Data controller
Bongolabs SAS, publisher of Mobateli (details in the legal notice), is responsible for the processing described here. Contact: support@mobateli.com.
Data we collect
- Account: first and last name, sex, phone and/or email, city, password (stored as an irreversible hash).
- Health record: history, consultations, prescriptions, tests, vaccines, treatments, emergency card — entered by you or by the professionals you authorised.
- Health professionals: specialty, licence number and documents needed for verification.
- Website: newsletter sign-up email, messages sent through the contact form. This site uses no advertising cookies.
Why we use it
- To keep your health record and share it with the care providers you authorise.
- To let verified professionals care for you (consultations, prescriptions, appointments).
- To secure accounts and prevent abuse (verification codes, access log).
- To answer your requests and, if you asked for it, send you our newsletter.
Your consent comes first
No professional can view your record without your agreement: access is granted with a one-time code (OTP) that only you share. You can remove that access at any time. Every access is recorded in an audit log. We never sell your data or use it for advertising.
Public directory
Active facilities and pharmacies appear in the directory with their professional contact details. A doctor only appears if they enabled it themselves; their phone number is never shown. No patient data appears there.
Security
Sensitive medical data is encrypted, traffic goes through encrypted connections (HTTPS) and access is limited according to each person's role.
Service providers
We rely on technical providers that process data on our behalf: hosting (Vercel, MongoDB Atlas, Bongolabs servers), email (Resend) and SMS delivery. They only access the data they need for their task.
Retention
The health record is kept while your account is active, then for the periods required by the regulations applicable to health data. Newsletter sign-ups are kept until you unsubscribe; contact messages for as long as needed to handle your request.
Your rights
You can access your data, have it corrected, ask for its deletion or object to some processing, in accordance with the regulations in force in the Democratic Republic of the Congo. Write to support@mobateli.com from the address linked to your account; we will verify your identity before acting.