Last updated: October 10, 2026
Matendo Health processes personal information to run the marketplace, verify independent licensed clinicians and match them to facilities, collect and settle payment on the clinician's behalf as a disclosed agent, and meet our legal obligations under Uganda's Data Protection and Privacy Act, 2019, and the EU GDPR where applicable. Health information is held under the DPPA's special-category rules.
To deliver the service, communicate with you, verify professionals, prevent fraud, and as required by law. We do not sell personal data.
Attendance on a duty is evidenced by location. We record a clinician's location at check-in and check-out, at the moment they tap to confirm they are on site, and when they open the app during a duty they have checked in to, in that last case only to test whether they are inside the facility's site perimeter, after which a position inside the perimeter is discarded rather than stored.
We do not track clinicians continuously, in the background, or when the app is closed, and we collect no location at all outside an accepted duty, not between duties, not before check-in, and not after check-out.
Presence information never ends a duty automatically and never reduces a clinician's recorded hours or fee. It is shown to the facility as evidence to help them confirm the hours worked, and is used by Matendo to investigate a dispute. Coordinates from presence confirmations are erased after 90 days, which matches the period in which a duty can be disputed; the record that a clinician confirmed, and when, is retained with their duty history.
Clinicians may withdraw consent to electronic presence tracking at any time and continue working, with attendance recorded manually with the facility instead.
A clinician may set a single base location, the point they travel to work from, either by letting the app read their current position once, or by typing the name of a place. It is used only to estimate how far a duty is from them. It is not tracking: it is one point they choose, change when they move, and can clear at any time.
Where a clinician types a place name, that text is sent to Google’s Geocoding service to obtain its coordinates. Only the text they type is sent; it is not accompanied by their name or any other identifier. Results are cached against the search text alone, with no link to the person who searched. Clinicians are encouraged to use a nearby landmark, trading centre, or division rather than their exact home address, and the option to use the phone’s current position instead requires no third-party lookup at all.
Access, correction, deletion, portability, and the right to lodge a complaint with your data protection authority. Contact info@matendohealth.com.
