Draft notice: this policy was drafted to accurately describe what Moyo Health actually collects and how it is actually used, based on the real services the app and website use. It has not yet been reviewed by a qualified privacy lawyer, and should be before it is relied upon for App Store, Play Store, or POPIA compliance purposes.
1. Who we are
Moyo Health is provided by Axxell Medical (Pty) Ltd, Registration No. 2017/500053/07,
a company registered in South Africa ("Moyo Health", "we", "us", "our"). This policy explains
what personal information we collect through the Moyo Health mobile app and website, why we
collect it, who we share it with, and the choices and rights you have.
2. Information we collect
We collect the following categories of information:
- Account information: your email address and password (stored in encrypted/hashed form — we never see or store your plain-text password).
- Health and wellness information you choose to enter: nutrition, activity, sleep, mood, medication, weight, female health, and disease-screening/symptom-checker entries; any information you provide when booking or attending a consultation with a doctor or therapist, including consultation notes, prescriptions, referrals, and sick notes issued to you.
- Device and wearable data: if you choose to connect a wearable device or Bluetooth sensor (e.g. Apple Watch, Fitbit, Garmin, Oura, Whoop, or a Bluetooth heart-rate strap, blood pressure monitor, or pulse oximeter), we receive the specific health metrics you authorise (such as heart rate, HRV, sleep, steps, or blood pressure).
- Payment information: when you subscribe or pay for a consultation, your payment is processed directly by PayFast (Pty) Ltd. We never receive or store your card number — we only receive confirmation that a payment succeeded, the amount, and a reference number.
- Location information: only while you are actively tracking a walk, run, or ride, to measure distance and show your route. We do not track or store your location at other times.
- Communications: if you contact us for support, we keep a record of that correspondence.
- Technical information: device type, operating system, app version, and crash/error logs, used only to keep the app working correctly.
3. How we use your information
- To provide the core features of the app — tracking, reminders, education, and doctor/therapist bookings.
- To process payments and manage your subscription.
- To send you real, transactional emails (e.g. a welcome email, a password reset, a link to a consultation, or a prescription/referral document) — never marketing email without your separate consent.
- To maintain the security and integrity of the app, including detecting and preventing fraud or abuse.
- To improve the app, using aggregated or de-identified information where possible.
We do not sell your personal information, and we do not use your health information for advertising.
4. Who we share information with
We share information only with the service providers that help us run Moyo Health, each acting under
their own security and confidentiality obligations to us:
- Supabase — our database, authentication, and file storage provider.
- PayFast — our payment processor for once-off consultation payments and recurring subscriptions.
- Resend — our transactional email provider.
- Agora — our video and audio calling provider for doctor/therapist consultations.
- The doctor or therapist you choose to book with — who receives the information necessary to conduct your consultation and, if applicable, issue a prescription, referral, or sick note.
We do not otherwise share your personal information with third parties, except where required by law.
5. Where your information is stored
Your information is stored on Supabase's infrastructure, hosted in the West Europe (London) region.
This means your information is transferred to, and processed in, a country outside South Africa.
We take reasonable steps to ensure it receives an adequate level of protection there, consistent
with the requirements of the Protection of Personal Information Act (POPIA).
6. How long we keep your information
We keep your account and health information for as long as your account remains open, and for a
reasonable period afterwards for legal, audit, and medical-record-keeping purposes (real medical
consultation records, prescriptions, and payment records are generally kept for several years, in
line with standard healthcare and financial record-keeping practice). If you delete your account
through the app, your local device data is removed immediately; your Supabase account and
historical consultation/payment records are retained on the same basis, since these serve as your
real medical and financial record — you can request their removal by contacting us directly (see
Section 9).
7. Your rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your information, subject to our legal and record-keeping obligations.
- Object to certain uses of your information.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with South Africa's Information Regulator, or the equivalent authority in your own country.
To exercise any of these rights, contact us using the details in Section 9.
8. Children's privacy
Moyo Health is not intended for use by children under 18. We do not knowingly collect personal
information from children. If you believe a child has provided us with personal information,
please contact us so we can remove it.
9. Contact us
Axxell Medical (Pty) Ltd, Registration No. 2017/500053/07
Email: admin@axxell.co.za
10. Changes to this policy
We may update this policy from time to time. We will post any changes on this page and update the
"Last updated" date above.