“Georgia e-Health” app - Privacy policy


1.       Introduction

“Georgia e-Health” app is developed by the LEPL Information Technology Agency of the Ministry of Health, Labor and Social Affairs of Georgia (hereinafter referred to as the developer). In this privacy policy, the developer explains to what extent and under what conditions it processes personal data with regard to the use of the “Georgia e-Health” app. In addition to this privacy policy, the terms of use of the respective app must also be adhered.


2.      Personal data

The term personal data envisages all information that relates to an identified person. In this case, the health data which is regarded as sensitive personal data is processed. The processing here means any operation with personal data, irrespective of the means applied and the procedure and in particular the collection, storage, use, revision, disclosure, archiving or destruction of the data.

“Georgia e-Health” app only access personal and sensitive data required to directly support the public health emergency, and uses the data collected to support COVID-19-related efforts or epidemiological research.


3.      Accountability

Please refer to the following contact details for any possible violations for unauthorized access, loss, misuse or altering of the data.


LEPL Information Technology Agency of the Ministry of Health, Labor and Social Affairs of Georgia

144 Ak. Tsereteli Avenue 0119 Tbilisi Georgia

Tel. +995 32 2 51 00 26





4.      Data processing

The app is used for the secure access to health data on COVID-19, Hepatitis C, immunization, prescriptions & recipes. After successful registration & verification of a user, this health data is disclosed from the secured databases of the Ministry of Health, Labor and Social Affairs of Georgia and its legal entities of public law. The installation and use of this app are voluntary and free of charge. This health data is not shared with third parties by the developer. “Georgia e-Health” app data is stored solely on the mobile device. “Georgia e-Health” app requires from a registrant to provide following personal information in order to register successfully:


5.      Health data displayed

A user of “Georgia e-Health” app has an access only to her/his following health data:


Ø  C Hepatitis

·         Name and Surname

·         Screening Status (facility, date, result)

·         Confirmation Status (facility, date, result)

·         Treatment Status (Ongoing treatment)


Ø  Immunization

·         Given vaccinations (vaccine name, facility where the vaccination was given, vaccination date, age, side effects associated with the mentioned vaccination (if any))

·         Missed vaccinations (vaccine name, age - when a beneficiary had vaccination on the calendar, date - intermediate period when a beneficiary had to go to the facility for vaccination, reason for missing the vaccination (if any)

·         Future vaccinations (vaccine name, age - when a beneficiary has to be given a vaccine provided for by a calendar, date - intermediate period when a beneficiary should go to the facility for vaccination


The app allows to print out the certificate of vaccination.


Ø  Prescriptions & recipes

·         Prescription status: Active/Expired

·         Name of a remedy

·         Date of prescription creation

·         Recipe number (if any)

·         Quantity indicated in the prescription

·         Remaining quantity

·         Replacement: Possible/Not possible

·         Prescription form: Generic/Trading

·         Name and surname of a doctor

·         Prescription period (if there is a recipe, it implies the recipe period)

·         Rules of taking a medicine



·         Name and surname

·         ID number

·         COVID-19 status

·         Vaccination certificate

·         Title of the anti-COVID-19 vaccine injected

·         The dates when the vaccination occurred

·         Data about the latest PCR test results

·         Data about the latest Rapid test results

·         Data about the infection within the last 6 months

·         COVID-19 data about the underage children of the registered person as available at the local immunization portal


The app allows to print out the certificate of COVID-19 vaccination.


6.      Retention period

In case of deactivation of a user’s profile, personal information provided by a user is deleted immediately on the developer’s server.


7.      Operability

The developer operates information system that exchanges signature certificates with corresponding foreign systems, particularly within the framework of the EU digital COVID-19 certificate system of the European Union. The interoperable certificates of other countries can be checked in participating countries. The information system processes only signature certificates and no personal data, as the applications for checking COVID-19 certificates require list of signature certificates in order to be able to check the validity of the certificates they scan.


8.      Source of the displayed information

The information displayed by the app is based on the data stored on the secured databases of the Ministry of Health, Labor and Social Affairs of Georgia and its legal entities of public law.


9.      Legal basis

The legal basis for the development of the app is the Decree No 164 of the Government of Georgia on the Prevention of the Spread of the Novel Coronavirus and Response to the Disease Cases and the latest amendment to it.


Decree available at https://matsne.gov.ge/ka/document/view/4821121?publication=91

Amendment available at https://matsne.gov.ge/ka/document/view/5275367?publication=0


The Decree is the main instrument for the establishing of the tools for tackling the COVID-19 outbreak in Georgia. The decree No 164 was issued on January 28, 2021. Latest amendment No 1904 ordered the Ministry of Health, Labor and Social Affairs of Georgia, its LEPL Information Technology Agency, the Ministry of Justice of Georgia and its State Services Development Agency to cooperate and ensure the development of the internationally interoperable e-tools for the identification of the person and verification of the COVID-19 status for the purposes of international travel.


The features of the app were updated as a result of the decision of the Ministry of Health, Labor and Social Affairs of Georgia by LEPL Information Technology Agency. Pursuant to the Statute of the LEPL Information Technology Agency approved by the Order №01-48/n of the Ministry of Health, Labor and Social Affairs of Georgia on May 19, 2021, the Agency is entitled to develop and update a new app.


10.  Data security

In order to protect the data against unauthorized access, loss and misuse the developer takes appropriate security measures of both technical and organizational nature in accordance with the requirements of the Georgian data protection legislation.


11.  Data transfer

The developer will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.


12.  The app permissions


The app does not use location tracking or geopositioning.


The app does not require access to the camera or microphone of the device.


13.  Rights of the persons concerned

Persons whose data is processed with the app have the right to information, rectification, erasure and surrender of their data. They as well, have the right to restrict and object to data processing. They additionally have the right to revoke consent. These rights apply only insofar as personal data is concerned. The encryption and the logic of the apps ensures as little as possible information is available on specific or identifiable persons.


The exercise of the relevant rights requires that the persons concerned provide clear evidence of their identity.


In the event of the breach, the persons concerned may contact the competent data protection authority or take legal action in accordance with the data protection legislation.


14.  Conclusive remarks

The privacy policy may be amended by the developer. The current published version or the version valid for the period in question shall apply.


The exclusive jurisdiction for all disputes is adjudicated by Georgian court. The applicable legislation will be Georgian, unless proven otherwise.


Changes in the terms of use will be notified to the users.


The provisions are provided in Georgian and English, in the event of any discrepancies, the Georgian version will prevail.