Privacy Policy

Doza is built on the principle that your health data belongs to you. We are committed to maintaining your privacy and earning your trust. We process all data in compliance with the Nigeria Data Protection Regulation (NDPR) and relevant international standards like GDPR and HIPAA.

We collect information you provide directly, including Identity Data (name, DOB, contact details), Health Records (symptoms, history, prescriptions, lab results), and Communication Data (messages with providers). We also collect Usage Data (IP addresses, device info) to optimize performance.

We use your data to: (i) Facilitate the delivery of telemedicine and healthcare services; (ii) Maintain secure medical records; (iii) Verify your identity and prevent fraud; (iv) Communicate appointment updates and health reminders; and (v) Improve the safety and efficacy of our platform.

We do not sell your personal data. We only share information with: (i) Healthcare Providers explicitly authorized by you; (ii) Trusted Service Providers (e.g., cloud hosting, payment gateways) under strict confidentiality agreements; and (iii) Regulatory Authorities only when compelled by law.

You maintain control over your data. You have the right to: Request access to your personal information; Correct inaccurate data; Request deletion of your account and data (subject to legal retention requirements); Request data portability; and Object to specific processing activities.

We implement industry-standard security measures, including AES-256 encryption for data at rest and TLS 1.3 for data in transit. We conduct regular security audits, maintain strict access controls, and use multi-factor authentication for sensitive administrative access.

Doza is not intended for use by children under the age of 13 without verifiable parental consent. If we discover we have collected personal information from a child without appropriate authorization, we will take steps to delete that information promptly.

If you access Doza from outside your home country, your data may be processed on servers located in different jurisdictions. We ensure that any international transfer of your data is protected by appropriate safeguards and contractual clauses.

We may update this policy periodically to reflect changes in legal requirements or our service offerings. We will notify you of material changes via email or an in-app banner before they take effect.

If you have questions, concerns, or wish to exercise your data rights, please contact our Data Protection Officer at privacy@dozamedic.com.