Data Protection.

The public website does not ask for clinical records. Names, email addresses, audience choices and messages are stored in access-controlled systems used by Our Team.

We use encrypted connections, server-side credentials, role-based access and logs appropriate to the website's current data.

Credentials are kept outside the public codebase. Access is limited to people and providers who need it to operate the service.

Clinical data handling will have separate notices, consent flows, retention rules, access controls and audit requirements before those features become available.

We will complete the required legal, security and data-protection reviews for each production service and jurisdiction.

Send privacy or security concerns to hello@heyrafiki.space. Do not include passwords, private keys or clinical records in the first message.