The Rwanda Biomedical Centre as the implementing agency for the Ministry of Health of Government of Rwanda is responsible for the RBC-C19 App which assists the end users to access his/her COVID-19 status related to test results and vaccination
The world digitalization has been one of the solutions helping to fight with the pandemic in real time, especially having trustful information and the COVID-19 check status App is a fundamental element of a public health response to disease outbreak and back to business. It is the process of self-identification which will help to know who is eligible to certain services according to rules and regulations in place of cause in that case the individual will have to present his/her status via the RBC-C19 app and furthermore to help stop the further spread of COVID-19.
The Application is FREE and is intended for use as stated above. Internet connectivity is required to utilize the Application and its related services; therefore the required internet connectivity costs as per the Internet Service Provider (ISP) of the Application users shall be applicable.
Definitions and key terms
Demographic and other personally identifiable information (such as your name, Passport/ID Number, Phone Number and email address) that you voluntarily give to us when choosing to participate in various activities related to the Application, such as:
Mobile Device Access
To operate optimally, the Application shall require access or permission to certain features from your mobile device, CAMERA to read the QR codes, phone dial to call helplines, and other related features. If you wish to change our access or permissions, you may do so in your device’s settings.
Data from Social Networks
User information from social networking sites, such as [WhatsApp, Apple’s Game Center, Facebook, Google+ Instagram, Pinterest, Twitter], including your name, your social network username, location, gender, birth date, email address, profile picture, and public data for contacts, shall not be permissible and usable in the Application. The Application shall not have any interfaces or related facilities to enable connection of your account to such social networks.
Mobile Device Data
Device information such as your mobile device ID number, model, and manufacturer, version of your operating system, phone number, country, location shall not be required in the use and operations of the Application and its derivatives.
There shall be no Push Notifications done through the Application. Push Notifications includes notifications regarding your account or the Application, for example when there is an Application upgrade performed.
Information from third parties, such as personal information or network friends shall not be permissible or usable. There shall be no facility to enable you to connect your account to the third party and grant the Application permission to access this information.
Data from Contests, Giveaways, and Surveys
Personal and other information you may provide when entering contests or giveaways and/or responding to surveys through your phone and other applications shall not be permissible or usable in the Application.
How Do We Use The Information We Collect?
Any of the information we collect from you may be used in one of the following ways:
When does RBC-C19 App use end user information from third parties?
RBC-C19 will collect End User Data necessary to provide COVID-19 status via the RBC-C19 back to End user for personal and public needs.
We may also disclose personal and non-personal information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate in order to respond to claims, legal process (including subpoenas), to protect our rights and interests or those of a third party, the safety of the public or any person, to prevent or stop any illegal, unethical, or legally actionable activity, or to otherwise comply with applicable court orders, laws, rules and regulations.
Where and when is information collected from end users?
RBC-C19 will collect personal requested information that you submit to us.
How Long Do We Keep Your Information?
The information collect it’s for personal usage for COVID-19 individual status and we keep your information only so long as we need it to provide RBC-C19 App to you and fulfill the purposes described in this policy. This is also the case for the Health workers or public servant that we share your information with and who carries out services on our behalf inline of fighting the spread of COVID-19. When we no longer need to use your information and there is no need for us to keep it to comply with our legal or regulatory obligations, we’ll either remove it from our systems or depersonalize it so that we can't identify you.
How Do We Protect Your Information?
We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of a secure server and we are required to keep the information confidential. We cannot, however, ensure or warrant the absolute security of any information you transmit to RBC-C19 or guarantee that your information on the Service may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or managerial safeguards.
Is the information collected through the RBC-C19 Service secure?
We take precautions to protect the security of your information. We have physical, electronic, and managerial procedures to help safeguard, prevent unauthorized access, maintain data security, and correctly use your information. However, neither people nor security systems are foolproof, including encryption systems. In addition, people can commit intentional crimes, make mistakes or fail to follow policies. Therefore, while we use reasonable efforts to protect your personal information, we cannot guarantee its absolute security. If applicable law imposes any non-disclaimable duty to protect your personal information, you agree that intentional misconduct will be the standards used to measure our compliance with that duty.
Can I update or correct my information?
The rights you have to request updates or corrections to the information RBC-C19 collects depend on your relationship with RBC-C19. Personnel may update or correct their information as detailed in our internal Institution employment policies.
You should be aware that it is not technologically possible to remove each and every record of the information you have provided to us from our system. The need to back up our systems to protect information from inadvertent loss means that a copy of your information may exist in a non-erasable form that will be difficult or impossible for us to locate. Promptly after receiving your request, all personal information stored in databases we actively use, and other readily searchable media will be updated, corrected, changed or deleted, as appropriate, as soon as and to the extent reasonably and technically practicable.
If you are an end user and wish to update, delete, or receive any information we have about you, you may do so by contacting us.
If you are a RBC-C19 user or applicant, we collect information you voluntarily provide to us.
The laws of Rwanda, excluding its conflicts of law rules, shall govern this Agreement and your use of the app.
Links to Other Websites
Local Storage sometimes known as DOM storage, provides web apps with methods and protocols for storing client-side data. Web storage supports persistent data storage, similar to cookies but with a greatly enhanced capacity and no information stored in the HTTP request header.
What is personal data?
Any data that relates to an identifiable or identified individual. GDPR covers a broad spectrum of information that could be used on its own, or in combination with other pieces of information, to identify a person. Personal data extends beyond a person’s name or email address. Some examples include financial information, political opinions, genetic data, biometric data, IP addresses, physical address, sexual orientation, and ethnicity.
The Data Protection Principles include requirements such as:
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
We do not sell the Personal Information of our users.
For more information about these rights, please contact us.
Don't hesitate to contact us if you have any questions.