside your country.
Access to laboratory records follows the connected laboratory's account permissions. Opening a downloaded report in another app makes it subject to that app's handling of the file.
Storage and retention
The apps store session information, preferences and cached records on your device. Authentication tokens use the device's secure credential storage. Reports you download or open may remain on the device or in another app. Usage analytics also store identifiers locally.
Account records and diagnostics are retained as needed to operate, support and secure the service. Laboratory records are subject to the laboratory's record-keeping responsibilities. Removing the app removes its local storage but does not delete a server account, laboratory records or files saved elsewhere.
Your requests
Contact Central MedLab to request access to or correction of your information, account deletion, or information about retention and data use. We may need to verify your identity and coordinate with the laboratory that supplied a record. Please do not send passwords, sign-in links or patient reports by email.
Contact
Central MedLab
68 Central Avenue, Harare, Zimbabwe
Telephone: +263 78 693 8004
Email: central24hrlab@gmail.com
We may update this policy as the service changes. The effective date identifies the current version.