Privacy & Health Data Protection Policy
At Aluvity Health Technologies Ltd (“Aluvity”, “we”, “our”, or “us”), your personal privacy and medical confidentiality are sacred. This policy explains how we collect, process, safeguard, and retain your data across our Web application, WhatsApp clinical channel, and clinician oversight platforms.
End-to-End Encryption
All clinical dialogues and health records are encrypted in transit via TLS 1.3 and at rest via AES-256.
Doctor Confidentiality
Reviewed exclusively by licensed Nigerian medical doctors bound by MDCN professional secrecy codes.
Zero Ad Commercialization
Your medical data is never sold, shared with data brokers, or monetized for targeted third-party advertising.
1. Regulatory Framework & Legal Basis
Aluvity operates under the strict guidelines of the Nigeria Data Protection Act (NDPA 2023), the Nigeria Data Protection Regulation (NDPR), and the Medical and Dental Council of Nigeria (MDCN) Code of Medical Ethics.
We process your personal and health information based on:
- Explicit Medical Consent: Provided by you when initiating an asynchronous consultation with Alula or registering an account.
- Provision of Healthcare Services: Facilitating doctor review, diagnosis, treatment plans, and verified digital prescriptions.
- Legal & Regulatory Obligations: Retaining medical records in compliance with Nigerian healthcare statutory requirements.
2. Information We Collect
A. Patient Identification & Contact Details: Full name, telephone number (for SMS/WhatsApp delivery and OTP authentication), email address, age/date of birth, and biological sex.
B. Clinical & Symptom Data: Presenting complaints (chief concerns), symptom onset, pain severity ratings, medical history, known drug allergies, past surgeries, and ongoing medications.
C. Communications on WhatsApp: Messages sent to our verified WhatsApp Business channel (+234 816 972 5007) via Meta Cloud API, including text descriptions, button selections, and message delivery statuses.
D. Clinician Verification Data: For attending doctors, we verify and store MDCN registration numbers, medical school credentials, specialty certifications, and government identification.
3. Role of AI Assistant (Alula) & Medical Disclaimer
Alula is Aluvity’s clinical intake assistant. Alula collects symptoms systematically using standard medical frameworks (e.g. OLDCARTS) and presents a structured clinical summary to attending Nigerian doctors.
Alula does not independently issue medical diagnoses or prescribe medications. All clinical diagnoses, prescriptions, and Care Plans are formulated and signed off by licensed MDCN physicians. Your health data is never used to train public open-source artificial intelligence models.
4. WhatsApp Business Platform & Meta Cloud API
When you choose to consult Aluvity via WhatsApp:
- Messages are routed through Meta’s enterprise-grade WhatsApp Cloud API infrastructure to our secure backend servers.
- We utilize read receipts and typing indicators solely to confirm message delivery and provide visual conversational feedback.
- WhatsApp messages received by Aluvity are ingested directly into encrypted patient sessions and are governed by this Privacy Policy.
5. Payment Information Security
All digital transactions on Aluvity are processed by Paystack, a PCI-DSS Level 1 certified payment provider. Aluvity does not capture, store, or have access to your raw credit/debit card numbers, CVVs, or online banking passwords.
6. Your Rights Under the Nigeria Data Protection Act
As a patient in Nigeria, you hold the following statutory data rights:
7. Contact Our Data Protection Officer (DPO)
For questions regarding this policy, to exercise your data rights, or to report a privacy concern, please reach out to our dedicated compliance team:
Aluvity Health Technologies Ltd — Data Protection Office
Email: privacy@aluvity.com or dpo@aluvity.com
Official Social Media Handle: @aluvity (X, Instagram, LinkedIn)
WhatsApp Support: +234 816 972 5007