PRIVACY POLICY

Who we are

StocMed Health Ltd is a company registered in Nigeria (CAC registration [NUMBER]). For any privacy question or request, contact us at [PRIVACY EMAIL], [ADDRESS].

What we collect

When you create an account: your name, email address, phone number, and general location (the area or city you choose). If you register as a pharmacy, we also collect your pharmacy name, address, and PCN license number.

When you search for medication: the text of your search and your general location, so we can show you nearby pharmacies that have what you need. We keep a record of your own searches so you can see your history.

When you chat with our assistant: the messages you send, so the assistant can help you find medication.

When you allow location access: your device's location, used only to find pharmacies near you. You can decline this and enter your area manually instead. We do not track your location in the background.

Automatically: basic technical information such as device type and browser, used to keep the service working and secure.

What we do NOT do

• We do not sell your personal identity to anyone.
• We do not process payments for your medicines. When you buy medication, you pay the pharmacy directly. Your card and payment details do not pass through StocMed.
• Our assistant does not diagnose you or prescribe medicine. It helps you find medication and, where appropriate, connects you to a licensed pharmacist or directs you to emergency care.

How we use your information

• To connect you with nearby pharmacies that stock the medication you need.
• To show you your own search history.
• To let a licensed pharmacist respond to a symptom enquiry or verify a prescription you submit.
• To keep the service secure and working properly.
• To understand, in an anonymous and aggregated way, what medications are in demand in different areas. This helps pharmacies stock what people need. (See “Demand insights” below — this is separated from your identity.)

Demand insights, and how we protect your identity

We produce aggregate insights about which medications are being searched for in which areas. This is a core part of how StocMed helps pharmacies stock the right medicines.

We do this in a way that separates the demand information from you personally. Your readable search history is kept in your own account so you can see it. The information that feeds our aggregate demand analytics is de-identified — it is not stored in a way that links a specific health-related query back to your named account. (Technically: analytics search records are stored without your user identity attached; your personal history is stored separately under your own account and is only visible to you.)

Health-related information

Some of what you search for or discuss may relate to health. We treat this with extra care:

• Your personal chat and search history is visible only to you and to StocMed systems that need it to provide the service.
• Symptom enquiries and prescriptions you submit are viewed only by verified licensed pharmacists for the purpose of helping you.
• We apply additional protection to reduce the risk that health-related searches can be linked to your identity in our analytics.

Prescriptions you upload

If you upload a prescription, it is stored securely and privately and is accessible only to verified licensed pharmacists reviewing it. Prescription images are not publicly accessible.

How long we keep your information

• Your personal search history is retained for [RETENTION PERIOD, e.g. 12 months] and then automatically deleted.
• Chat messages are retained for [RETENTION PERIOD] and then deleted.
• Account information is kept while your account is active.

You can delete your data at any time (see “Your rights”).

Who we share with

• Pharmacies: when you choose to contact or visit a pharmacy through StocMed, relevant details of your request are shared with that pharmacy so they can help you.
• Delivery partners: if you choose delivery, the details needed to fulfil it are shared with the delivery provider. Payment and fulfilment are between you, the pharmacy, and the delivery provider — not StocMed.
• Service providers: we use trusted providers to host and secure our systems (for example, our database and error-monitoring providers). They process data on our behalf under agreement.
• Legal: we may disclose information where required by Nigerian law.

We do not sell your personal data.

Your rights

Under the NDPR / Nigeria Data Protection Act, you have the right to:

• Access the information we hold about you.
• Correct information that is wrong.
• Delete your data — the app includes a “delete my data” function that removes your search history, chat history, consent records, and related data. You can also contact us.
• Withdraw consent for demand-insights use at any time, in your settings, without losing access to the core service.
• Complain to the Nigeria Data Protection Commission if you believe we have mishandled your data.

To exercise any of these, use the in-app controls or contact [PRIVACY EMAIL].

Consent

When you first search, we ask for your explicit consent to use anonymised search patterns for demand insights. This is optional and revocable. Core search works whether or not you consent.

Security

We protect your data with access controls, encryption in transit, database-level security rules that keep each pharmacy's and each user's data separate, and monitoring. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.

Children

StocMed is intended for adults. We do not knowingly collect data from children. [CONFIRM your intended minimum age and any handling.]

Changes

We may update this policy. We will post the new version here with an updated date and, for significant changes, notify you.