Privacy Policy

Radiant Afya Plan, also referred to as RAP, provides member healthcare wallet, loyalty, dependant, payment, and support services through its web dashboard, mobile application, USSD, and connected facility systems.

This policy explains how we collect, use, protect, and share personal information when you use RAP services.

We may collect and process the following information:

• member name, phone number, RAP number, date of birth, gender, residence, and identity details;
• dependant or beneficiary details, relationship, date of birth, usage, and proof documents;
• front and back identification documents or birth certificate or birth notification documents;
• wallet balance, top-up records, service settlement records, transaction references, and receipts;
• loyalty points, conversion history, promotions, and discount offer usage;
• mobile app login status, access tokens, OTP verification state, device/network metadata, and audit logs;
• support requests and communications sent to RAP support channels.

We use personal information to:

• create and manage RAP member accounts;
• verify phone numbers, OTPs, PIN reset requests, and secure access;
• operate member wallets, SasaPay top-ups, wallet transactions, and service settlement workflows;
• manage loyalty points, point-to-wallet conversion, promotions, and discount offers;
• register and review dependants or beneficiaries;
• support healthcare facility verification and HMIS integration where applicable;
• prevent fraud, unauthorized access, misuse, and duplicate registrations;
• send important service notifications by SMS or other approved channels;
• comply with applicable legal, regulatory, accounting, and audit requirements.

RAP does not store raw PINs. PINs are protected using secure hashing on the server. OTPs and PIN reset tokens are temporary and are used only to verify access or complete reset requests.

Wallet top-ups are processed through payment providers such as SasaPay. RAP updates a wallet only after payment confirmation is received through the approved backend callback process.

We may share necessary information with trusted service providers and partners only where needed to provide RAP services. These may include payment processors, SMS providers, technology infrastructure providers, healthcare facility systems, support providers, professional advisers, and regulators or public authorities where required by law.

We do not sell member personal information.

Documents uploaded from the mobile app or web dashboard are sent to RAP backend systems for verification and record keeping. They are not intended to be stored permanently inside the mobile app.

When you choose to upload or capture documents, the mobile app may request camera or photo access only for the document upload feature. RAP does not use camera or photo access in the background.

We use administrative, technical, and operational safeguards to protect information against unauthorized access, loss, misuse, or alteration. No digital system can be guaranteed to be completely secure, but RAP works to apply reasonable protections appropriate to the sensitivity of the data.

We retain personal information for as long as necessary to provide RAP services, satisfy legal and accounting obligations, resolve disputes, prevent fraud, support audits, and maintain accurate medical wallet and transaction records.

You may contact RAP support to request help with account access, correction of inaccurate details, privacy questions, or support with your member account. Some records may need to be retained where required for legal, healthcare, audit, fraud-prevention, or transaction reasons.

Members may request access, correction, or deletion of personal information where legally and operationally permitted. RAP will review each request based on account status, transaction history, healthcare wallet records, audit requirements, and applicable law.

Where dependant information is submitted, the principal member or authorized staff must ensure they have authority to provide that information. Child dependant documents such as birth certificates or birth notifications are used only for verification and dependant management.

For privacy or support questions, contact RAP support:

• Email: rapcardsupport@radianthospitals.org
• Phone: 0709668811
• Physical address: ALONG JUJA ROAD, BUILDING: RGH PLAZA

Last updated: 24 June 2026