Privacy Policy

This policy explains how Ansoshi collects, uses, stores and shares personal information across its website, accounts and related healthcare services. It applies to patients, healthcare providers, healthcare businesses, caregivers and visitors, as relevant to the services they use.

Not every service or category of information described here applies to every person. Features described as conditional apply only where available. Ansoshi’s processing is subject to applicable Nigerian data-protection law, including the Nigeria Data Protection Act 2023. Additional local requirements may apply in other countries.

Ansoshi is operated by Ansoshi limited. Depending on the activity, we may act as a data controller for our own operations or process information on behalf of a healthcare provider under an appropriate arrangement. Our contact details appear at the end of this policy.

We aim to collect only what is reasonably needed for the service you request. Depending on your relationship with Ansoshi, this may include:

• Account and contact details: your name, date of birth or age, email, phone number, address, State/LGA, account credentials, emergency contact and relevant preferences.
• Healthcare information: symptoms, medical history, allergies, medications, prescriptions, consultation notes, diagnoses, laboratory requests and results, referrals and information relevant to your care.
• Professional and business details: qualifications, licences, registration information, identity and verification documents, facility details, authorised personnel, professional profiles, availability and settlement information.
• Messages and requests: communications with support, appointment messages, complaints, privacy requests and information you choose to submit.
• Payment and wallet records, where available: amounts, currency, references, payment status, billing details, refunds, balances and transaction history. Payment providers may handle payment credentials under their own terms.

Using the service may generate technical information such as your IP address, browser and device type, operating system, login activity, security events and the date and time of requests. We use relevant information to operate the service, investigate problems and protect accounts.

Location information may help you find nearby providers, check service availability or arrange delivery. We aim to use less precise location where that is sufficient. You can manage device location permissions in your browser or device settings.

Our Cookie Policy explains browser storage separately, including the current position on optional tracking on the public website.

We use relevant information to create and recover accounts, verify providers, arrange requested healthcare services, facilitate authorised record sharing, process transactions, provide support, prevent fraud, investigate incidents and meet legal obligations.

The lawful basis depends on the activity. It may be your consent, performance of a contract or steps you request before a contract, a legal obligation, protection of vital interests, or a public or legitimate interest where the law allows it. Sensitive health information requires an appropriate legal basis and any additional safeguards required by law.

Where we rely on consent, it should be specific, informed and freely given. You may withdraw it, without affecting the lawfulness of earlier processing. Unrelated marketing consent is not a condition of receiving care where the law does not permit that condition.

Medical information can reveal deeply private matters, including mental health, sexual and reproductive health, infectious conditions and other sensitive concerns. Using Ansoshi does not make that information public.

Relevant information may be shared with the doctor, nurse, pharmacy, laboratory or hospital involved in an authorised service. Sharing should be limited to what is reasonably necessary for that purpose, your authorisation or another lawful basis.

Providers remain subject to their own professional confidentiality obligations. Prescriptions and laboratory results should be available only to authorised people, not through public profiles or publicly accessible records.

Where record-sharing controls are available, you may authorise selected information to be shared and restrict or revoke access. Withdrawal cannot undo access that has already lawfully occurred, and providers may have obligations to retain clinical records.

Being a relative, caregiver or the person who paid for care does not automatically give someone access to a patient’s health information. Appropriate patient authorisation, legal authority or another lawful basis is required.

Services involving children require the authorisations and safeguards appropriate to their age, the service and applicable law. A parent or guardian’s permission may be required.

Hospital and electronic medical record integrations are conditional on availability and appropriate authorisation. This policy does not represent planned integrations as already operational.

We may use providers for hosting, communications, identity and security services, payments, maps, delivery, video consultations or other functions that are available on the platform. Relevant providers receive information needed for their role, subject to appropriate safeguards and contractual arrangements where they act on our behalf.

Some infrastructure or providers may be outside Nigeria. Where information is transferred internationally, applicable legal, contractual and technical safeguards are required. Healthcare providers and payment services may also process information independently under their own notices.

We may disclose information where required by law, to respond to a lawful request, protect vital interests, investigate misuse or establish or defend legal claims. Any disclosure remains subject to applicable law.

Where available, AI may assist with navigation, administrative tasks, information organisation, summaries or provider tools. AI can be incomplete or inaccurate and does not replace a qualified healthcare professional.

Personal or health information must not be used for unrelated AI training without an appropriate lawful basis and the required privacy safeguards. This policy does not itself grant consent to train models on your health information.

Automated tools may support security, fraud prevention or recommendations. Where applicable law provides rights concerning significant automated decisions, you may request the required safeguards, including human review where required.

Ansoshi’s security approach is intended to combine authentication, access restrictions, secure sessions, transport protection, audit records and appropriate organisational safeguards. Access by staff and contractors should be limited to what their work requires and subject to confidentiality obligations.

Encryption during transmission is different from end-to-end encryption. We do not claim that all healthcare records or communications are end-to-end encrypted. Planned encryption at rest, feature-specific end-to-end encryption and related key-management measures remain subject to implementation and technical verification.

No internet service can guarantee complete security. Protect your device and account, keep authentication codes private and sign out of shared devices. If a personal-data breach occurs, we will assess it and take the response and notification steps required by applicable law.

Information is retained for as long as reasonably necessary for its purpose or as required by law. The period depends on the record, including healthcare, account, verification, transaction, security, complaint and legal records. A detailed retention schedule has not yet been published.

Closing your account does not necessarily delete all records immediately. Healthcare, regulatory, accounting, fraud-prevention or legal obligations may require continued retention. Where a deletion request cannot be fulfilled, we will explain the reason where legally permitted.

Subject to applicable law and its limits, you may ask to exercise the following rights. We may need to verify your identity or authority before responding, to protect your information from unauthorised requests.

• Be informed about how your information is processed and request access to it.
• Correct inaccurate or incomplete information and request deletion where applicable.
• Object to or request restrictions on certain processing.
• Receive portable information where the right applies.
• Withdraw consent where processing relies on it.
• Exercise applicable rights concerning automated decisions and profiling.
• Raise a complaint with Ansoshi or the relevant supervisory authority.

Service messages may include appointment updates, security alerts, payment confirmations and account notices. These are separate from promotional messages. Where we send marketing, we will provide the opt-out controls required by law; essential service messages may continue.

Links to external websites, including WhatsApp, take you to services with their own privacy practices. Review those notices before sharing information. Avoid sending passwords, authentication codes or unnecessary medical information through general support channels.

For a privacy question, rights request or complaint, contact support@ansoshi.com. Use “Data Privacy Request” or “Privacy Complaint” as the subject and describe your request without sending unnecessary sensitive records. Our support team is the initial contact for routing privacy concerns.

You may also contact the Nigeria Data Protection Commission or another competent supervisory authority. Contacting Ansoshi first does not remove your right to raise a complaint with the regulator.

Ansoshi limited · 1, 12 Crescent, Efab City Estate, Mbora, Life Camp.

We may update this policy as services, technology or legal requirements change. The updated date will appear at the top of this page. Material changes may also be communicated through the platform, with fresh consent requested where required. Reading this policy does not replace a separate consent where the law requires one.