Privacy Policy

1. Who we are

Ayanda is a platform of connected services for health, education, finance, family and business. Our registered address is Plot P5A Road 22, Gateway Sparklight Estate, Lagos, Nigeria. You can reach us at hi@ayanda.co or 07037786885.

For the purposes of the Nigeria Data Protection Act (NDPA) 2023, Ayanda is the data controller for the account data you give us directly. Where a hospital, school or other institution uses Ayanda to serve you, that institution is the controller of the records it creates about you, and we process those records on its instructions.

2. What we collect

3. Why we use it, and our lawful basis

4. Artificial intelligence features

Some features — the iLera health assistant, the Igiiwe AI tutor and AI Practice — send the text of your question, and where relevant the exam question being discussed, to a third-party AI provider so it can generate a reply. We do not send your name, phone number, email address or clinical records with those requests.

AI replies are study and information aids. They are not medical advice, and the health assistant is explicitly limited so that it will not diagnose or prescribe. In an emergency, contact a hospital or emergency services — not the app.

5. Health information

Health data is only visible to you, to the hospital that created it, and to anyone you have explicitly been linked to (for example a parent managing a child's record). It is never used for advertising, never sold, and never shared with another institution without a lawful reason.

If a carer manages your record, the hospital controls what they can see — some carers can manage appointments and bills without being able to read clinical notes.

Records cannot be edited from the app. If something is wrong, ask the records desk at your hospital so a clinician is never reading a correction nobody checked.

6. Who we share data with

We do not sell your personal data. We share it only with:

7. Where your data is held

Some of our providers process data outside Nigeria. Where that happens we rely on the transfer safeguards permitted under the NDPA and require contractual protections at least equivalent to those in this policy.

8. How long we keep it

Account data is kept while your account is open and for a reasonable period afterwards. Financial records are kept for as long as tax and financial regulation requires. Health records are kept by the hospital under its own retention rules. Offline practice packs downloaded to a phone expire automatically after at most seven days and are deleted from the device.

9. Your rights

Under the NDPA you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or withdraw a consent you gave. You may also complain to the Nigeria Data Protection Commission. To exercise any of these, email hi@ayanda.co — we will respond within 30 days. Requests about clinical records may be directed to your hospital, since it holds them.

DELETING YOUR ACCOUNT is something you can do yourself, at any time, without asking us: in the mobile app under Settings, or on the web under Settings once signed in. See ayanda.co/delete-account for exactly what is erased, what we are required to keep, and how to ask if you no longer have the app installed. A right you have to write in and request is a weaker right than one you can exercise yourself, which is why this one is a button.

10. Keeping your account secure

Passwords are stored hashed, never in plain text. Money-out actions require a 4-digit transaction PIN which is verified on our servers at the moment the money moves, and which locks after repeated wrong attempts. Please do not share your password, PIN or one-time codes with anyone — including anyone claiming to be from Ayanda. We will never ask you for them.

11. Children

Igiiwe is used by school-age students, normally through a parent or school account. Where a child uses the platform, the parent, guardian or school is responsible for that account and for the consent behind it.

12. Changes to this policy

If we change this policy materially we will say so in the app and update the date at the top. Continuing to use Ayanda after a change means you accept the updated policy.