Privacy Policy
This policy explains how the K2 Mind Care service, operated through Prime Logic Ltd, collects, uses, protects and shares personal data. Effective 9 August 2026.
1. Who is responsible
Prime Logic Ltd operates the technology platform for K2 Mind Care and acts as the data controller unless an organization using K2 Mind Care determines a separate purpose for processing. You can contact us at K2mindcare@gmail.com or at Kibagabaga Court, KG 19, 301st, Trinity Corner House, Kigali, Rwanda.
2. Data we collect
We may collect account and contact details, organization membership, assessment answers and results, consent records, payment and transaction references, support requests, report activity, device and security logs, and information you choose to provide. Health, psychological and assessment information is treated as sensitive personal data.
3. Why we use it
We use data to create and secure accounts, deliver assessments and reports, process payments, provide support, maintain audit and safety controls, prevent fraud, meet legal obligations and improve service reliability. Sensitive assessment data is processed only for the stated service and consented purposes or another lawful basis permitted by law. Optional marketing requires separate consent.
4. Sharing and international processing
We share only what is necessary with contracted hosting, email, document, analytics and payment providers, and with an organization when you have authorized that relationship or the organization lawfully controls the processing. We do not sell personal data. Any storage or transfer outside Rwanda is subject to required authorization and safeguards under Rwandan law.
5. Retention and security
We keep data only for the period needed to provide the service, satisfy contractual, audit, safety, tax and legal requirements, resolve disputes and enforce agreements. We use access controls, encryption, tenant separation, audit records, backups and monitoring. No internet service is risk-free, but we work to prevent unauthorized access, alteration, loss or disclosure.
6. Your choices and rights
Subject to applicable law, you may request access, correction, restriction, objection, portability or erasure of your personal data and may withdraw consent without affecting earlier lawful processing. Some records may be retained where required for legal, safety, fraud-prevention or dispute purposes. Requests can be submitted through Support or your privacy dashboard.
7. Children and guardians
Where a user is below the applicable age of independent consent, K2 Mind Care requires the configured guardian-consent and minor-assent process before protected assessment services are provided.
8. Questions and complaints
Contact K2mindcare@gmail.com first so we can investigate. You may also complain to Rwanda’s Data Protection and Privacy Office. We may update this policy when the service or law changes; the effective date and current version will remain visible.