Med88 Privacy Notice
Revised and effective: 17 September 2026
1. Who we are
Med88, previously known as MediPass, is operated by Q88Link (Pty) Ltd (registration number 2022/592143/07) ("we", "us" or "our"). This notice covers the website, application and related account services. Q88Link is the responsible party for processing it determines to operate Med88 under the Protection of Personal Information Act 4 of 2013 (POPIA).
Practitioners and practices are independently responsible for their clinical records and their use of information received through Med88. Where we process information solely on a practice's instructions, our role must be addressed in the relevant operator agreement. Med88 is an administrative sharing service, not a healthcare provider.
2. Information collected and its sources
We collect information you submit, information supplied by an authorised caregiver or practice administrator, payment confirmations from our payment provider, and technical records generated when you use the service.
| Category | Examples and purpose |
|---|---|
| Accounts | Names, email, telephone number, authentication identifiers and roles, to register you, sign you in and manage access. |
| Patient profiles | Identity and contact details, date of birth, emergency contacts, allergies, medication, medical and family history, lifestyle and medical aid information you supply, to maintain and share your profile as authorised. |
| Dependants | Profile information supplied by a parent, guardian or other person with lawful authority. |
| Practices | Professional registration, practice details, staff and verification documents, to assess registration and administer practice access. |
| Consent and activity | Requests, grants, revocations, timestamps, patient and practitioner identifiers and scan records, to enforce sharing choices, provide access history and calculate practitioner usage charges. |
| Billing | Subscription details, invoices, payment references and outcomes, billing contacts, reusable payment authorisation tokens and masked card details. Paystack handles card entry; we do not store full card numbers or card security codes. |
| Support and technical records | Correspondence, request and error logs, IP addresses and browser/device information, to respond to enquiries, operate the service and investigate misuse or faults. |
The current patient document screen does not upload identity documents or perform AI extraction. Practitioner verification uploads are a separate feature reviewed by authorised Med88 administrators. If patient uploads or AI processing are introduced, the collection screen and this notice will explain their use before collection begins.
3. Purposes and lawful grounds
We use account and practice information to deliver the service requested and administer subscriptions. Patient health information and practitioner sharing rely on informed consent, or the lawful authority of a competent person acting for the patient. Health information requires the additional protections applicable to special personal information under POPIA.
Limited records may also be needed to meet legal obligations, protect accounts, prevent fraud, resolve disputes and maintain service reliability, subject to an applicable lawful basis. These purposes do not give practices unrestricted access to health profiles.
Registration and sharing are voluntary. Required fields are indicated in the service; withholding information needed for registration, verification or a requested feature may prevent that feature from working. Only submit another person's information with lawful authority, and tell emergency contacts that you have provided their details.
4. Sharing choices
Consent requests and access grants control which approved practitioner or practice can view your profile and for how long. Check the recipient and scope before approving. A QR code does not give every practitioner permanent access.
You can revoke an active grant in Med88. This ends further access under that grant, but does not undo prior lawful processing or erase records incorporated into a practitioner's independent system. Contact that practitioner about those records. Consent and access events may remain in the audit history for a lawful retention purpose.
5. Recipients and service providers
Information is available to the recipients you authorise and to authorised personnel and providers who need it to operate or support the service. Infrastructure includes Google Firebase for authentication and hosting, Google Cloud for application processing, PostgreSQL database hosting and document storage, and Paystack for payment processing. Payments do not require your medical history.
Supported mobile installations use device tokens for enabled reminders through Firebase and the device platform. Notification permissions can be managed on your device. If an integration or export is enabled for a practice, information may reach its configured system within the applicable authorisation. That practice is responsible for its receiving system.
We may disclose information where lawfully required by a court, regulator or other authority, or to advisers and a lawful business successor subject to appropriate restrictions. We do not sell patient personal information. Statistics for improvement or research must be de-identified so that individuals cannot be identified.
6. International processing
The backend uses Google Cloud infrastructure configured in europe-west1 (Belgium). Authentication, hosting delivery, support and payment providers may process relevant information in other countries. Information is therefore not necessarily processed only in South Africa.
Cross-border processing must meet section 72 of POPIA through adequate protection under applicable law or binding arrangements, or another permitted ground. Additional requirements for health and children's information must also be assessed. You can request details of the safeguards applicable to your information through the contact route below.
7. Browser storage and permissions
The web application uses browser storage to maintain sign-in state and remember workspace and registration choices. Blocking or clearing it can sign you out or disrupt those functions. Sign out on shared devices. Hosting services receive technical request information when serving pages.
Camera permission supports features such as QR scanning. Declining it prevents that camera feature from operating. Device notification permissions are optional; essential account or billing messages may still be necessary to provide the service.
8. Security and incidents
Safeguards include HTTPS connections, authenticated access, role and consent checks, protected cloud storage and access records. Practitioner verification documents are restricted to authorised review. No service can promise absolute security.
Report suspected unauthorised access using the contact route below without sending passwords or unnecessary medical information. Where POPIA requires notification of a security compromise, we will notify the Information Regulator and affected people as soon as reasonably possible, subject to lawful restrictions, and investigate and contain the incident.
9. Retention and deletion
Profile information supports your active account and authorised sharing. Billing, consent, access, support and security records may require different retention periods because their purposes differ. Information must not be retained longer than necessary unless retention is lawfully required or permitted. Records no longer needed must be deleted or appropriately de-identified.
Use the account-deletion page to request deletion. We verify the request and support the relevant practice where it is the responsible party. A practice sets retention for its medical records according to its legal and professional duties; Med88 must not set a longer period for those records on its own. If particular records must remain for a lawful purpose, their use must be restricted. Deletion does not erase a practitioner's independent records.
10. Rights and complaints
Subject to POPIA, you may ask whether we hold your information, request access, seek correction or deletion, object to qualifying processing and withdraw consent. We may require proportionate identity verification. Withdrawing health-data consent may prevent the affected profile or sharing service from continuing, without invalidating earlier lawful processing.
You may complain directly to the Information Regulator, use its eServices portal, or email POPIAComplaints@inforegulator.org.za. You do not need our permission to complain.
11. Children and automated processing
A parent, guardian or other competent person with lawful authority must act for a child where required. Do not manage a dependant profile without that authority. We may request evidence where necessary to protect the dependant.
Med88 does not provide automated diagnosis or treatment decisions. Automated consent expiry, account eligibility and billing calculations administer the service. Contact us if an account or billing outcome appears incorrect so it can be investigated.
12. Contact and changes
Q88Link (Pty) Ltd, operating Med88
Company registration number: 2022/592143/07
Registered/business address: Available on lawful request via legal@med88.live
Information Officer: Q88Link (Pty) Ltd Information Officer
Designated privacy/legal email: legal@med88.live
Use the published account support and deletion contact or legal@med88.live for requests. Include your account email and a brief description. Do not attach identity or health documents unless a secure verification process is arranged.
Material changes will be communicated through the service or appropriate account contact channels, and the revision date updated.
Related document: Med88 Terms and Conditions. Legal reference: Protection of Personal Information Act 4 of 2013.