1. Who this applies to
This Privacy Policy explains how MoyoHealth ("we", "us", "our") collects, uses, and protects information when you use our website and related services (the "Service") — whether you're a patient browsing or booking, or a healthcare provider with a listing. It should be read alongside our Terms of Use.
2. Information we collect
What we collect depends on how you use the Service:
| If you… | We collect |
|---|---|
| Create a patient account | Email address, and anything you add to your profile |
| Submit a booking request (with or without an account) | Your name, phone number, email, preferred date/time, and whatever you write as the reason for your visit |
| List a provider | Practice name, category, specialty, description, phone, email, website, address, and any photos you upload |
| Leave a review | The review text, a rating, and your account information |
| Make a donation | The amount — payment details themselves go directly to Paynow, our payment processor, not to us (see Section 6) |
| Use the site generally | Basic technical data — approximate location (if you allow it, e.g. for the map), device/browser type, and pages visited, mainly through Supabase, our infrastructure provider |
3. How we use your information
We use the information above to:
- Connect a booking request to the right provider, and let that provider contact you about it
- Notify providers of new booking requests, by email, SMS, or WhatsApp — whichever they've chosen
- Let you track the status of a booking you made as a guest
- Show relevant provider listings, including ones near a location you search or share
- Maintain and improve the Service — including understanding what patients commonly search for, so we can make the directory more useful
- Respond to you if you contact us for support
- Detect and prevent fraud, abuse, or violations of our Terms of Use
4. Who we share it with
We don't sell your personal information. We share it only in these situations:
- With the provider you're booking — a provider receiving your booking request sees the information you submitted with it (name, contact details, reason for visit). This is the core of how the Service works.
- With service providers who help us run MoyoHealth — currently Supabase (hosting, database, authentication), Resend (sending provider notification emails), Twilio (SMS/WhatsApp notifications, once configured), and Paynow (processing donations). Each only receives what it needs to do its job.
- If we're legally required to — for example, in response to a valid court order or regulatory request.
- In a business transfer — if MoyoHealth were ever acquired or merged, information may transfer as part of that, subject to the same protections described here.
5. Medical information
A booking request's "reason for visit" field is optional and written by you — we treat it as sensitive information. We don't use it for advertising, don't sell it, and it's shared only with the specific provider you're requesting an appointment from. We're not a healthcare provider ourselves and don't maintain medical records — anything discussed with a provider once your appointment happens is between you and them, governed by their own confidentiality and record-keeping obligations, not this policy.
6. Payments and donations
Donations to MoyoHealth are processed by Paynow. When you make a donation, your payment details (card number, mobile money PIN, etc.) go directly to Paynow — we never see or store them. We only receive confirmation that a payment was made, and the amount.
7. How long we keep information
We keep account and booking information for as long as your account is active, or as long as needed to provide the Service — for example, so you can track a past booking, or so a provider can see their booking history. If you delete your account, we'll delete or anonymise personal information within a reasonable time, except where we need to keep it to comply with the law, resolve a dispute, or enforce our Terms of Use.
8. Your choices and rights
You can:
- Access, correct, or delete the information in your account, from your dashboard or by contacting us
- Book as a guest without creating an account, if you'd rather not have a persistent profile
- Ask us what information we hold about you, or ask us to delete it, by contacting us at the email below
- Choose whether to share your location, when the Service asks for it (e.g. for the live map)
If you're a provider, you can update or unpublish your listing at any time from your provider dashboard.
9. Security
We use reasonable technical and organisational measures to protect your information — including access controls on our database and encrypted connections between your browser and our servers. No method of storing or transmitting data is completely secure, though, and we can't guarantee absolute security.
10. Children
MoyoHealth isn't directed at children, and we don't knowingly collect information from children without appropriate parental or guardian involvement. If you believe a child has provided us with personal information inappropriately, please contact us and we'll address it.
11. Changes to this policy
We may update this policy from time to time — we'll update the "Last updated" date above when we do. If a change is significant, we'll try to make that clear on the site.
12. Contact
Questions about this policy, or want to exercise any of the rights above? Reach us at support@moyohealth.co.zw.