1. Who we are
YerosCare LTD (“YerosCare”, “we”, “us”) operates the YerosCare app, a platform for virtual medical consultations in Nigeria. We are the data controller for personal data processed through the app.
2. Our role
YerosCare connects patients with independent doctors. We verify each doctor’s licence with the Medical and Dental Council of Nigeria (MDCN) before their profile is published. Doctors are not our employees. Medical advice and treatment are provided by the doctor you consult.
3. Who can use the app
YerosCare is for people aged 18 or over, in Nigeria. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.
4. Data we collect
Patients
- Account data: name, email, and sign-in details from Google or Apple, including Apple’s private relay email if you choose it.
- Profile and health data: date of birth, gender, blood group, allergies, ongoing conditions, phone and WhatsApp numbers, address, emergency contact.
- Consultation data: reason for visit and symptoms, appointment details, doctor’s notes shared with you (outcome, plan, follow-up), prescriptions.
- Messages exchanged with your doctor.
- Payment data: transaction status and reference. Card details are handled by Paystack and are not stored by us.
Doctors
- Name, email, specialization, bio, experience, photo, phone number, MDCN registration number and licence documents, consultation fees, verification status, subscription status.
All users
- Device and technical data: push notification token, app version, IP address, and security logs.
- Session data: an access token stored on your device and a refresh token in a secure cookie.
- Calls: voice and video calls are not recorded.
5. How we use your data and our lawful bases
| Purpose | Lawful basis (NDPA 2023) |
|---|---|
| Create and secure your account | Contract |
| Match you with doctors and book consultations | Contract |
| Provide consultations, chat, calls, prescriptions | Contract; consent for health data |
| Process payments and refunds | Contract; legal obligation |
| Verify doctors’ licences | Legitimate interest; legal obligation |
| AI specialty suggestion (Section 7) | Explicit consent |
| Send appointment and message notifications | Contract; legitimate interest |
| Prevent fraud and keep the platform secure | Legitimate interest |
Health data is sensitive personal data. We process it only with your explicit consent or where the law allows, and you can withdraw consent by deleting your account.
6. Who sees your data
Your doctor sees the profile, health information and symptoms you provide for your booking. Doctors’ private working notes are visible only to them. Outcome, plan and follow-up notes are visible to you.
Service providers that process data for us
- Paystack: patient payments.
- Google Play and Apple App Store: doctor subscription billing.
- Google and Apple: sign-in.
- LiveKit: real-time audio and video.
- DigitalOcean: hosting and storage.
- Anthropic: AI specialty suggestion (Section 7).
- Authorities, where the law requires it.
We do not sell your personal data. We do not use it for advertising. The app contains no advertising SDKs, and we do not track you across other apps or websites.
7. AI-assisted specialty suggestions
If you use the symptom check, the symptoms you type are sent to Claude, an AI model provided by Anthropic, to suggest which type of specialist to see.
- It is not a diagnosis and is not medical advice.
- We do not send your name, email, phone number or address. Please avoid typing names or contact details into the symptom box.
- The suggestion helps you choose a specialty. A doctor makes any medical decision.
- We ask for your consent before your symptoms are sent.
8. Where your data is stored
Your data is stored on servers operated by DigitalOcean.
9. Retention and deletion
You can delete your account at any time inside the app, under Settings, by choosing Delete account. When you do, we permanently delete your account data, including medical records and chat messages.
Legal and accounting retention
We retain limited transaction records, without health details, for as long as tax and accounting law requires. These records do not include your medical information.
10. Your rights
Under the Nigeria Data Protection Act 2023, you may:
- access your data and get a copy;
- correct inaccurate data;
- delete your data, including in-app account deletion;
- withdraw consent;
- object to or restrict certain processing;
- receive your data in a portable format;
- complain to the Nigeria Data Protection Commission.
To use these rights, email info@yeroscare.com. We will respond within the period the NDPA requires.
11. Security
We use encryption in transit over HTTPS and TLS, access controls, authentication through one-time codes or Google or Apple sign-in, and secure session handling. No system is perfectly secure. If a breach affects your data, we will notify you and the Nigeria Data Protection Commission as the law requires.
12. Notifications and permissions
The app may ask for notifications for appointment and message alerts, microphone and camera access for consultation calls, and photo or file access for your profile photo and documents. You can change these in your device settings.
13. Changes
We will post updates here and tell you in the app about material changes.
14. Contact
YerosCare LTD · info@yeroscare.com