Privacy Policy

Last updated 15 October 2026

Healthy Community by Mae Sai Hospital is a Mae Sai Hospital health promotion system for people in Mae Sai District and anyone interested, including residents, communities, organisations and public health staff. Use it to register for health events, exercise together and see your own exercise data, so you can learn about exercise zones and look after your own health. It is a non-profit programme and free to use. Your exercise data is visible only to you and is never sent to an employer, an organisation or anyone else. This policy explains what the system collects, why, who can see it and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

What we collect

• Account: the name, email and photo of the Google account you sign in with. The system never sees or stores your Google password.
• Profile details you enter: display name, first and last name, nickname, date of birth, phone number and profile photo.
• Event registrations: name, phone, email, chosen distance or group, BIB number, registration status and check-in.
• Exercise you enter yourself: title, type, date and time, distance and duration.
• Exercise from Strava (only if you connect): title, type, date and time, distance, duration, elevation gain, average heart rate, calories and time spent in each heart-rate zone (Zone 1–5). The system reads the heart-rate zones you set in Strava and your second-by-second heart-rate data to work out time in each zone, then keeps only the totals in seconds. Heart-rate streams are not stored.
• Consent: the version of the consent text and when you agreed.
• Admin rights: the email addresses of staff given event admin rights in the hospital's internal system (MSH Organize). Only these emails are received, to turn on the admin menu.

How we use it

• To run events, confirm registrations, assign BIB numbers and check people in.
• To show your own exercise summary under "My account", such as weekly distance, calories and time in each heart-rate zone.
• To contact you about events you registered for.
• To count registrations and attendance for planning community health promotion (exercise data is never used for this).
• To issue e-certificates to people who complete an event and send them to their email.

We do not sell your data, use it for advertising, send exercise data to any employer, organisation or committee, use it for performance reviews, rank anyone, or use it to train artificial intelligence.

For Mae Sai Hospital and public health network staff

Everyone uses the system the same way. For staff, the system also checks and matches accounts against the hospital's staff register (MSH Organize):

• Signing up with a national ID number (no Google account): your title, first name, last name, nickname and date of birth are kept in your profile. Your national ID number is not stored in this system (only a one-way keyed value used for sign-in). What you entered, including the ID number, is sent as a request for administrators of the hospital's internal system (MSH Organize) to check against the staff register. The register is changed only in the fields an administrator has checked and confirmed, and the admin team is notified by email with the ID number masked. Once the request has been decided, only the last 4 digits of the ID number are kept.
• Matching by Gmail: the Gmail you sign in with is checked against the staff register. If it matches, your first name, last name and nickname are filled in where still empty (you can edit them; anything you entered is never overwritten). If it does not match, nothing is filled in and everything works as normal.
• Strava connection status: event admins can see which staff have connected Strava. When anyone connects Strava, the admin team gets an email saying which Gmail connected and when, with name and unit if found in the register. It contains no exercise data.
• Not part of your job: taking part is voluntary. Exercise data is never sent to supervisors or the HRD committee and is never used for performance reviews.

Your blood tests and care plan (when you choose to view them)

Under "My account" you can view your own chronic-disease (NCD) blood tests, latest vital signs, care advice and, if you are in the Chiang Rai Strong Heart project, your heart care plan from Mae Sai Hospital's system, and save them as a PDF.

• Gmail sign-in is always required, and you only ever see your own data.
• Identity check: staff whose Gmail matches the staff register are matched to their patient record using the ID number in that register. Other users verify once with the national ID number and date of birth registered at the hospital, and give consent. Too many failed attempts pause verification for 24 hours.
• Results are not stored here: each time you view them, the data is read live from the hospital's own server and shown only in your browser; nothing is saved in the cloud database or your browser. The link between your account and your patient record is kept on the hospital's server.
• Access log: we record which account viewed results and when (the HN is stored as a keyed one-way value) for 2 years, for security.
• You can disconnect at any time with "Disconnect this account from my hospital record".
• Targets in the report are chronic-disease care goals, not a diagnosis; treatment decisions are made by your doctor.

Who can see it

• You: all of your own profile, registrations and exercise records.
• Event staff: registrant details for events they manage, for running the event and check-in. They cannot see your exercise data.
• Site visitors: participant lists show only BIB number, the display name you chose, status and registration time (or certificate result after the event), never your real name, phone or email.
• Healthy administrators (staff with the healthy.manage right in the hospital's internal system, as approved by the hospital's data protection committee): can see your member record as you see it — profile, email, phone, registrations, your plan and whether Strava is connected — to support your health and follow the programme. Hospital health results open only after extra identity verification. Every view is logged (who, when and which section).
• Every exercise record (entered yourself or from Strava): visible only to you unless you turn on "Let staff see my exercise data" on your profile (off by default; turning it off takes effect immediately).
• Exercise review for medals: when that switch is on, staff reviewers (holders of the exercise-review permission in the hospital's internal system) can see the exercise you entered yourself, including the evidence photos, to approve it and award the "Good health starts with me" medal or ask for more evidence. The result is emailed to your account address when the reviewer chooses to send it. Who reviewed and when is logged. Strava activities are not part of this review.

If challenges or rankings are added in future, we will tell you in advance, ask for separate, optional consent, and use Strava data only once Strava has given permission.

Strava connection

Strava is connected only after you approve it on Strava's own page. The system asks for read-only access to your basic profile, activities and heart-rate zones (read, activity:read, profile:read_all). It never writes to or changes anything in Strava and never sees your Strava password. Access tokens are encrypted and kept on the server, not in your browser.

• Data received from Strava is shown only to you. It is not shown to other users or staff and is not included in any organisational report, in line with the Strava API Agreement.
• Activities are fetched through the Strava API when you open the app or tap Sync and are kept as a temporary cache for no more than 7 days, as the Strava API Policy requires; anything not refreshed within 7 days is deleted automatically. Calories, device model and heart-rate zone times are shown only for activities from the last 7 days. Each activity links back with “View on Strava”.
• Activities recorded with a Garmin device show a “Garmin [device model]” attribution, as Garmin's brand guidelines require.
• Strava activities cannot be edited in this system, so they always match the original in Strava.
• You can disconnect at any time under "My account", or revoke this app in Strava (Settings → My Apps). The system then revokes access, deletes the stored tokens and immediately deletes all data obtained from Strava, including anything derived from it, and tells you how many items were deleted and when.
• When you delete an activity on Strava, Strava notifies us through its webhook and we remove it immediately (always within 48 hours).
• Healthy Community by Mae Sai Hospital is a Mae Sai Hospital system. It is not developed, sponsored or endorsed by Strava.

Storage and security

• Data is stored in a cloud database (Supabase, Singapore data centre), and the website is served through Cloudflare. All traffic is encrypted (HTTPS). These providers process data only on the system's instructions.
• Row-level access rules let each user read and change only their own records.
• Profile photos are kept in non-public storage.
• The system keeps no patient treatment or medical record data in the cloud database. Blood test results you choose to view are read live from the hospital's server, as described above.
• The cloud database is in Singapore (a cross-border transfer under Section 28, covered by the provider's data protection terms). Backups are encrypted before storage.
• Data is kept while you are a member. When you ask, or when you stop using the service, it is deleted or de-identified within 30 days unless the law requires us to keep it.

Cookies and browser storage

The system uses browser storage to keep you signed in and to remember your text-size setting. Google sign-in uses Google's cookies under Google's policies. We do not use advertising or cross-site tracking cookies.

Legal basis

• Consent: connecting Strava and event registration (you can withdraw at any time).
• Performance of the hospital's public tasks: promoting the health of people and communities in Mae Sai District, and maintaining your account.
• Blood tests and care plan (health data, Section 26): preventive medicine and medical care (Section 26(5)(a)), your right of access to your own data (Section 30), and the explicit consent you give when verifying.

This policy follows Thailand's Personal Data Protection Act B.E. 2562 and the principles of the GDPR; the rights below apply to every user.

Your rights

You may request access, a copy, correction, deletion or restriction of your data, object to its use, or withdraw consent. You can edit your profile, delete self-entered activities and disconnect Strava yourself under "My account". Other requests, including deleting your account, can be submitted and tracked on the "Your rights under the Personal Data Protection Act" card under "My account", or contact the person below and we will reply within 30 days. Withdrawing consent does not affect processing carried out before then. If you believe your data has been misused, you may complain to Thailand's Personal Data Protection Committee.

Who is responsible

• Data controller: Mae Sai Hospital, Mae Sai District, Chiang Rai, Thailand.
• System owner and privacy contact: Dr Pratya Srisuwan · pratya10@gmail.com

Back to homeTerms of use