Privacy Policy
Privacy Policy
Aisha Health (operated by Mint Jam Pte. Ltd.)
Last updated: 6 October 2026
This policy explains how Mint Jam Pte. Ltd., trading as Aisha Health ("Aisha Health", "we", "us"), collects, uses, shares and protects personal data when you contact us or use our services, including through WhatsApp, phone calls, our website and the AishaOS platform.
If you have questions, contact us at contact@aisha.health.
1. Who we are
Mint Jam Pte. Ltd. is a company registered in Singapore (UEN: 202307464M), with its registered address at MintJam Pte. Ltd, 68 Circular Road, #02-01, Singapore 049422.
We provide two kinds of services:
Aisha Health – a medical travel facilitation service that helps patients, mainly from Bangladesh, connect with partner hospitals and clinics in Thailand and Malaysia.
AishaOS – a software platform (including AI-assisted WhatsApp and voice agents) that we operate for business clients, such as care providers, to manage enquiries from their own customers.
When we act for ourselves (Aisha Health), we decide how your data is used and are responsible for it.
When we act for a business client (AishaOS), that business decides how your data is used and is responsible for it. We process the data only on their instructions. If you contacted one of our clients (for example, a care provider that uses AishaOS), please also read that client's privacy policy and contact them about your data. We will help them respond.
2. What data we collect
Data you give us
Name, phone number (including your WhatsApp number), email address, city and country.
Details about the person needing care, if you contact us on someone else's behalf (for example, a family member).
Health information you choose to share, such as symptoms, conditions, medical history, reports, prescriptions, test results and images.
Travel and identity details needed to arrange treatment, such as passport details, travel dates and preferred hospitals.
Messages, voice notes, documents and photos you send us.
Data created when you use our services
Records of WhatsApp conversations and phone calls with our AI assistants and staff, including call recordings and transcripts where calls are recorded. We tell you at the start of a call if it is recorded.
Information our AI assistants extract from conversations (for example, the type of care needed and urgency) and an internal priority score used to help our team respond.
Appointment, booking and follow-up records.
How you reached us, for example the advertisement or campaign code you clicked.
Technical data
Website usage data, device and browser information, and IP address, collected through cookies or similar technologies.
System logs needed to run and secure our services.
3. How we use your data
We use your data to:
Respond to your enquiry and give you information about treatment options, hospitals, costs and travel.
Arrange consultations, appointments, second opinions and medical reports with partner hospitals and doctors, with your agreement.
Contact you by WhatsApp, phone call or email about your enquiry, including follow-up messages and calls. Some of these are handled by AI assistants, with our staff reviewing and taking over where needed.
Prioritise and route enquiries to the right team member.
Keep records of what was discussed and agreed.
Improve our services, train our staff, and check the quality and safety of our AI assistants.
Measure how well our advertising works.
Keep our systems secure, prevent misuse, and meet legal and regulatory obligations.
Our legal basis. Depending on where you are, we rely on: your consent (especially for health information and for sharing your data with hospitals); the need to take steps you have asked for before or under an agreement; our legitimate interests in running and improving our services; and our legal obligations.
Health information is sensitive. We only use it to help you with your care enquiry, and we only share it with hospitals or doctors with your agreement.
AI assistants. Our AI assistants help answer questions and collect information. They do not provide medical diagnosis or treatment. Any medical opinion comes from licensed doctors at partner hospitals. You can ask to speak to a person at any time.
4. Who we share your data with
We do not sell your personal data.
We share it only as needed with:
Partner hospitals, clinics and doctors that you choose or agree to, so they can review your case and offer treatment.
Service providers who process data for us under contract and only on our instructions, including:
Meta Platforms (WhatsApp Business Platform) – messaging
Voice AI and telephony providers – AI phone calls and call recording
AI language model providers – generating replies and summarising conversations
Cloud hosting and database providers – storing and running our systems
Logging and monitoring providers – keeping our systems reliable and secure
Google – staff sign-in to our internal tools
Business clients of AishaOS, for data that belongs to their customers (see section 1).
Travel, visa and accommodation partners, only if you ask us to help with these.
Authorities, regulators or courts, where the law requires it, or to protect someone's life or safety.
A buyer or successor if our business is sold or reorganised, subject to this policy.
5. International transfers
We are based in Singapore and work with patients and partners in Bangladesh, Thailand, Malaysia and elsewhere. Our service providers may store or process data in other countries, including the United States and the European Union.
When we transfer personal data across borders, we take steps to make sure it receives a standard of protection comparable to Singapore's Personal Data Protection Act. These steps include contracts with our providers and sharing only what is needed.
6. How long we keep your data
We keep personal data only as long as needed for the purposes above:
Enquiries that do not lead to treatment: up to [24] months after our last contact with you.
Patients we helped arrange treatment for: up to [6] years after the last service, so we can support follow-up care and meet legal and record-keeping obligations.
Call recordings: up to [12] months, unless needed longer for a complaint or dispute.
System logs: generally no more than [90] days.
After that, we delete or anonymise the data.
7. How we protect your data
We use technical and organisational safeguards, including:
encrypted connections
access controls, so staff see only the data they need for their role
separation between different business clients' data
verification of incoming messages
regular review of who has access
No system is completely secure. If a data breach is likely to harm you, we will notify you and the relevant authorities as required by law.
8. Your rights
Depending on where you live, you may have the right to:
access the personal data we hold about you
correct inaccurate data
withdraw consent at any time. This does not affect what was done before you withdrew it, but we may then be unable to continue helping with your enquiry.
ask us to delete your data
object to or limit certain uses, including marketing messages
receive a copy of your data in a commonly used format
To use any of these rights, email contact@aisha.health from the email address or phone number you used with us, or message us on WhatsApp. We may need to verify your identity. We aim to respond within 30 days.
Stopping messages. You can stop follow-up messages and calls at any time by replying STOP on WhatsApp or telling us during a call.
If you are not satisfied with our response, you may complain to the data protection authority in your country. In Singapore, that is the Personal Data Protection Commission (www.pdpc.gov.sg).
9. Data deletion requests
To ask us to delete your data, including data received through WhatsApp or Facebook:
Email contact@aisha.health with the subject "Data deletion request", or send "Delete my data" to us on WhatsApp.
Include the phone number or email address you used to contact us.
We will confirm your request, delete your data from our systems within 30 days, and confirm when it is done.
We may keep a minimal record that you asked for deletion, and any data we are legally required to keep.
10. Children
Our services are not directed at children. If a patient is under 18, a parent or legal guardian should contact us on their behalf and give consent for any health information we receive.
11. Cookies
Our website may use cookies and similar tools to make it work, understand how visitors use it, and measure our advertising. You can control cookies through your browser settings. Blocking some cookies may affect how the site works.
12. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new "Last updated" date. If the changes are significant, we will tell you through our usual channels.
13. Contact us
Mint Jam Pte. Ltd. (Aisha Health)
Email: contact@aisha.health
Address: MintJam Pte. Ltd, 68 Circular Road, #02-01, Singapore 049422
Data Protection Officer: Misha Ali, contact@aisha.health
