Privacy Policy

Effective date: 20 October 2026
Last updated: 20 October 2026

This Privacy Policy describes how the Africa Centres for Disease Control and Prevention (Africa CDC), a specialised technical institution of the African Union, collects, uses, shares, and protects personal information when you use:

• the Conference of Public Health in Africa (CPHIA) public websites and registration portals;
• the CPHIA mobile applications distributed on Google Play and the Apple App Store (including participant, driver, protocol officer, logistics, and related staff modes); and
• related APIs and event-operations services operated by Africa CDC for CPHIA and associated meetings.

By creating an account, registering for an event, pairing a staff device, granting location consent, or otherwise using these services, you acknowledge this Privacy Policy. This page is the public privacy notice for Google Play / App Store listings and for the websites that link to it.

1. Data controller

Africa Centres for Disease Control and Prevention (Africa CDC)
Addis Ababa, Ethiopia
Privacy contact: cphia@africacdc.org

Africa CDC is the organisation responsible for deciding how and why personal information is processed for CPHIA platforms. Service providers process data only on Africa CDC’s instructions.

2. Information we collect

The categories below map to the types of data disclosed in app-store Data safety / privacy questionnaires. Exact fields depend on your role (participant, applicant, reviewer, driver, officer, logistics partner, or staff).

a) Personal info

• Name, email address, phone number, organisation, job title, nationality / country, and similar profile or registration fields
• Account identifiers and authentication data (passwords where used, one-time email codes, authenticator / recovery codes for staff accounts)

b) Financial and transactional info

• Invoice details, payment status, payment references, and bank-transfer evidence you upload
• Card payments are processed by the payment provider; Africa CDC does not store full payment-card numbers

c) Photos and documents (only when you provide them)

• Student ID or other verification documents, passport / visa support materials, badges, receipts, and similar uploads required for a workflow you start

d) App activity and diagnostics

• Sign-in events, feature usage needed to operate the service, crash / error logs, IP address, approximate network information, and security audit logs

e) Device or other IDs

• App-generated device identifiers used to secure sessions and, for transport drivers, to pair a phone with a driver account
• Push-notification tokens (when you allow notifications) so we can send operational alerts

f) Location (mobile apps — precise location)

• Transport drivers: precise GPS location may be collected while you are signed in and on duty / on an active trip, and only after you grant in-app tracking consent. Location is used for live fleet operations, ETA, geofencing, and safety. You can withdraw consent in the app; location is not collected after you sign out.
• Participants / other users: we do not continuously track your background location. Location is used only if a specific feature you use needs it and the OS permission is granted (for example finding a pickup point).

g) Messages and support content

• Helpdesk tickets, feedback, and messages you send to organisers or logistics teams

We do not sell personal information. We do not use your data for independent advertising networks or cross-app tracking for ads.

3. Why we collect data (purposes)

• App functionality — registration, abstracts, side events, exhibitions, sponsorships, payments, badges, travel / hotel / transport coordination, and staff tools
• Account management — creating and securing accounts, device pairing, and session control
• Communications — transactional email / in-app / push notices about your registration, assignments, approvals, and event operations (not marketing spam)
• Fraud prevention, security, and compliance — abuse prevention, audit trails, and African Union / Africa CDC institutional, financial, and legal obligations
• Analytics (limited) — aggregate product reliability and operational metrics; not sold to advertisers

4. How we share information

We may share personal information with:

• Africa CDC and African Union personnel who need it to deliver the event
• Processors acting for us (hosting, email delivery, SMS / messaging, payment processors, maps / ETA providers, push-notification infrastructure)
• Logistics, hotel, travel, protocol, or transport partners contracted for the event, limited to what their role requires
• Host-country or partner institutions when required for visas, protocol, security, or event delivery
• Authorities when required by applicable law or AU / Africa CDC rules

Drivers and passenger privacy: driver apps may show limited passenger contact details only for open assignments within an operational time window. VIP / protocol passengers may be reached through a call desk rather than a direct phone number. Emails, passport numbers, and similar sensitive identity documents are not exposed in the driver app.

5. Data retention

• Registration, finance, and institutional records are kept for as long as required for event delivery, audit, and legal retention, then deleted or anonymised under Africa CDC records practice.
• Driver location trails and related transport telemetry are retained for operational and safety needs for the event period (typically up to about 90 days after collection for location trails unless a longer audit retention applies), then purged or aggregated.
• Device pairing and push tokens are kept while the account / device remains active and removed when unpaired, revoked, or no longer needed.

6. Security

We use administrative, technical, and organisational measures appropriate to the sensitivity of the data, including encrypted transport (HTTPS), access controls, hashed credentials where passwords are used, scoped API tokens for mobile clients, and staff authentication controls (including multi-factor authentication where enabled). No method of transmission or storage is completely secure; please protect your device and sign-in details.

7. Your rights and choices

• Request access to, correction of, or deletion of personal information we hold about you, subject to legal and operational limits (for example finance or audit records that must be retained).
• Withdraw driver location consent in the app; stop push notifications in OS settings; sign out to end an active session.
• Close or request deletion of an account by contacting us (see below).

To exercise these rights, email cphia@africacdc.org with enough detail for us to verify your request.

8. Children

CPHIA platforms and mobile apps are intended for adults participating in or supporting a professional public-health conference. They are not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

9. International transfers

Servers and support teams may process data in Ethiopia and other countries where Africa CDC, the African Union, or our processors operate. Where data is transferred, we apply contractual and organisational safeguards consistent with AU / Africa CDC practice.

10. Cookies and similar technologies (websites)

Websites may use cookies or similar technologies required for sign-in, security, and basic function. Optional analytics, if enabled, measure aggregate site usage only.

11. Google Play and App Store disclosures

This Privacy Policy is the public URL used for store listings. In-app permission prompts (for example location, notifications, camera / files for uploads) explain the related feature at the point of use. Declining a permission may limit that feature but does not prevent unrelated parts of the app from working where possible.

12. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Material changes may also be notified in the app or by email where appropriate. Continued use after an update means you accept the revised policy.

13. Contact

For privacy questions, Data safety clarification, or personal-information requests:

Africa Centres for Disease Control and Prevention (Africa CDC)
Addis Ababa, Ethiopia
Email: cphia@africacdc.org