Privacy Policy

1. Who We Are

BrazyMed ("we", "us", "our") is a pharmacy management system owned and operated by Brazy Technologies, based in Kisumu, Kenya. This privacy policy explains how we collect, use, and protect your information when you use our platform.

Contact Information:

• Email: info@brazytechnologies.co.ke
• Phone: +254 704 457 849
• Location: Kisumu, Kenya

2. Information We Collect

2.1 Business Information

• Pharmacy/Company name, registration number, tax ID
• Branch addresses, phone numbers, email addresses
• Subscription and payment information

2.2 Staff Information

• Names, email addresses, phone numbers
• Role and permissions within the system
• Login credentials (password hashed, never stored in plain text)

2.3 Patient Information

• Names, ID numbers, contact details, date of birth
• Medical history, prescriptions, and dispensing records
• Visit history and clinical notes

2.4 Business Data

• Inventory, sales, purchase orders, expenses
• Supplier information, reports, and analytics
• System usage logs for audit and security

3. How We Collect Information

• Direct Input: Information you enter during registration, adding patients, processing sales, or managing inventory.
• Automated Collection: System logs, IP addresses, browser type, and usage patterns to improve performance.
• Email Communications: When you contact us via email or use our receipt/backup email features.

4. How We Use Your Information

• To Provide Services: Process sales, manage prescriptions, track inventory, generate reports.
• To Improve Our Platform: Analyze usage patterns to enhance features and performance.
• To Communicate: Send receipts, backups, system updates, and support responses.
• For Security: Monitor for unauthorized access, fraud prevention, and audit trails.
• Legal Compliance: Comply with Kenyan pharmacy regulations and data protection laws.

5. Data Ownership & Export

You own your data. All business, staff, and patient information entered into BrazyMed belongs to you, the pharmacy owner.

• You can export your data anytime as CSV files (sales, inventory, patients, prescriptions, suppliers, expenses).
• We do not sell or rent your data to third parties.
• You can request full data deletion upon account closure.

6. Email Communications

We send automated emails for:

• Receipts: When a patient completes a purchase (if email provided).
• Backups: Weekly data backups sent to your configured backup email.
• System Notifications: Account updates, security alerts, and support responses.

All emails come from brazybrazymed@brazytechnologies.co.ke. You can configure receipt and backup email addresses in your settings.

7. Data Retention

• Active data is retained as long as your account is active.
• Upon account closure, you can request immediate deletion or we will retain data for 30 days before permanent deletion.
• Backup emails contain your data — please store them securely.
• Financial records may be retained longer for legal/compliance reasons (Kenyan tax laws).

8. Data Security

• Passwords are hashed using bcrypt — never stored in plain text.
• All data is stored on secure servers with access controls.
• Regular automated backups protect against data loss.
• Access to production data is restricted to authorized personnel only.
• We use HTTPS encryption for all data transmission.

9. Sharing Your Information

We do not sell your data. We may share data only in these limited circumstances:

• With your consent: When you explicitly authorize sharing.
• Legal requirements: When required by Kenyan law or court order.
• Service providers: Hosting providers, email services (only as necessary to operate).

10. Children's Privacy

BrazyMed is not intended for use by individuals under 18 years of age, but minors data maybe required by pharmacists to process their prescriptions. We do not knowingly collect information from minors.

11. Cookies & Tracking

We use cookies to:

• Maintain your login session
• Remember your preferences
• Analyze website traffic (Google Analytics)

You can disable cookies in your browser settings, but some features may not work properly.

12. Your Rights (Under Kenyan Law)

Under the Kenyan Data Protection Act (DPA), you have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request data deletion (subject to legal retention)
• Portability: Export your data in common format
• Objection: Opt out of non-essential processing

To exercise these rights, contact us at brazymed@brazytechnologies.co.ke.

13. Changes to This Policy

We may update this privacy policy occasionally. Material changes will be notified via email or dashboard notice. Continued use of BrazyMed after changes constitutes acceptance of the updated policy.

14. Contact Us