You Matter - Privacy Policy

Version 1.0 - Effective August 31, 2026

You Matter ("we," "us," "our") operates a teletherapy platform connecting patients with licensed therapists in Rwanda. This policy explains what personal data we collect, why we collect it, and what rights you have over it.

What We Collect

Account information: name, date of birth, phone number, email address, physical address, national ID or passport number where required.
Login credentials: your password, stored encrypted, never in plain text.
Payment information: mobile money number and transaction history. We do not store full card or MoMo PIN details; these are handled by our payment processor.
Professional credentials (therapists only): government ID, license number, degree or qualification documents.
Session and booking data: appointment times, attendance, cancellations.
Clinical information: therapy session notes and health-related information you or your therapist record as part of your care.
Usage data: basic technical information like device type and general usage patterns, used to keep the platform running smoothly.

Why We Collect It

To create and manage your account.
To book, schedule, and deliver your therapy sessions.
To process payments and, for therapists, to calculate and disburse payouts.
To verify therapist credentials before listing them on the platform.
To maintain your clinical records so your therapist has the history needed for continuity of care.
To provide customer support.
To meet our legal obligations under Rwandan law.

Who Can See Your Data

Your clinical information (session notes, health details) is visible only to you and your treating therapist. It is never shared with an employer, organization administrator, family member, or anyone else without your written consent, except where Rwandan law requires disclosure (for example, a genuine risk of serious harm, or a lawful order from a competent authority).
If you access You Matter through an organization, your administrator can see that you are an active member and aggregate, anonymized usage statistics. They cannot see your session content or any individually identifiable therapy data. This limit cannot be removed at the administrator's request.
Service providers who help us run the platform have limited access to the data needed to do their job: our payment processor (for billing), our hosting and database providers (for storing your account), our video provider (for delivering sessions), and our email provider (for notifications). They are contractually restricted from using your data for anything beyond that.

Where Your Data Is Stored

Some of our service providers operate outside Rwanda. Where this applies, your data may be processed on servers located in other countries as part of how these providers deliver hosting, storage, email, or payment services. We select providers that maintain reasonable security standards, and we do not sell or share your data with third parties for their own marketing or independent use.

How Long We Keep It

We retain your personal and clinical data for as long as your account is active, and for a reasonable period afterward to meet legal, tax, and record-keeping obligations. Clinical records are retained in line with standard practice for continuity of care and professional accountability. You can request deletion of your account at any time, subject to any records we're legally required to retain.

Your Rights

Under Rwanda's data protection law, you have the right to:

Know what personal data we hold about you.
Request a copy of your data.
Ask us to correct inaccurate data.
Ask us to delete your data, where we're not legally required to keep it.
Object to or restrict certain processing.
Withdraw consent at any time, where processing is based on your consent.

To exercise any of these rights, contact us at youmatter.rw@gmail.com.

Security

We use encryption for data in transit and at rest, restrict access to clinical data to you and your treating therapist, and limit staff access to personal data on a need-to-know basis. No system is completely immune to risk, but we take reasonable, industry-standard steps to protect your information.

Children

You Matter is intended for users who are at least 18 years old, or the age of majority in their jurisdiction. We do not knowingly collect data from minors without appropriate guardian consent.

Changes to This Policy

If we update this policy, the version number and effective date above will change. Material changes will be communicated to you before they take effect.

Contact

Questions about this policy or your data can be sent to youmatter.rw@gmail.com.