SÒLÁYÒPrivacy policy
Solayo Nigeria Ltd ("Solayo", "we", "us"), a company registered in Nigeria and registered with the Nigeria Data Protection Commission (NDPC), is the data controller for solayo.africa and the Solayo app. Solayo gives pregnancy, postpartum and fertility support to women in Nigeria through solayo.africa and the Solayo app. We collect as little as we can, and we follow the Nigeria Data Protection Act 2023 (NDPA). This policy explains what we collect, why, who we share it with, and your rights.
What we collect
- Account details, only if you sign in. Your email address, and if you use Google sign-in, your name and Google account ID. We use these to sign you in and keep your account across devices. We do not get your Google password, contacts or other Google data.
- Health logs you enter. Your stage, due date or cycle dates, symptoms, kicks and check-ins are stored on your device, not on our servers. You can export or delete them in the app under Me.
- What Ask Solayo sends. So answers fit you, each question to Ask Solayo is sent with a short summary: your first name if you gave one, your stage and pregnancy week, cycle day or baby's age, and counts of the symptoms, moods, notes and appointments you logged in the last 7 days. This is used only to write the answer and is not saved on our servers.
- Basic app record. An anonymous app ID, the stage you chose (for example trying to conceive, pregnant, or postpartum), your pregnancy week, country, device type and app version, and the days you used the app. You can switch usage stats off in Me.
- Questions to Ask Solayo and support chats. The messages you send so we can answer, and so our care team can follow up when you ask for help. Voice notes are turned into text to answer you and are not kept as audio.
- Community posts. Posts, replies, reactions and reports you make in Community, shown under the display name you choose.
- Orders and bookings. Your name, phone number, email, delivery address, what you ordered or booked, and payment status. We never see or store your card details. Paystack handles payment.
- Notifications. If you turn on notifications, we store a notification token for your device.
Why we use it
- To run the app: sign-in, answers, community, orders, deliveries and expert bookings (performance of our service to you).
- To send you receipts, booking updates and, if you turn them on, weekly notifications (your request and consent).
- To keep Community safe: posts are checked automatically for harmful content before they appear (legitimate interest in user safety).
- To understand how the app is used and improve it, using counts rather than personal profiles (legitimate interest, and you can switch it off).
- To meet legal and accounting duties for payments.
Health information is sensitive. We only process the health information you choose to send us, for the purpose you send it, and with your consent. You can withdraw consent at any time by deleting it.
Who we share it with
We share data only with the companies that help us run Solayo, and only what each one needs:
- Cloudflare, which hosts our website and app.
- Neon, which hosts our database.
- OpenAI and Anthropic, which help write answers in Ask Solayo, turn voice into text and back, and screen Community posts. They receive the message being processed, not your email or name, and may not use it to train their models.
- Google, if you choose Google sign-in.
- Resend, which sends our emails.
- Paystack, which processes payments.
- Chowdeck, for same-day delivery in Lagos: your name, phone number and delivery address.
- The care professional you book with: your name, contact details and the reason you give for the appointment.
Some of these companies store data outside Nigeria. Where they do, we rely on the safeguards the NDPA allows, such as contracts that require them to protect your data. We share data with authorities only when the law requires it.
How long we keep it
- Account details and app records: until you delete them or your account.
- Questions and support chats: until you delete them in the app.
- Community posts: until you or our moderators remove them.
- Order and payment records: as long as Nigerian tax and accounting law requires, even after you delete your account.
- Sign-in codes: a few minutes.
Your rights
Under the NDPA you can ask to see, correct, export or delete your data, object to how we use it, and withdraw consent. In the app, go to Me to export your logs, delete server data, or delete your account. For anything else, email [email protected] and we will reply within 30 days. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Your consent to health data
Pregnancy, fertility and health details are sensitive personal data under the NDPA. We ask for your explicit consent when you first set up Solayo, before you enter any of them. You can withdraw it at any time by deleting your data in the app under Me, or by emailing us. Withdrawing does not affect anything we did before.
Cookies and storage on your device
We do not use advertising or tracking cookies. Solayo stores your logs and settings in your browser or phone storage so the app works, and keeps you signed in if you choose to sign in. If usage stats are on, the app sends anonymous counts of which features are used. You can switch this off in Me. Paystack and Google may set their own cookies when you pay or sign in with them.
Data breaches
If a breach puts your data at risk, we will tell the NDPC within 72 hours of finding out, and we will tell you without delay if it is likely to cause you harm, with what happened and what to do.
Age
Solayo is for adults. Community is for users aged 18 and over.
Security
Data is encrypted in transit, access to our admin tools is limited to named team members, and every admin action is logged.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.
Contact
Solayo Nigeria Ltd, Nigeria. Our Data Protection Officer handles questions and requests about your data: [email protected]