Privacy Policy

3.1 Account & Identity Information

• Full name, email address, and password
• Phone number
• Date of birth and gender
• Nationality, state of origin, and local government area
• Profile photograph
• Account type (patient, doctor, hospital, pharmacy, lab, medical personnel)

3.2 Patient Health Information

• Medical history, including past conditions, surgeries, and family history
• Current medications and known allergies
• Symptoms, diagnoses, and treatment plans shared during consultations
• Vital signs (blood pressure, heart rate, temperature, weight, height, oxygen saturation)
• Prescriptions issued on the Platform
• Lab test orders and results
• Hospital referral records and discharge summaries
• Medical documents and imaging files you upload
• Emergency contact details
• Insurance provider and policy number

3.3 Healthcare Provider Information

• Professional qualifications, specialisation, and years of experience
• Medical or practitioner licence number and regulatory body
• Licence expiry date
• Registration type and employment status
• Workplace name, address, and department
• Degree obtained, institution name, and graduation year
• Availability schedule
• Consultation rates
• Professional biography

3.4 Facility & Institutional Information (Hospitals, Pharmacies, Labs)

• Facility or business name, registration number, and type
• Accreditation and certification details
• Contact information, address, and operating hours
• Owner or director names and licence numbers
• Services offered, departments, and beds count (hospitals)
• Tests offered and turnaround times (labs)
• Delivery radius and insurance acceptance (pharmacies)

3.5 Appointment & Consultation Data

• Appointment date, time, type (physical, video, audio, chat), status, and reason
• Consultation notes, diagnoses, and follow-up dates
• Workflow records linking doctors to labs, pharmacies, and hospitals
• Referral letters and clinical instructions

3.6 Communications

• Messages sent through our in-platform messaging system
• Workflow communications between care teams
• Support tickets and feedback submitted to us
• Notification preferences and read status

3.7 Payment & Financial Information

We process payments through regulated third-party payment processors. We do not store your full card number, CVV, or bank account credentials on our servers. We retain:

• Transaction reference numbers
• Payment method type (card, bank transfer, USSD, insurance)
• Transaction amount, date, and status
• Appointment linked to a payment

3.8 Technical & Usage Data

• IP address and approximate geographic location
• Browser type, version, and operating system
• Device type, model, and unique device identifiers
• Pages viewed, features used, and session duration
• Referral source (how you arrived at the Platform)
• Error logs and crash reports
• Search queries made within the Platform

3.9 Information from Third Parties

• Google account profile data when you sign in with Google (name, email, profile picture)
• Verification status or credential validation from regulatory bodies (where applicable)

4.1 Providing Our Services

• Creating and managing your account
• Matching patients with appropriate healthcare providers
• Processing appointment bookings, confirmations, and cancellations
• Enabling consultations (video, audio, chat, in-person coordination)
• Generating prescriptions, referrals, and lab orders
• Facilitating clinical workflows between care team members
• Displaying your profile to verified parties (patients see doctor profiles; doctors see patient appointment details)
• Processing payments

4.2 Communications & Notifications

• Sending appointment reminders, confirmations, and updates
• Delivering in-app and email notifications
• Sending your account activation and password-reset emails
• Alerting care team members to new workflows, results, and messages

4.3 Safety & Trust

• Verifying the credentials and identity of healthcare providers
• Detecting and preventing fraud, abuse, and unauthorised access
• Enforcing our Terms of Service and Community Guidelines
• Investigating and resolving disputes

4.4 Platform Improvement

• Analysing anonymised usage patterns to improve features
• Diagnosing technical problems and bugs
• Conducting internal research and analytics (using aggregated, de-identified data only)

4.5 Legal & Regulatory Obligations

• Complying with Nigerian law, court orders, and lawful requests by regulators
• Maintaining records as required by healthcare regulations
• Protecting rights, property, and safety of users and the public

5.1 Within the Care Team

Information is shared between care team members to enable treatment. For example:

• A doctor sees a patient’s appointment reason, medical history, and relevant records to provide care
• A patient sees their doctor’s profile, specialisation, and availability
• A laboratory receives a test order and the associated instructions from the referring doctor
• A pharmacy receives a medication order and dosage instructions
• A hospital receives a referral with supporting clinical notes

5.2 Service Providers

We engage trusted third-party processors who act on our instructions:

• Cloud infrastructure and database hosting providers
• Payment processing partners (who handle transactions under their own regulatory frameworks)
• Email delivery services (for transactional and notification emails)
• Analytics tools (using anonymised or aggregated data)
• Security and fraud prevention vendors

5.3 Legal Requirements

We may disclose information where we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable government request
• Protect the health, safety, or rights of any person
• Detect, investigate, or prevent fraud or criminal activity
• Defend legal claims brought against us

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, user data may be transferred as a business asset. We will notify you via email or a prominent notice on the Platform prior to your data being transferred and becoming subject to a different privacy policy.

5.5 With Your Consent

We may share your information with third parties when you have given us specific consent to do so, for example when connecting with an external health insurance system or sharing records with a provider outside the Platform.

6.1 Legal Basis for Processing Health Data

We process health data on the following bases:

• Your explicit consent (given when you register and create a health profile)
• Provision of medical care and treatment (when you engage with healthcare providers on the Platform)
• Legitimate interests in operating a safe, functioning healthcare platform
• Compliance with legal and regulatory obligations applicable to healthcare providers and platforms in Nigeria

6.2 Access Controls

Access to health data is strictly controlled. Doctors only see patient health data pertaining to appointments they are actively involved in. Partner facilities (labs, hospitals, pharmacies) only see the clinical information necessary to fulfil a specific workflow or referral. Patients can view and manage their own records at all times.

6.3 Medical Confidentiality

All healthcare providers using the Platform are bound by their professional obligations of medical confidentiality, as well as our Terms of Service, which incorporate strict obligations regarding patient privacy and professional conduct.

6.4 No Advertising Use of Health Data

We will never use your health or medical data to serve you targeted advertisements, sell to insurance companies to affect your premiums, or share with employers or any third party for non-clinical purposes without your explicit consent.

Right to Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

If any information we hold about you is inaccurate or incomplete, you have the right to have it corrected. Most account and profile data can be updated directly within the Platform.

Right to Erasure (“Right to be Forgotten”)

You may request deletion of your personal data. Note that we may be required to retain certain data (particularly medical records) for legally mandated periods. We will always tell you what we can and cannot delete and why.

Right to Restriction of Processing

In certain circumstances, you may ask us to restrict the processing of your data (e.g., while a dispute is being resolved).

Right to Data Portability

You may request your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service.

Right to Object

You may object to the processing of your data where we rely on legitimate interests as our legal basis.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

Types of Cookies We Use

• Strictly Necessary: Required for the Platform to function (e.g., session cookies, authentication tokens). Cannot be disabled.
• Functional: Remember your preferences and settings (e.g., language, theme).
• Analytics: Help us understand how users interact with the Platform (using anonymised data). These can be disabled.
• Security: Used to detect and prevent fraudulent activity.