Effective Date: August 1, 2025

Last Updated: July 2025

Introduction

HealR ("we," "our," or "us"), a telemedicine platform owned and operated by MyZODA Ltd., provides a secure telemedicine platform that enables users ("you") to access licensed medical professionals for virtual care. This Privacy Policy explains how we collect, use, share, and protect your personal and health information in accordance with the Nigeria Data Protection Regulation (NDPR), the National Health Act, and industry best practices.

By using HealR’s services, you consent to the data practices described in this policy:

1. Information We Collect

Your data enables us to deliver personalized, seamless healthcare services. We use it to schedule and facilitate virtual consultations, share clinical updates between you and your provider, send notifications or reminders, and process payments. It also supports customer service engagement, fraud prevention, internal analytics, and improving the safety, reliability, and functionality of the platform. We may send you relevant health updates, feature announcements, or survey invitations. You can opt out of promotional communications at any time.

2. How We Use Your Data

Your data enables us to deliver personalized, seamless healthcare services. We use it to schedule and facilitate virtual consultations, share clinical updates between you and your provider, send notifications or reminders, and process payments. It also supports customer service engagement, fraud prevention, internal analytics, and improving the safety, reliability, and functionality of the platform.

We may send you relevant health updates, feature announcements, or survey invitations. You can opt out of promotional communications at any time.

3. Legal Basis for Processing

HealR processes your information under specific lawful bases: your consent (provided during sign-up or profile completion), the necessity of fulfilling a healthcare contract with you, our compliance with legal requirements (such as medical data retention rules), and in cases where vital interests—such as emergencies—necessitate data access.

4. Data Sharing and Disclosure

We only share your information when it is necessary to provide services or comply with applicable law. This includes registered healthcare providers on the HealR platform, licensed under the MDCN or NMCN, who treat you during consultations. We also work with third-party service providers—for payments, cloud storage, infrastructure security, analytics, or technical support—who are bound by confidentiality agreements. Regulatory authorities may receive access where required by law or investigation. HealR does not sell or lease your personal or health information to third parties under any circumstances.

5. Data Security and Storage

We adopt strict data protection safeguards across all systems. Your information is stored in encrypted databases hosted on secure, access-restricted cloud infrastructure. We use SSL certificates, firewall monitoring, secure session protocols, and routine vulnerability scans. Only authorized personnel—under NDA—have access to sensitive data, and role-based permissions are strictly enforced.

6. Retention of Your Data

We retain your information for as long as you maintain an account with HealR or as required by medical or legal obligations. Clinical data may be stored for several years under Nigerian health record retention guidelines. Once data is no longer needed, it is securely deleted or anonymized.

7. Your Rights and Choices

You can access, correct, or delete your personal information through your account settings or by contacting us. You may withdraw consent at any time, subject to contractual or legal limits. If you believe your privacy rights have been violated, you have the right to file a complaint with Nigeria's National Information Technology Development Agency (NITDA).

8. Children and Minors

HealR does not knowingly collect information from children under the age of 16 without verified parental or guardian consent. If such data is inadvertently collected, it will be deleted upon notification.

9. International Data Transfers

If your data is stored or processed outside Nigeria, we ensure that it is handled in line with internationally recognized data protection standards and under strict contractual safeguards.

10. Updates to This Policy

We may periodically revise this policy to reflect service updates, legal requirements, or changes in data practices. Users will be notified of significant changes through email or app alerts.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@healr.com
Address:11 Kashim Ibrahim Road, Makurdi, Benue, Nigeria.