Home/Privacy Policy
NDPR & NDPA 2023 Compliant

Privacy & Health Data Protection Policy

At Aluvity Health Technologies Ltd (“Aluvity”, “we”, “our”, or “us”), your personal privacy and medical confidentiality are sacred. This policy explains how we collect, process, safeguard, and retain your data across our Web application, WhatsApp clinical channel, and clinician oversight platforms.

Last Revised: October 13, 2026•Official Social Handle: @aluvity•Data Protection Officer: privacy@aluvity.com

End-to-End Encryption

All clinical dialogues and health records are encrypted in transit via TLS 1.3 and at rest via AES-256.

Doctor Confidentiality

Reviewed exclusively by licensed Nigerian medical doctors bound by MDCN professional secrecy codes.

Zero Ad Commercialization

Your medical data is never sold, shared with data brokers, or monetized for targeted third-party advertising.

1. Regulatory Framework & Legal Basis

Aluvity operates under the strict guidelines of the Nigeria Data Protection Act (NDPA 2023), the Nigeria Data Protection Regulation (NDPR), and the Medical and Dental Council of Nigeria (MDCN) Code of Medical Ethics.

We process your personal and health information based on:

  • Explicit Medical Consent: Provided by you when initiating an asynchronous consultation with Alula or registering an account.
  • Provision of Healthcare Services: Facilitating doctor review, diagnosis, treatment plans, and verified digital prescriptions.
  • Legal & Regulatory Obligations: Retaining medical records in compliance with Nigerian healthcare statutory requirements.

2. Information We Collect

A. Patient Identification & Contact Details: Full name, telephone number (for SMS/WhatsApp delivery and OTP authentication), email address, age/date of birth, and biological sex.

B. Clinical & Symptom Data: Presenting complaints (chief concerns), symptom onset, pain severity ratings, medical history, known drug allergies, past surgeries, and ongoing medications.

C. Communications on WhatsApp: Messages sent to our verified WhatsApp Business channel (+234 816 972 5007) via Meta Cloud API, including text descriptions, button selections, and message delivery statuses.

D. Clinician Verification Data: For attending doctors, we verify and store MDCN registration numbers, medical school credentials, specialty certifications, and government identification.


3. Role of AI Assistant (Alula) & Medical Disclaimer

Alula is Aluvity’s clinical intake assistant. Alula collects symptoms systematically using standard medical frameworks (e.g. OLDCARTS) and presents a structured clinical summary to attending Nigerian doctors.

Important Medical Notice

Alula does not independently issue medical diagnoses or prescribe medications. All clinical diagnoses, prescriptions, and Care Plans are formulated and signed off by licensed MDCN physicians. Your health data is never used to train public open-source artificial intelligence models.


4. WhatsApp Business Platform & Meta Cloud API

When you choose to consult Aluvity via WhatsApp:

  • Messages are routed through Meta’s enterprise-grade WhatsApp Cloud API infrastructure to our secure backend servers.
  • We utilize read receipts and typing indicators solely to confirm message delivery and provide visual conversational feedback.
  • WhatsApp messages received by Aluvity are ingested directly into encrypted patient sessions and are governed by this Privacy Policy.

5. Payment Information Security

All digital transactions on Aluvity are processed by Paystack, a PCI-DSS Level 1 certified payment provider. Aluvity does not capture, store, or have access to your raw credit/debit card numbers, CVVs, or online banking passwords.


6. Your Rights Under the Nigeria Data Protection Act

As a patient in Nigeria, you hold the following statutory data rights:

Right of Access: Request a copy of all clinical dossiers, care plans, and intake notes linked to your account.
Right to Rectification: Request correction of inaccurate personal demographic or contact information.
Right to Erasure: Request deletion of your personal account, subject to mandatory medical record retention laws.
Right to Portability: Obtain your digital prescription and doctor review note in standardized format.

7. Contact Our Data Protection Officer (DPO)

For questions regarding this policy, to exercise your data rights, or to report a privacy concern, please reach out to our dedicated compliance team:

Aluvity Health Technologies Ltd — Data Protection Office

Email: privacy@aluvity.com or dpo@aluvity.com

Official Social Media Handle: @aluvity (X, Instagram, LinkedIn)

WhatsApp Support: +234 816 972 5007