Skip to Content
Privacy Policy — White Rabbit

Privacy Policy

White Rabbit — mobile application

Last updated: 29 September 2026

At a glance

  • We collect your account, delivery, prescription, insurance and payment details to fulfil your medicine orders.
  • We use your camera only when you choose to photograph a prescription or insurance card.
  • We share data only with the pharmacies, insurers, couriers and payment providers needed to complete your order — we never sell it.
  • You can access, correct or delete your data at any time.

This Privacy Policy explains how TMR COMPUTING LTD ("we", "us", "our"), operator of the White Rabbit mobile application (the "App"), collects, uses, shares and protects your personal information when you use the App to browse medicines, upload prescriptions, place orders, use health insurance and receive deliveries.

We handle your data in accordance with applicable data protection laws, including Rwanda's Law No. 058/2021 relating to the protection of personal data and privacy. By using the App, you agree to the practices described here.

Health and prescription information is sensitive. We collect it only to fulfil your medicine orders and insurance claims, and we handle it with additional care.

1. Information We Collect

Information you provide

CategoryWhat it includes
Account detailsName, phone number, email address, password.
Delivery informationDelivery address(es); approximate location, where enabled, to find nearby pharmacies.
PrescriptionsPhotos/files of prescriptions you upload and details entered at checkout. The camera and photo library are used only when you choose to capture or attach a prescription or insurance card.
Health-related informationThe medicines and health products you order, which may reveal information about your health.
Insurance informationYour insurer, member/policy ID, national ID where required, and an image of your insurance card when paying with insurance.
Payment informationThe payment method you choose (mobile money, card, cash on delivery, insurance). Card and mobile-money payments are handled by third-party providers; we do not store full card numbers.
CommunicationsMessages, feedback or support requests you send us.

Information collected automatically

CategoryWhat it includes
Device & usage dataDevice model, OS version, app version, language, in-app actions.
Push tokenA Firebase Cloud Messaging token so we can send order and delivery updates.
DiagnosticsCrash and performance data to fix problems.

2. How We Use Your Information

  • Create and manage your account and authenticate you.
  • Show real-time medicine availability at pharmacies near you.
  • Process and fulfil orders, including prescription review by a licensed pharmacist.
  • Verify insurance eligibility and submit claims on your behalf.
  • Process payments and calculate any co-payment due.
  • Arrange and track delivery, and send you order and account notifications.
  • Provide customer support and respond to your requests.
  • Maintain security, prevent fraud and comply with legal obligations.
  • Improve the App's features, reliability and performance.

3. Legal Basis

We process your information to perform our contract with you (fulfilling orders), with your consent (e.g. using the camera or sending notifications), to comply with legal obligations, and for our legitimate interests in operating and securing the App. You can withdraw consent at any time.

4. How We Share Your Information

We share information only as needed to provide the service. We do not sell your personal data.

RecipientWhat we shareWhy
PharmaciesOrder and relevant prescription detailsTo prepare and dispense your medicines
Insurance companiesMembership and claim detailsTo verify cover and process your claim
Delivery partnersName, address, contact numberTo deliver your order
Payment providersPayment/transaction dataTo process mobile-money and card payments
Service providers (e.g. Google/Firebase)Technical and notification dataHosting, notifications, analytics on our instructions
AuthoritiesAs legally requiredTo comply with law or valid legal process

5. Data Retention

We keep your information while your account is active and as needed to provide the service. Order, prescription and insurance-claim records are retained for the period required by applicable pharmacy, tax and health regulations. When no longer needed, we delete or anonymise your data.

6. Your Rights and Choices

  • Access, correct or update your personal information.
  • Request deletion of your account and data (subject to records we must keep by law).
  • Withdraw consent or disable permissions (camera, notifications, location) in device settings.
  • Object to or restrict certain processing.

To exercise these rights or request deletion, contact us at info@tmrcomputing.com, or use whiterabbit.rw/data-deletion.

7. Data Security

We use technical and organisational measures to protect your information, including encryption in transit (HTTPS), access controls and secure storage. No method is completely secure, but we work to protect your data and promptly address any incident.

8. Children

The App is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will delete it.

9. Third-Party Services

The App uses Google Play services and Firebase Cloud Messaging, governed by Google's Privacy Policy at policies.google.com/privacy. Payments are handled by third-party providers under their own terms.

10. International Transfers

Some providers may process data outside your country. Where this happens, we take steps to ensure your information receives an adequate level of protection.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version here and change the "Last updated" date. Significant changes may be notified in the App.

12. Contact Us

TMR COMPUTING LTD
Email: info@tmrcomputing.com
Phone: +250 728930029
Address: Kigali, Rwanda