Privacy Policy

Last updated: 4 August 2026

Breast Cancer Care ("BCC", "we", "us") runs the Pink Pulse breast self-check app. This policy explains what the app does with your information.

We have written it to be read, not just to be complied with. If anything here is unclear, please contact us at [email protected].

In short

• Your health information stays on your phone. Your name, your cycle dates and your self-check history are stored only on your device, encrypted, and are never sent to us unless you specifically ask us to.
• Nothing is shared unless you tick a box. Both sharing options are switched off when you install the app, and you can switch them off again at any time in Settings.
• There is no account. You do not sign up, and we cannot identify you.
• The app works fully with everything switched off.

Who is responsible for your information

Breast Cancer Care is the data controller for the information described in this policy.

• Address: Swami Vivekananda Avenue, Clairfonds No. 3, Vacoas, Mauritius
• Email: [email protected]
• Telephone: +230 698 6710
• Website: https://bccmauritius.org

What stays on your phone

The following is stored only on your device. It is encrypted, and the key that unlocks it never leaves your phone.

• Your first name, if you choose to give one. You can skip this.
• Whether you menstruate, and either your last period date or the day of the month you have chosen for your check.
• The time you would like to be reminded.
• Your self-check history: the date of each check and which of the six questions you answered yes to.
• The dates you completed a self-examination.
• Your list of past reminders and messages inside the app.
• Your app-lock PIN, stored as a scrambled version that cannot be turned back into your PIN.
• Your privacy choices and the date you made them.

We cannot see any of this. It is not sent to us, it is not backed up to us, and we have no way to retrieve it.

Your self-check history is deleted automatically once it is more than 90 days old.

What is shared, and only if you agree

When you first open the app you are offered two separate choices. Both start switched off. You can change either one at any time in Settings, and turning one off does not affect the other.

Anonymous usage data

If you switch this on, the app tells us:

• that it was installed, and that it was opened (once a day at most)
• which version of the app you are using, and your phone's operating system version
• the language you have chosen
• a random number created for your installation, which is not linked to you, your phone's serial number, or any other app
• automatic crash reports if the app stops working, containing technical details of the failure and your device model

This tells us how many people are using the service and helps us fix faults. It does not tell us who you are, and it never includes anything from your self-checks.

Self-check results

If you switch this on, then each time you complete a self-check the app sends us:

• whether the result was "all clear" or "needs attention"
• which of the six questions you answered yes to
• your app version and language

This is sent without any name and without the random installation number, so we cannot connect one result to another or to a person. It helps BCC understand what people across Mauritius are reporting so we can plan our services.

This is health information. That is why it has its own separate switch, and why it is off until you turn it on.

Things we ask for separately, each time

Your email address

If a self-check flags something, the results screen offers you the option to leave an email address so that a BCC coordinator can follow up with you. This is entirely optional, it is asked for at that moment only, and it is never stored on your phone.

If you provide it, your email address is sent together with that self-check result, which means that result is no longer anonymous. We use it only to contact you about that check.

Your location

If you tap "nearest first" on the Testing Centres screen, the app asks your phone for your approximate position and includes it in a single request so the list can be sorted by distance. It is used for that one request and is never saved, on your phone or by us.

The app never asks for your location at any other time.

Notifications

If you allow notifications, your phone gives the app a delivery address so that we can send reminders and information in your chosen language. We register that address with our service along with your app version and language. It contains no name and no email address.

Turning notifications off in Settings removes it, as does deleting all your data.

Notification delivery uses Google Firebase Cloud Messaging, and on iPhone also the Apple Push Notification service.

Who else is involved

We use a small number of service providers who process information on our behalf and only on our instructions.

• Google provides notification delivery and crash reporting (Firebase). Crash reports are only sent if you have switched on anonymous usage data.
• Apple delivers notifications to iPhones.
• [BCC TO CONFIRM: legal name and country of the company that hosts and maintains the BCC app service at codexatech.app.] hosts the service that receives the information described above.

Some of these providers store information on servers outside Mauritius. Where that happens, we rely on the safeguards those providers offer for international transfers.

We do not sell your information. We do not share it with advertisers. The app contains no advertising and no tracking of you across other apps or websites.

What the app downloads

Whether or not you have switched anything on, the app downloads content from us so it can show you information: awareness banners, this policy and the Terms, the "About BCC" text, the list of testing centres, and whether the service is temporarily unavailable.

These are requests for public content. They do not carry your name, your health information, or the random installation number.

Why we are allowed to do this

Under the Mauritius Data Protection Act 2017, and the General Data Protection Regulation where it applies to you, we rely on your consent for everything described in this policy that leaves your device.

Because self-check results are health information, we ask for that consent separately and explicitly, and we record the date you gave it so we can show that it was given.

You can withdraw either consent at any time in Settings. Withdrawing is as easy as giving it, and it takes effect immediately. Withdrawing does not affect anything that was already shared before you withdrew.

How long we keep things

• On your phone: until you delete it. Self-check history is removed automatically after 90 days.
• [BCC TO CONFIRM: how long anonymous usage records, self-check results, and push registrations are kept on the server before deletion or aggregation. A specific period must be stated here.]
• Crash reports are kept by Google Firebase Crashlytics for 90 days.

Your rights

You have the right to ask us for a copy of the information we hold about you, to have it corrected, to have it deleted, to object to or restrict how we use it, and to withdraw your consent.

Please note an unavoidable limitation: because self-check results are sent without any identifier, and because we hold nothing that identifies you, we usually cannot find "your" records in order to show or delete them. This is a consequence of designing the service so that you cannot be identified, and it is why the most effective control is the one on your own phone.

To delete everything on your device, use Settings → Delete all my data. This removes your profile, your cycle dates, your self-check history, your PIN and your notification history, destroys the encryption key so that nothing left behind can be read, and stops notification delivery. It cannot be undone.

To exercise any right, contact us at [email protected].

If you are not satisfied with how we have handled your information, you can complain to the Data Protection Office of Mauritius. If the GDPR applies to you, you may also complain to the supervisory authority where you live.

Children

This app is intended for adults. [BCC TO CONFIRM: the minimum age, and whether under-18s may use it with a parent or guardian. We suggest 18, in line with the Data Protection Act 2017.] We do not knowingly collect information from children.

Security

Information on your phone is encrypted using a key held in your device's secure hardware, and is excluded from your phone's cloud backups. You can add a PIN, and a fingerprint or face unlock, in Settings. The app hides its contents in your phone's app switcher.

Connections to our service are encrypted and the app checks that it is genuinely talking to us and not to something in between.

No system is perfectly secure, but we take the protection of health information seriously and review it regularly.

Two consequences of protecting your data this strongly are worth knowing about:

• Your information cannot be moved to a new phone or recovered from a backup, because the key that unlocks it stays on the device where it was created.
• If you set a PIN and forget it, there is no way to recover it.

Changes to this policy

If we change how the app uses your information in a way that matters, we will update this policy and ask for your consent again inside the app before anything new is shared.

Contact us

Breast Cancer Care Swami Vivekananda Avenue, Clairfonds No. 3, Vacoas, Mauritius [email protected] +230 698 6710 Monday to Friday, 9:00 to 16:00