Privacy Policy

Last Updated: 13 July 2026

1. Introduction

AYABytes (“the App”) is a companion application provided by Singapore Health Services Pte Ltd (“SingHealth”) and the National Cancer Centre Singapore (NCCS), for adolescent and young adult oncology (AYAO) patients.

The App is not available to the general public. It is offered by invitation to NCCS patients, whose care teams issue them an anonymous username and password.

We respect your privacy and are committed to protecting it. This Privacy Policy explains what information the App collects, why we collect it, who it is shared with, and how you can access or delete it.

This policy is specific to the App and should be read together with the SingHealth Data Protection Policy and the AYABytes Terms & Conditions. Where this policy and the SingHealth Data Protection Policy differ in relation to the App, this policy applies.

We handle your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA).

2. Information We Collect

The App does not offer public sign-up, and it never asks for your name.

AYABytes is available by invitation only, to adolescent and young adult oncology (AYAO) patients of the National Cancer Centre Singapore. Your care team issues you an anonymous username (for example, user123445) and a randomly generated password. There is no registration form in the App, and the App never asks for — and never receives — your name, your NRIC or FIN, your email address, or your telephone number.

When you first sign in, the App asks you about your condition so that it can show you relevant content and enable the Mood and Symptom Trackers. That information is health information, and we treat it as sensitive personal data.

Although your name is never attached to it, your care team holds the record of which username was issued to you. This means the information you record in the App can be linked back to you by SingHealth. We are telling you this plainly rather than describing the data as anonymous, because it would not be accurate to do so. We protect it accordingly.

2.1 Health information (sensitive personal data):

• Your cancer diagnosis or diagnoses (up to three)
• Your cancer sub-type, where applicable
• Your cancer stage
• Your treatment types (for example chemotherapy, radiotherapy, immunotherapy)
• Symptoms you record in the Symptom Tracker, and their severity
• Moods you record in the Mood Tracker

2.2 Account information:

• Your anonymous username (for example, user123445), issued to you by your care team. It is not your name.
• Your password, which is randomly generated and issued to you. You do not choose it, and it is not reused from any other service.
• Your gender assigned at birth, used to determine which cancer types are shown to you.
• Your date of birth, used to derive your age.

2.3 App activity:

• Articles you open, bookmark or search for
• Screens you visit and buttons you tap
• Feedback you submit through the App

2.4 Technical information:

• App version, device model and operating system version
• Network connection status

2.5 What the App does NOT collect:

• Your name
• Your NRIC or FIN
• Your email address or telephone number
• Any advertising identifier (Android Advertising ID or iOS IDFA). The App shows no advertising.
• Your location
• Your contacts, photos, camera, microphone or files
• Push notification tokens — the App does not send push notifications

3. Analytics and Usage Data

The App uses Google Firebase Analytics (GA4) to understand how the App is used and to improve it.

Firebase Analytics collects:

• App usage data (for example, screens viewed and interactions)
• Device information (for example, device model and operating system)
• Approximate location (country level only)
• Session duration and engagement metrics

Firebase Analytics does not receive:

• Your name, NRIC/FIN, email address or telephone number — the App never collects them
• Your username — analytics is not linked to your account in any way
• Your advertising identifier — collection of this is explicitly disabled in the App
• Your diagnosis, cancer stage, treatment, symptoms or mood entries

Analytics therefore tells us that a screen was viewed, not who viewed it.

For more information, please refer to https://policies.google.com/privacy.

4. Data Sharing

We do not sell or trade your personal data, and we do not share it with advertisers.

Analytics data, as described in Section 3, may be processed by:

• Google LLC (Firebase Analytics), acting as a service provider

Your health information is not shared with any third party, except where SingHealth is required to disclose it by Singapore law.

5. Research

Information you record in the App is not used for research purposes.

6. Data Storage and Security

• Your health and account information is stored on servers operated by or on behalf of SingHealth.
• All communication between the App and our servers is encrypted using HTTPS/TLS.
• Access to your health information requires you to be signed in.
• Your information is not visible to other users of the App.
• Your sign-in credentials are held in the App’s private storage on your own device and are not accessible to other apps.

7. Data Retention and Deletion

You may delete your account at any time from within the App, at Account → Delete Account. Deleting your account removes your profile, your diagnosis and treatment information, and your mood and symptom history from our systems.

Analytics data held by Google is retained for the period configured in Firebase, after which it is deleted automatically.

8. Children’s Privacy

The App is intended for users aged 16 and above. If you are between 16 and 18 years of age, you must have the consent of a parent or guardian, as set out in the Terms & Conditions. We do not knowingly collect data from children under 16.

9. Third-Party Services

The App uses the following third-party service:

• Firebase Analytics (Google LLC)

This service may collect and process data in accordance with its own privacy policy. We are not responsible for the content and privacy practices of other websites and services, and we encourage you to review their privacy policies to understand how they handle any information they collect from you.

10. Your Rights

Under the PDPA, you may:

• Access the personal data we hold about you.
• Correct it if it is inaccurate. You can update your diagnosis, stage and treatment at any time in Account → Edit Profile.
• Withdraw your consent and delete your account, in Account → Delete Account.
• Ask how your personal data has been used or disclosed in the past year.

To make a request, please contact us using the details in Section 13.

11. Your Consent

By using the App, you consent to this Privacy Policy.

12. Changes to This Privacy Policy and Governing Law

We may update this Privacy Policy from time to time. Updates will be reflected by the “Last Updated” date at the top of this page.

This Privacy Policy shall be governed and construed in accordance with the laws of Singapore.

13. Contact

If you have any questions about this Privacy Policy, or wish to exercise any of the rights described in Section 10, please contact our Data Protection Officer at [email protected].

For questions about the App itself:
Dr Evelyn Wong Yi Ting
Associate Consultant, National Cancer Centre Singapore
Telephone: +65 6436 8000