Privacy policy

This page is maintained by APAO Health Link to explain how personal and clinical information is handled in the platform. Last updated: July 2026.

Who this covers

APAO Health Link is used by patients, hospitals, pharmacies and diagnostic facilities. This policy applies to everyone who signs into the platform, and to patients whose records are created by a doctor or hospital they attend.

What we collect

Account details: name, email, phone, Ghana card or national ID, date of birth, sex.
Clinical data created during care: prescriptions, dispensations, lab and imaging requests and results, and clinical notes.
Facility details for hospitals, pharmacies and diagnostic centres, including licensing information provided during registration.
Operational data: audit logs of actions taken in the platform, payment channel and amounts for pharmacy sales and orders, and technical logs needed to run the service.

How we use it

To deliver clinical care: sharing prescriptions with pharmacies you visit, routing investigation requests to labs and radiology, and letting your care team see what they need.
To confirm identity when a pharmacist or lab technician looks up your record.
To keep an audit trail of who accessed or changed each record, so misuse can be investigated.
To notify you about your prescriptions, orders, investigation results and account changes.

Who can see your data

You can see your own account, prescriptions, orders and investigation results.
Doctors who treat you can see the clinical information relevant to that visit.
Pharmacies can see prescriptions presented to them (via QR scan or ID lookup) so they can dispense.
Lab technicians and radiologists can see investigation requests that were sent to their facility, subject to your approval where required.
System administrators can access records for support, safety and abuse investigation. Every such access is logged.

Security

Access to records is controlled by role and by the relationship between the user and the patient. Sensitive fields (banking, diagnoses, unregistered patient details) have additional restrictions. Passwords are hashed by our authentication provider and administrative keys are held server-side only. All actions on clinical data are recorded in an audit log.

Retention

Clinical records are retained for the period required by Ghanaian health-records regulations. Account data is kept while the account is active and for a reasonable period afterwards to satisfy audit obligations. You can request deletion by contacting us; some records may be retained for legal reasons.

Your choices

You can update your profile from the patient dashboard.
You can approve or decline diagnostic facilities' requests to view your record.
You can unsubscribe from non-essential emails using the link in each message.

Contact

For privacy questions or to make a request about your data, contact the APAO Health Link team through the support channels shown in your dashboard.