Privacy & Medical Data Consent

_Data controller: LESNAR AI LTD ("CarePro"), Nairobi, Kenya._

This notice explains how CarePro collects and uses your personal and health information, and records your consent to processing your medical data. We handle your information in line with the Data Protection Act, 2019 (Kenya).

1. Information we collect - Account and contact details – your name, email, phone, and an emergency contact. - Care details – your address, the care you request, your schedule, and your preferences. - Health information you choose to share – diagnoses, medication, allergies, mobility, and care notes, provided so that a nurse can care for you safely. - Service records – bookings, visit check-in and check-out, care notes, payments, reviews, complaints, and support messages. - Technical data – limited device and log information used to keep the service secure.

2. Why we use it We use your information to arrange, deliver, and improve your care – that means creating and managing your account, matching you with a suitable verified nurse, arranging and recording care, processing platform payment, keeping you and your nurse safe, handling complaints and incidents, meeting legal and regulatory obligations, and improving the service.

3. Consent to medical data processing You consent to CarePro processing the health information you provide – solely to arrange and deliver your care. You may withdraw this consent at any time, as described in your rights below; if you withdraw it, we may no longer be able to arrange care for you.

4. Who can see your information Access is strictly limited and on a need-to-know basis – only your assigned nurse and authorised CarePro clinical and operations staff can see it. Every access to medical data is logged. We share information with payment providers and other service providers only as needed to run the service, and with authorities where the law requires. We never sell your data.

5. Keeping it safe We protect your data with safeguards built for health information – encryption in transit, restricted role-based access, audit logging, and other measures appropriate to its sensitivity.

6. How long we keep it We keep your information only as long as it is needed – for as long as your account is active and as required to provide care, resolve disputes, and meet legal obligations. After that, it is deleted or anonymised.

7. Your rights under the Data Protection Act, 2019 You control your data and can exercise your rights at any time – you have the right to be informed, to access your data, to correct inaccurate data, to request deletion, to object to or restrict certain processing, and to data portability. Exercise these from your account's Privacy page or by contacting us in the app. You may also lodge a complaint with the Office of the Data Protection Commissioner.

8. Contact Reach us any time through the CarePro app – for any privacy question or request.