Privacy Policy

Yummooh Life ("Yummooh", "we", "us") operates a prepaid health wallet, Digital Health ID and care marketplace connecting members with clinics, doctors, pharmacies, laboratories and delivery partners across Africa.

For members, sponsors and visitors, Yummooh Life is the data controller of account, wallet, device and platform-usage data. For clinical records that a healthcare provider creates about you during care, that provider is the controller of the clinical content and Yummooh Life acts as a processor hosting it on their behalf.

Privacy contact: support@yummooh.com.

This policy applies to yummooh.life, www.yummooh.life, the Yummooh Life mobile apps, the practitioner Health ID scan portal, and our provider, employer, sponsor and admin portals. Links to third-party sites are governed by their own policies.

• Account data: name, email, phone number, password credentials, country, state, city or town, preferred language, and role (member, provider, sponsor, staff).
• Identity and verification data: Digital Health ID number, date of birth, photo, and documents you or a provider upload for verification.
• Health data (special category): health questionnaire answers and risk profile, uploaded past medical records, vitals, diagnoses, prescriptions and repeats, lab results, referrals, chronic care plans, appointments, visits and consultation notes.
• Financial data: wallet balance and currency, top-ups, transfers, subscriptions, activation fees, provider settlements, commissions and payout requests. Card details are handled by our payment processor and are never stored by Yummooh.
• Dependents and sponsorship data: details of dependents you add, and the link between a diaspora sponsor and a sponsored member.
• Device and technical data: push notification token, app version, platform, IP address, approximate location derived from your registered country/city for search ranking, and crash and error diagnostics.
• Support and communications: support tickets and messages you send us.
• Audit data: logs of who accessed a health record, when, and under which consent or one-time access code.
• Camera and identity comparison: QR scanning is performed on device. Clinic identity checks send the stored Health ID photo and a submitted selfie through Lovable’s AI gateway to Google Gemini for comparison, following member consent in Security. Yummooh records the result, not the submitted selfie in that workflow. External provider retention, processing locations and contractual safeguards remain under review. A clinic administrator may supervise document verification instead; notes must not contain ID numbers.

We do not sell personal data, and we never use health data for advertising or profiling for marketing purposes.

Portable health profiles, uploaded medical documents and outside-care history require patient-specific approval or a valid one-time-code session. Providers can separately access authorized records of care they delivered for treatment and record-keeping.

• you share your Digital Health ID and approve a one-time access code;
• you approve a provider’s portable-record request in Security, for up to 24 hours;
• you consent to a sponsor viewing your records and that sponsor holds an active records-access subscription.

Revoke provider permission in Security or one-time-code sessions in your Health ID settings. Revocation prevents new portable-record reads; it does not erase lawful previous disclosures or downloaded copies. Already issued document links may work for up to 60 seconds. Security shows portable-record permission and disclosure events; full clinical audit coverage is still being assessed.

We share personal data only with:

• healthcare providers you choose or attend;
• our payment processor (Stripe) and mobile money partners, to take payments and pay out providers;
• our cloud hosting, database and file storage provider;
• our transactional email and push notification providers;
• your employer or sponsor, limited to coverage and eligibility status — never clinical detail without your consent;
• professional advisers, regulators, law enforcement or courts where legally required, and acquirers in a merger or restructuring (subject to applicable safeguards).

We are reviewing processor agreements, subprocessors, data locations and restrictions on secondary use, including identity-photo processing. This notice is not confirmation that every required agreement or assessment is complete.

Yummooh operates across multiple African countries and uses cloud infrastructure that may store or process data outside your country of residence, including in the EU and the United States. Hosting and AI inference may use different locations. Applicable transfer mechanisms and processor terms must be verified for each operating country. We do not currently guarantee national-only hosting, national data sovereignty or a particular transfer safeguard for every processing activity.

Controls include authenticated requests, account- and purpose-based access restrictions, private document storage, short-lived document links, portable-record disclosure logging, idle timeouts and optional device biometric unlock. Privacy administration requires server-confirmed super-admin privileges and two-factor verification. Broader staff MFA enforcement and recovery checks remain in progress. Offline clinical payloads use encryption with session-scoped keys; this does not protect against malicious code executing in the same signed-in browser. Hosting security assurances and complete audit coverage require separate verification.

No system can be guaranteed perfectly secure. Please protect your password and one-time access codes, and report anything suspicious to support@yummooh.com.

Subject to local law, you may:

• access a copy of your personal data;
• correct inaccurate or incomplete data;
• delete data where no legal retention duty applies;
• receive a portable, machine-readable export;
• restrict or object to certain processing;
• withdraw consent at any time, without affecting prior lawful processing;
• opt out of marketing messages;
• lodge a complaint with your national data protection authority.

Email support@yummooh.com from your registered address, or use Support in the app. We respond within 30 days and will tell you if we need an extension or further identity verification.

To request deletion of your account and associated personal data, email support@yummooh.com with the subject "Delete my account", use Delete account or submit a privacy request in Security. Requests are tracked for review, not immediately purged. We target review within 30 days; applicable legal deadlines, identity checks, retention duties and extensions must be assessed. Automatic account deletion is not enabled until retention schedules, processor handling and purge procedures are approved.

• Cameroon: applicable requirements include Law No. 2024/017 on personal data protection, the cybersecurity framework and provider medical-secrecy obligations. Country-specific compliance assessment remains subject to local legal review.
• Nigeria (NDPA 2023): you may contact our privacy team to exercise data subject rights and may complain to the Nigeria Data Protection Commission.
• South Africa (POPIA): you may object to processing and complain to the Information Regulator.
• Kenya (Data Protection Act 2019): you may complain to the Office of the Data Protection Commissioner.
• Ghana (Act 843), Rwanda (Law No. 058/2021), Ivory Coast (Law No. 2013-450): equivalent access, correction, deletion and complaint rights apply.
• EU/EEA and UK (GDPR): legal bases are set out in section 4; you have the rights in section 10 and may complain to your supervisory authority.
• California (CCPA/CPRA): we do not sell or share personal information for cross-context behavioural advertising. You may request to know, delete or correct, and you will not be discriminated against for exercising these rights.

We use strictly necessary cookies and local storage to keep you signed in, remember your language, and secure sessions. We do not run third-party advertising or cross-site tracking cookies. Any product analytics we use is limited to aggregated reliability and usage measurement and excludes health record content.

Accounts are for adults aged 18 and over. Dependents, including children, may be added and managed only by a responsible adult member who confirms they have authority to do so. We do not knowingly collect data directly from children. If you believe a child created an account independently, contact us and we will remove it.

We use automated rules for fraud screening, wallet affordability checks and provider search ranking, as well as AI-assisted identity comparison. Face comparison is not a clinical diagnosis or guaranteed identity determination. Ask for supervised document verification or human review if an automated outcome prevents identity confirmation or payment.

If a personal data breach is likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours of becoming aware where required, and notify affected users without undue delay, describing what happened and what to do next.

We update this notice as the platform evolves. Material changes are announced in the app or by email before they take effect, and the "last updated" date above always reflects the current version.

Privacy, data protection and security reports: support@yummooh.com
General support: the Support widget inside the app.