1. Who we are
Moyo Health is provided by Axxell Medical (Pty) Ltd, Registration No. 2017/500053/07,
a company registered in South Africa ("Moyo Health", "we", "us", "our"). This policy explains
what personal information we collect through the Moyo Health mobile app and website, why we
collect it, who we share it with, and the choices and rights you have.
2. Information we collect
We collect the following categories of information:
- Account and profile information: your email address and password (stored in encrypted/hashed form — we never see or store your plain-text password), and the profile details you enter, such as your name, date of birth, gender, country, height, weight and blood group. When you book a consultation we also collect your phone number and address, which are needed to arrange the consultation and issue prescriptions.
- Health and wellness information you choose to enter: nutrition, activity, sleep, mood, medication, weight, female health, and disease-screening/symptom-checker entries; any information you provide when booking or attending a consultation with a doctor or therapist, including consultation notes, prescriptions, referrals, and sick notes issued to you.
- Device and wearable data: if you choose to connect a wearable device or Bluetooth sensor (e.g. through Apple Health or Android Health Connect, or a device such as an Apple Watch, Fitbit, Garmin, Oura, Whoop, or a Bluetooth heart-rate strap, blood pressure monitor, or pulse oximeter), we receive the specific health metrics you authorise (such as heart rate, HRV, sleep, steps, or blood pressure).
- Payment information: when you subscribe or pay for a consultation, your payment is processed directly by PayFast (Pty) Ltd, or — if you subscribe through the Android app — by Google Play Billing, or — if you subscribe through the iPhone app — by Apple. We never receive or store your card number — we only receive confirmation that a payment succeeded, the amount, a reference number, and, for a Google Play or Apple subscription, the subscription status Google or Apple provides so we can keep your access up to date.
- Location information: only while you are actively tracking a walk, run, or ride, to measure distance and show your route. We do not track or store your location at other times. Your GPS route stays on your device and in your own activity history; we receive only summary figures such as distance, not your route.
- Communications: if you contact us for support, we keep a record of that correspondence.
- Technical information: device type, operating system, app version, and crash/error reports, used only to keep the app working correctly. Crash reports are sent to our crash-reporting provider, Sentry, and are set up so they do not include your name, email or the health information you enter.
3. How we use your information
- To provide the core features of the app — tracking, reminders, education, and doctor/therapist bookings.
- To process payments and manage your subscription.
- To send you real, transactional emails (e.g. a welcome email, a password reset, a link to a consultation, or a prescription/referral document) — never marketing email without your separate consent.
- To maintain the security and integrity of the app, including detecting and preventing fraud or abuse.
- To improve the app, using aggregated or de-identified information where possible.
We do not sell your personal information, and we do not use your health information for advertising.
4. Who we share information with
We share information only with the service providers that help us run Moyo Health, each acting under
their own security and confidentiality obligations to us:
- Supabase — our database, authentication, and file storage provider.
- PayFast — our payment processor for once-off consultation payments and recurring subscriptions.
- Google Play Billing — payment processor for subscriptions purchased through the Android app.
- Apple — payment processor for subscriptions purchased through the iPhone app.
- Anthropic — provides the AI behind the "Ask" wellness assistant. When you ask a question, your question and a short summary of your profile (such as conditions and current medication names you have entered) are sent to Anthropic to produce an answer. We do not send your name or email address.
- Sentry — our crash-reporting provider (crash and error reports only).
- Resend — our transactional email provider.
- Agora — our video and audio calling provider for doctor/therapist consultations.
- The doctor or therapist you choose to book with — who receives the information necessary to conduct your consultation and, if applicable, issue a prescription, referral, or sick note.
We do not otherwise share your personal information with third parties, except where required by law.
5. Where your information is stored
Your information is stored on Supabase's infrastructure, hosted in the West Europe (London) region.
This means your information is transferred to, and processed in, a country outside South Africa.
We take reasonable steps to ensure it receives an adequate level of protection there, consistent
with the requirements of the Protection of Personal Information Act (POPIA).
6. How long we keep your information, and deleting your account
We keep your account and health information for as long as your account remains open. When you
delete your account from within the app, this is permanent: your local device data, your sign-in
credentials, and your account's profile, health, medication, activity, sleep, nutrition, mood,
subscription, and other personal data are removed from our systems straight away and cannot be
recovered. We separately retain your consultation and booking records, prescriptions, and payment
records for a reasonable period afterwards, for legal, audit, and medical-record-keeping purposes
(in line with standard healthcare and financial record-keeping practice) — these are kept apart
from the rest of your account specifically because they are our own regulatory and financial
records, not because your account survives deletion. You can request their removal, subject to
those obligations, by contacting us directly (see Section 9).
You do not need to open the app to request deletion: email us at
admin@axxell.co.za
with "Account deletion request" in the subject line and the email address your account is
registered under, and we will delete your account and associated personal data on the same basis
as an in-app deletion.
7. Your rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your information, subject to our legal and record-keeping obligations.
- Object to certain uses of your information.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with South Africa's Information Regulator, or the equivalent authority in your own country.
To exercise any of these rights, contact us using the details in Section 9.
8. Children's privacy
Moyo Health is not intended for use by children under 18. We do not knowingly collect personal
information from children. If you believe a child has provided us with personal information,
please contact us so we can remove it.
9. Contact us
Axxell Medical (Pty) Ltd, Registration No. 2017/500053/07
Email: admin@axxell.co.za
10. Changes to this policy
We may update this policy from time to time. We will post any changes on this page and update the
"Last updated" date above.