Privacy Policy

Curanatics is a telehealth marketplace operated by Curanatics Health Technologies Ltd. We connect patients across Africa and the diaspora with verified Nigerian medical professionals. Our registered address is Lagos, Nigeria. You may contact our Data Protection Officer at: privacy@curanatics.com

We collect the following categories of personal and health data:

• Identity data: Full name, email address, phone number, date of birth, gender
• Health data: Symptoms, AI triage results, consultation notes, prescriptions, lab results, health records
• Payment data: Transaction references, fee amounts (we do not store card details — processed by Stripe)
• Usage data: Pages visited, features used, device type, IP address, browser type
• Communications: Messages sent through the platform, email correspondence
• Beneficiary data: Health data of family members added by Care Managers (with appropriate consent)

Your data is used exclusively for:

• Delivering telehealth consultations and AI-assisted triage
• Maintaining your unified health records
• Processing payments for consultations
• Sending appointment confirmations and reminders
• Verifying practitioner credentials and identities
• Complying with Nigerian law and regulatory requirements
• Improving our AI diagnostic models (using anonymised, aggregated data only)

We process your data under the following legal bases:

• Contractual necessity: To provide the services you signed up for
• Explicit consent: For processing sensitive health data (you may withdraw at any time)
• Legitimate interests: For fraud prevention, security, and platform improvement
• Legal obligation: Where required by Nigerian law or court order

All health data is stored on servers located within Nigeria and the EU, depending on your region. We employ the following security measures:

• AES-256 encryption at rest for all health records
• TLS 1.3 encryption in transit for all API communications
• Role-based access controls — practitioners can only see their own patients
• Audit logs for all access to health records
• Regular third-party security audits

We do not sell your data. We share data only with:

• Practitioners: Only the data necessary for your consultation
• Stripe: For payment processing (their privacy policy applies)
• Legal authorities: If required by valid court order or Nigerian law

You have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct any inaccurate personal data
• Erasure: Request deletion of your data (subject to legal obligations)
• Portability: Export your health records in a machine-readable format
• Restrict processing: Limit how we use your data
• Object: Opt out of certain types of processing
• Withdraw consent: At any time, without affecting prior processing

To exercise any right, email: privacy@curanatics.com

We use essential cookies for authentication and session management, and optional analytics cookies with your consent. See our Cookie Policy for full details.

Curanatics is not directed at children under 13. Care Managers may manage health records for minor beneficiaries (e.g., children) but must be the parent or legal guardian with appropriate authority to consent on their behalf.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email and an in-app notification. Continued use of Curanatics after changes constitutes acceptance.