Privacy Policy
Effective Date: 20 July 2026 | Last Updated: 20 July 2026
1. Introduction
ColCare (“ColCare”, “we”, “us”, or “our”) operates a telemedicine platform connecting Nigerian students with verified doctors, campus pharmacies, and diagnostic centres. This Privacy Policy explains how we collect, use, share, and protect personal and health information across the Student, Doctor, Super Admin, Pharmacy, Diagnostic Centre, and Support modules of the ColCare platform (the “Platform”).
This Policy is issued in line with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR). By registering for or using the Platform, you agree to the collection and use of information as described here.
2. Who This Policy Covers
This Policy applies to everyone who uses ColCare in any capacity:
- Students: patients enrolled at a partner institution, using the ColCare mobile app
- Doctors: licensed practitioners providing consultations
- Pharmacy staff: managers, pharmacists, and dispensers at partner pharmacies
- Diagnostic centre staff: lab scientists, radiographers, and receptionists
- ColCare platform administrators (Admin and Super Admin) and Support staff
3. Information We Collect
We collect different information depending on your role on the Platform:
| Role | Data Collected | Why We Collect It |
|---|---|---|
| Student | Name, email, matriculation number, institution, DOB, gender, phone, blood group/genotype, allergies, next-of-kin/emergency contact, consultation notes, chat messages with your doctor, prescriptions, test results, payment and wallet records, device/session data, and — on the mobile app — biometric login data used only to unlock the app on your device. | Account creation, login, matching with doctors, clinical care, prescriptions, billing, safety alerts |
| Doctor | Name, MDCN number, specialty, licence and ID documents, bank details, availability, consultation notes, earnings history | Credential review, scheduling, payment of earnings, quality assurance |
| Pharmacy staff | Staff name, role, login credentials, prescription and dispensing records, inventory data | Order routing, dispensing verification, inventory and performance tracking |
| Diagnostic centre staff | Staff name, role, login credentials, test orders, results, turnaround data | Test order fulfilment, results delivery, quality monitoring |
| All users | IP address, device type, app usage logs, cookies/analytics identifiers | Security, fraud prevention, performance monitoring, service improvement |
4. How We Use Your Information
- Provide, personalise, and maintain consultations, prescriptions, referrals, and test ordering.
- Verify identity and review professional credentials (students, doctors, pharmacies, diagnostic centres).
- Process consultation payments, wallet top-ups, and doctor earnings/withdrawals
- Send appointment, medication, low-balance, and critical-result notifications
- Detect fraud, secure accounts, and enforce our Terms of Service
- Monitor platform quality, resolve disputes, and produce anonymised analytics for service improvement
- Meet legal, regulatory, and institutional reporting obligations
5. How We Share Information
We share information only as needed to deliver care and operate the Platform:
- Doctors, pharmacies, and diagnostic centres involved in your care, strictly for treatment purposes
- Your partner institution, limited to enrolment status and aggregate, de-identified usage data
- Payment processors, to process consultation payments, wallet transactions, and doctor payouts to the bank details a doctor provides
- Regulators or law enforcement where required by law or a valid court order
- Service providers who support hosting, analytics, and customer support under confidentiality obligations
We do not sell personal or health information to third parties, and marketing communications require your opt-in consent.
6. Data Security
- Data is encrypted at rest and in transit (TLS 1.3)
- Role-based access control restricts data to staff who need it for their function
- All administrative actions are logged in an audit trail; admin accounts require authentication
- Video and voice consultations are streamed live between you and your doctor. They are not recorded or stored; only the written notes your doctor enters are kept as part of your medical record
7. Data Retention
Medical records, consultation notes, prescriptions, and test results are retained for a minimum of six (6) years in line with Nigerian health record regulations. Financial and transaction records are retained as required for tax and audit purposes. You may deactivate your account at any time; a deactivated account can be reactivated whenever you choose to return and is not automatically deleted. If you request permanent deletion of your account, this is irreversible once processed, except where longer retention of specific records (such as medical or financial records) is legally required.
8. Your Rights
Subject to the NDPR, you have the right to:
- Access and download a copy of your personal data
- Request correction of inaccurate information
- Request deletion of your account and associated data, subject to statutory retention periods
- Withdraw consent for non-essential data uses
- Opt out of anonymised data use for platform improvement and out of promotional communications
Requests can be made from the Privacy & Security section of the app, or by contacting us as set out below. Data export and deletion requests are processed within 30 days. For step-by-step instructions on deleting your account, and details of what is removed and what we are required to retain, see Delete Your Account.
9. Minors
The Platform is intended for enrolled students who are legally able to consent to their own medical treatment and data processing under Nigerian law. ColCare does not currently operate a guardian-consent process, and cannot verify or accommodate guardian co-presence during consultations.
10. Children Outside the Student Population
ColCare is designed for enrolled students and is not directed at children outside this context. We do not knowingly collect data from individuals who are not enrolled through a partner institution.
11. Changes to This Policy
We may update this Policy as the Platform evolves or regulations change. Material changes will be communicated in-app or by email, and continued use of ColCare after changes take effect constitutes acceptance of the updated Policy.
12. Contact Us
For privacy questions, data access, or deletion requests, contact:
- Email: support@mycolcare.com
- In-app: Profile > Support > Contact Support