SihatSuite Agent — App Privacy Policy

This policy covers the SihatSuite AgentAndroid application, used by field agents of diagnostic centres that subscribe to SihatSuite. The app is provided by SihatSuite (sihatsuite.com). Each agent’s account is created and controlled by their diagnostic centre; the centre is the controller of the data described below, and SihatSuite processes it on the centre’s behalf. For the SihatSuite web platform, see our general privacy policy.

Account information.Your username and password are used to sign you in. Passwords are transmitted over HTTPS and stored only as secure hashes. Sign-in tokens are kept in your phone’s encrypted storage.

Precise location (GPS).The app records your device’s GPS position only at the moment you register a patient or log a visit. That position is stored with the visit record and shown to your centre’s administrators on a map — it is the proof that a door-to-door visit happened. The app does not track your location in the background, does not record your position at any other time, and requests location permission only while the app is in use.

Patient information you enter.Names, phone numbers, ages, addresses and notes you record at the doorstep are stored in your centre’s SihatSuite database — the same database the centre’s front desk uses. Handle this information according to your centre’s instructions.

Working without a signal. So that you can work where there is no network, the app keeps an encrypted copy of your centre’s data on your phone: the patients you registered, your follow-ups, the rate card, your monthly figures, and the details and notes of patients you have opened. Anything you record while offline — a registration, a visit, a follow-up — waits on your phone and is sent as soon as a connection returns. Nothing is sent to anyone else, and the app does not collect anything extra in order to do this.

Device name. A short device label is stored with your sign-in session so your centre can see which devices hold an active session.

The app contains no advertising and no third-party analytics or tracking SDKs. It does not sell or share data with third parties for marketing. It does not read your contacts, photos, messages, or files, and it does not track location in the background.

Data is transmitted over HTTPS and stored on SihatSuite’s cloud infrastructure hosted on Amazon Web Services, with encryption at rest and routine backups. Access to a centre’s data is limited to that centre’s authorised users under role-based permissions.

The copy held on your phone is encrypted on the device. Its key is generated on your phone, never leaves it, and is kept in Android’s secure keystore, so the data cannot be read from the phone’s storage by another app or by anyone who takes the file off the device.

Visit records and patient information belong to the diagnostic centre and are retained for as long as the centre’s subscription and local record-keeping requirements demand. When a centre deactivates an agent’s account, the agent can no longer sign in and all of that account’s sessions are revoked. To request deletion of your agent account or to exercise any data right, contact your centre’s administrator, or reach us at sihatsuite.com/contact and we will coordinate with the centre.

On your phone:signing out erases the copy the app keeps for offline use. The one exception is work that has not yet reached the centre’s server — a registration or visit you recorded with no signal. Rather than discard it, the app keeps it so it is not lost, tells you how many such items there are before you sign out, and sends them the next time you sign in. Uninstalling the app removes everything it holds.

Location (while in use): to GPS-stamp patient registrations and visits, as described above. Registering a visit is not possible without it.

Internet: to communicate with your centre’s SihatSuite server.

Phone dialer (implicit):tapping a patient’s number opens your phone’s dialer; the app itself does not place calls or read call logs.

The app is a business tool for adult field agents and is not directed at children.

If this policy changes, the date above will be updated and material changes will be communicated to subscribing centres. Questions: sihatsuite.com/contact.