Who This Policy Applies To
This Privacy Policy governs how UNIiDIFF LLC ("CareKin") collects, uses, and protects personal data when you access the CareKin Healthcare Provider Portal — the web platform at carekin.care used by healthcare organisations ("HCP Partners") to manage campaigns, clinical resources, professional networking, and related services.
This is a separate policy from the CareKin mobile app Privacy Policy, which covers patient and community member data in the iOS and Android apps.
The CareKin App vs the HCP Portal
The CareKin mobile app is for patients, caregivers, and peer community members. Healthcare professionals running campaigns or managing organisational accounts should use the HCP web portal at carekin.care.
Portal registration may require a licence number, practice certificate (e.g. KMPDC), and identity verification before full access is granted.
Data We Collect from HCP Partners
- Account & identity — name, professional title, email, phone, organisation name, licence numbers, verification documents, and profile photo
- Authentication — login credentials, session tokens, and security logs
- Campaign & content data — campaign drafts, submissions, approvals, scheduling, and performance metrics (aggregate reach counts only)
- Professional network activity — connections, case discussions (as submitted by HCP users), messages sent via the portal, and resource publications
- Technical data — browser type, IP address, device information, and portal usage logs for security and performance
- Support communications — tickets and emails you send to CareKin support
Member Data — No Individual Sharing with HCP Partners
CareKin does NOT share individual member health data, identities, or declared health conditions with HCP Partners. Campaign distribution uses aggregated, community-contextual targeting — HCP Partners see aggregate reach counts for their campaigns, never a list of who viewed them.
How We Use HCP Partner Data
- Verify professional credentials and maintain portal access
- Review, approve, and distribute healthcare campaigns
- Operate portal features (messaging, resources, analytics dashboards)
- Provide customer support and respond to legal requests
- Improve portal security, performance, and compliance
We do not sell HCP Partner personal data. We do not use portal data for third-party advertising.
Cookies & Tracking on the Portal
The HCP Portal uses cookies and similar technologies:
- Strictly necessary — session management, authentication, security (cannot be disabled)
- Functional — display preferences and portal settings
- Analytics — aggregated portal usage and performance (no individual member health profiling)
Manage non-essential cookies via the cookie notice on first visit or Cookie Settings in the website footer.
Who We Share HCP Data With
- Cloud hosting and infrastructure providers (under data processing agreements)
- Email delivery services (account and notification emails only)
- Analytics and crash diagnostics providers (aggregated/technical data only)
- Law enforcement or regulators — only where required by valid legal process
- Third-party advertisers or data brokers — NONE
Security
Portal traffic is transmitted over HTTPS with modern TLS encryption. Authentication tokens are stored securely. Access to HCP verification documents and campaign data is restricted to authorised personnel with audit logging for sensitive actions.
Data Retention
- HCP account data: duration of partnership + 7 years (statutory/regulatory requirements)
- Campaign records: duration of campaign + retention for compliance and audit
- Security logs: up to 2 years
- Support communications: 3 years from last interaction
- Session cookies: expire at end of session or within 24 hours
Account Deletion & Data Rights
HCP Partners may request account closure or data deletion by emailing uniidiff@gmail.com — Subject: HCP Account Deletion Request.
Under the Kenya Data Protection Act 2019, you have rights to access, rectify, erase, restrict, port, and object to processing of your personal data. Contact uniidiff@gmail.com — Subject: Data Rights.
Some data may be retained where required by law, regulatory obligations, or active legal holds.
International Transfers
Where data is processed outside Kenya, we implement appropriate safeguards consistent with the Kenya Data Protection Act 2019 and applicable transfer requirements.
Changes & Contact
Material changes notified at least 30 days in advance where practicable.
HCP Portal support: uniidiff@gmail.com — Subject: HCP Enquiry
Complaints: uniidiff@gmail.com or the ODPC at www.odpc.go.ke