Privacy Policy

AirTook Health Technology Ltd

Registered in Nigeria. AirTook Health Technology Ltd ("AirTook", "we", "us") is the data controller responsible for your personal data collected through the AirTook platform.

Privacy enquiries: privacy@airtook.com

Personal & Health Information

• Identity data — full name, date of birth, sex, profile photo
• Contact data — email address, phone number, address
• Health records — blood group, allergies, medications, medical and surgical history
• Consultation history — doctor notes, diagnoses, prescriptions, lab results
• Vital signs — blood pressure, weight, temperature, and other measurements you log
• Payment data — wallet transaction history (card details processed by Paystack — we do not store raw card numbers)
• Usage data — device type, app interactions, Aira chat messages

Purpose of Processing

• Providing healthcare services and connecting you with licensed doctors
• Powering Aira's AI health guidance (your data stays within AirTook's secure environment)
• Processing wallet payments and tracking consultation fees
• Sending appointment reminders and follow-up check-ins (you can opt out in Settings)
• Compliance with regulatory requirements (MDCN, NDPC, Nigerian medical records law)
• Improving platform quality and safety

We do not use your health data for advertising or sell it to any third party.

Nigeria Data Protection Act 2023 (NDPA)

AirTook processes your personal data in compliance with the Nigeria Data Protection Act 2023 and the guidelines issued by the Nigeria Data Protection Commission (NDPC). Our lawful bases for processing are:

• Contract — to provide healthcare services you have requested
• Consent — for optional features such as proactive Aira insights
• Legal obligation — to comply with MDCN and Nigerian medical records regulations
• Vital interests — in emergency situations involving risk to life

How Long We Keep Your Data

Patient health records are retained for 7 years from the date of your last consultation, as required by Nigerian medical records regulations.

Account data (name, contact, wallet history) is retained for the duration of your account plus 7 years after closure.

Aira conversation history is retained for 12 months to provide continuity of care. You can clear your Aira history at any time from the app.

Rights Under the NDPA 2023

As a data subject under the Nigeria Data Protection Act 2023, you have the right to:

• Access — request a copy of all data we hold about you
• Correction — request that inaccurate data be corrected
• Deletion — request deletion of your personal data (subject to legal retention obligations)
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — turn off optional features like Aira insights in your profile settings

To exercise any of these rights, email privacy@airtook.com or use the "Request Account & Data Deletion" option in your profile. We will respond within 30 days.

Who We Share Data With

• Doctors on AirTook — only the doctor assigned to your consultation sees your health data
• Paystack — payment processing (governed by Paystack's own privacy policy)
• OpenAI — Aira's AI engine (messages are sent under a data processing agreement; no data is used to train OpenAI models)
• Termii — SMS notifications for appointment reminders

We do not sell your data to advertisers, data brokers, or any other third party.