Privacy Policy

The information BMC collects depends on the features you choose to use.

A. Account and personal information

• Name or display name
• Username
• Email address
• Profile photograph or avatar
• Account identifier
• Authentication information
• Age or date-of-birth information where required
• User preferences
• Account and profile settings

Where Google Sign-In is used, BMC may receive your name, email, profile image, and provider account identifier. BMC does not receive your Google account password.

Users may voluntarily provide sensitive health-related information. It is treated as sensitive personal data and is collected only as reasonably necessary for the features you select.

Therapy programs, sessions, exercises, assessments, mood ratings, goals, progress, streaks, reflections, and related recommendations may be processed to provide personalized wellness experiences and continuity between sessions.

Information submitted to an AI-enabled feature may be processed by BMC and authorized AI service providers solely as necessary to provide, secure, improve, or moderate the requested feature. BMC does not authorize third-party AI providers to independently use sensitive health information for advertising or unrelated profiling.

AI-generated responses may contain errors and should not be treated as professional medical diagnosis or emergency medical advice.

If you participate, we may process posts, stories, comments, reactions, memberships, reports, hashtags, mentions, shared media, and public profile information. Avoid posting medical or sensitive information publicly unless you intend to share it.

BMC may process identifiers, message content, timestamps, delivery status, presence information, call metadata, and media attachments as needed to deliver and protect communications.

BMC does not intentionally record private voice or video calls unless the user is clearly informed and provides any consent required by applicable law.

Where BMC connects users with professionals, we may process information necessary to identify the professional, manage appointments, enable communications, and maintain relevant records.

Depending on permissions you provide, BMC may process identity, emergency contacts, location, device information, and safety messages.

BMC should not be relied upon as the sole means of obtaining emergency assistance. If someone is in immediate danger, contact local emergency services.

BMC may automatically collect device type, operating system, app version, identifiers where permitted, IP address, login timestamps, crash logs, security events, and performance information to operate, secure, and improve the service.

If you enable notifications, BMC may process device notification tokens to send account, message, therapy, wellness, appointment, safety, and community notifications you select or permit.

Permissions for camera, media library, microphone, Bluetooth, health sensors, notifications, and location are requested only where reasonably required. You may revoke them in device settings.

If you connect a supported device, BMC may receive supported health, activity, stress, heart-rate, or blood-pressure measurements for the functions disclosed to you.

BMC may use information to operate accounts, provide therapy and wellness features, personalize experiences, deliver communications, connect users with professionals, provide safety functionality, moderate content, prevent fraud, protect security, improve reliability, enforce policies, and comply with law.

BMC does not sell users’ personal information.

Limited information may be shared with service providers that help operate BMC, including hosting, authentication, AI, moderation, notifications, communication, security, and email delivery. Each provider only receives information reasonably required to perform its role.

When users authenticate with Google Sign-In, Google may independently process information according to Google’s privacy practices. BMC only receives information authorized by the user.

BMC may use cloud infrastructure providers, including Supabase, to store and process information. Information may be stored in jurisdictions different from the user’s country.

BMC uses reasonable administrative, organizational, and technical measures designed to protect personal and sensitive information, including encryption in transit, secure authentication, and access controls. No system can guarantee absolute security.

BMC retains personal information only as long as reasonably necessary to provide the service, maintain security, resolve disputes, and comply with legal obligations. Backup copies may remain temporarily until overwritten through normal backup processes.

Users may request deletion of their BMC account and associated personal data in the app or by contacting BMC. Deleting the application from a device does not automatically delete the account.

Depending on applicable law, users may have rights to access, correct, delete, withdraw consent, restrict or object to certain processing, request a copy of their information, and manage device permissions.

Information intentionally posted publicly may be seen, copied, or shared by other users. Consider carefully what you make public.

BMC does not knowingly collect personal information from children in violation of applicable child-privacy laws. Parents or guardians may contact BMC if they believe a child provided information improperly.

BMC is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease or medical condition. BMC’s AI responses, health readings, and wellness recommendations are not a substitute for professional healthcare or emergency services.

Automated recommendations are intended to improve the user experience and should not be interpreted as a medical diagnosis or professional clinical determination.

BMC may use automated and human moderation to prevent abuse, detect harmful content, protect users, and enforce community standards.

BMC and its service providers may process information in countries other than the user’s country of residence, with reasonable safeguards consistent with applicable law.

BMC is not responsible for the independent privacy practices of third-party services linked from the app.

BMC may update this Privacy Policy. The updated effective date will be displayed at the beginning of this page. Continued use after an update is subject to the updated policy, subject to applicable law.

Questions, privacy requests, or account-deletion requests can be sent to:

Organisation

BMC

Developer

Noxartech Solution

Privacy

privacy@bmc-app.com

Support

support@bmc-app.com

Country

Kenya

Website

bmc-app.com