PRIVACY NOTICE

PROJECT MALASAKIT APP

Effective Date: 1 January 2026

Project Malasakit is a health and wellness program led by Intellicare and Avega, together with the following partners:

  • Tatva Care – app platform and health coaching services
  • Aventus – clinical services
  • MedExpress – pharmacy services
  • UL Health Services – program sponsor

This Privacy Notice explains how your personal and health information is collected, used, shared, and protected when you use the Project Malasakit App operated through the partnership with Tatva Care.

1. Information We Collect

We may collect the following information when you use the app:

Personal Information

  • Name, date of birth, contact number, email address, and account login details

Health and Wellness Information

  • Medical history and family health history
  • Height, weight, and basic health information
  • Diagnostic results, prescriptions, wellness assessments
  • Biomarker scores, metabolic scores, and similar health indicators

Device-Linked and Activity Data

  • Steps, physical activity, and other wellness data collected through wearable devices or linked health apps.
  • This data is collected only if you choose to connect a device or app

App Usage Information

  • App activity, appointment bookings, medication orders, and health coaching sessions

2. How We Use Your Information

Your information is used to:

  • Provide medical consultations, diagnostics, medications, and chronic care support
  • Offer personalized health coaching and wellness recommendations
  • Improve the Project Malasakit program using aggregated and anonymized data

3. Data Sharing and Access

Your information is shared only with authorized partners and only for legitimate purposes:

  • Intellicare and Avega Team - Access to your medical and wellness data for care coordination and program management
  • Aventus - Access to medical information needed to provide clinical services
  • Tatva Care - Access to data required to operate the app and deliver health coaching
  • MedExpress - Access to prescription details for medication dispensing
  • UL Health Services - Receives aggregated and anonymized reports only. No personal or identifiable health information is shared.

4. Consent for Health and Device Data

By using the Project Malasakit App, you consent to the collection and use of your personal and health information as described in this Privacy Notice.

  • Connecting wearable devices or health apps is voluntary
  • You may disconnect linked devices at any time through the app settings
  • Disconnecting a device will stop further data collection from that source

5. How We Protect Your Data

We protect your information through:

  • Data encryption and secure servers
  • Restricted access to authorized personnel only
  • Compliance with the Philippine Data Privacy Act of 2012 and applicable regulations

However, no system is 100% secure, and we encourage you to use strong passwords.

6. Your Rights as a Data Subject

You have the right to:

  • Access and correct your personal data
  • Request deletion of your data, subject to legal and regulatory requirements
  • Withdraw your consent for data processing, subject to legal and regulatory requirements
  • File a complaint with the National Privacy Commission (NPC) if you believe your data has been improperly handled

7. Android Health Connect

We use the Android Health Connect SDK from Google (more information can be found here), i.e. an open platform that allows users to control their fitness data. We process and collect the step, activity, and sleep data through the Health Connect SDK with the user's consent.

After connecting to Health Connect, the user can see his/her step data in a graphical format, and the app automatically collects step data from Health Connect. Data is collected until the user either turns off the step counter functionality, logs out of his/her user account in the app or deletes the app.

We handle Health Connect data following Google Service User Data Policy.

8. Health Connect and Apple Health Data

a. Collection and Usage of Health Data

We value the privacy and security of our users. Project Malasakit App requests access to health-related permissions, specifically the ability to read steps, calories burned, heart rate, and oxygen saturation. This data is collected for the sole purpose of enhancing the user experience and providing features related to health and fitness. Data received from Health Connect and Apple Health platform will not be used for sale and will not be shared with any third party without specific consent from the user.

b. Purpose of Health Data Access

Project Malasakit App utilizes health-related permissions to track daily steps, calories burned, heart rate, oxygen saturation. This data is processed locally on the user's device and is not shared with any third parties.

c. User Consent

By using Project Malasakit App, you explicitly consent to the collection and usage of health-related data for the purposes outlined in this privacy policy. You have the option to grant or deny these permissions within the app settings.

d. Security Measures

We implement robust security measures to protect the confidentiality and integrity of health-related data. This includes secure storage and we are using https throughout the Project Malasakit App for secure connection. We implement industry-standard technical and organizational measures by using a variety of security technologies and procedures to help protect your data from unauthorized access, use, loss, destruction or disclosure. When we collect particularly sensitive data (such as your password), it is encrypted using industry-standard cryptographic techniques including but not limited to AES256.

The collection, storage, usage, and sharing of your data by the Company shall be in compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and other applicable laws.

e. Data Retention

We retain health-related data only for as long as necessary to fulfill the purposes outlined in this privacy policy. Users can request the deletion of their data by e-mailing dpo@intellicare.net.ph or dpo@avega.net.ph.

f. Third-Party Services

Project Malasakit App does not share health-related data with any third-party services, advertisers, or external entities. We do not engage in the sale or exchange of user data.

9. Privacy Statements

For more information on our Privacy Statements, please click the links below:

You may also review our partners' privacy statements through the following links:

Contact Us

For questions or concerns about this Privacy Notice or for concerns relating to Privacy, please contact:

The Data Privacy Officer at dpo@intellicare.net.ph or dpo@avega.net.ph.