Privacy Policy

Muna Health (“Muna”, “we”, “us”, “our”) provides a mobile application offering an oral-systemic health screening. Using a short health questionnaire and photographs of your mouth, the app produces an Oral-Systemic Health Risk Score (OS-HRS) and guidance on suggested next steps. This policy explains what personal data we collect, how and why we use it, who we share it with, how we protect it, and your rights over it. It applies to the Muna mobile application and related services (the “Service”). Muna Health Inc. is the data controller responsible for your personal data. Questions: info@munahealthtech.com.

• Account information: your name and email address, to create and secure your account.
• Health questionnaire responses (sensitive health data): information you provide when screening, which may include age and sex; height and weight; conditions such as diabetes or hypertension; blood-test indicators (such as HbA1c) if you choose to enter them; oral-health symptoms (such as bleeding gums, tooth loss); lifestyle factors (such as smoking, diet, exercise); family medical history; for some users reproductive-health information (such as pregnancy or related conditions); and your state of origin and residence.
• Intraoral photographs (sensitive health data): photographs of the inside of your mouth (front teeth, upper and lower gums, tongue) captured through the app.
• Assessment results: the OS-HRS score, risk tier, and related results the app generates.
• Technical and usage data: basic information needed to operate and secure the app, such as device type, app version, and authentication data that keeps you signed in.

We do not collect your National Identification Number (NIN) or similar national identifiers, and do not require them to use the Service.

Health information and intraoral photographs are sensitive personal data. We process them only with your consent and only for the purposes in this policy. You may withdraw consent at any time, though some features may not function without the data they depend on.

• To provide the Service: register your account, run your screening, compute your OS-HRS, and show your results and next steps. (Basis: performance of our agreement with you, and your consent.)
• To secure your account: authenticate you and protect your data. (Basis: our legitimate interest in security, and legal obligations.)
• To improve the Service and conduct research: only where you give separate explicit consent, we use your screening data in de-identified form (direct identifiers removed) to improve and validate the OS-HRS methodology and conduct quality-improvement and research (see “Research and de-identified data” below). (Basis: your explicit consent.)

We do not use your data for advertising, and we do not sell your personal data.

Improving a health screening tool requires data. In the app we ask separately whether you agree to let us use your screening data, with personal identifiers removed, for research and quality improvement. This consent is:

• optional (you can decline and still use the full Service);
• separate from accepting this policy;
• withdrawable (contact info@munahealthtech.com); and
• recorded (we keep a record of your choice and the version you agreed to).

When data is used for research, we remove direct identifiers so it is not reasonably attributable to you, and handle it under appropriate safeguards.

We share personal data only as necessary to run the Service, and only with parties bound to protect it:

• Service providers and processors: we use trusted infrastructure providers, including Google Cloud Platform, to host the app and store data (including your intraoral photographs) securely on our behalf, under our instructions and appropriate agreements; they may not use it for their own purposes.
• Legal and safety: we may disclose data where required by law or to protect the rights, safety, and security of our users, the public, or Muna.
• Business transfers: if Muna is involved in a merger, acquisition, or asset sale, data may transfer as part of that transaction, subject to this policy.

We do not sell your personal data and do not share it with advertisers.

Muna serves users in Nigeria and the diaspora. Your data may be stored or processed on servers outside your country of residence. Where data is transferred across borders, we take steps to keep it protected to a standard consistent with this policy and applicable law.

We use technical and organizational measures to protect your data, including encrypted transmission, access controls, and storing your intraoral photographs in a private, access-restricted store. No method of transmission or storage is completely secure, but we work to protect your information and limit access to those who need it to operate the Service.

We keep your personal data for as long as your account is active or as needed to provide the Service, and as required for legal, regulatory, and legitimate operational needs. You may request deletion of your account and associated personal data. De-identified research data is no longer personal data and may be retained for research and quality-improvement purposes.

Subject to applicable law (including the Nigeria Data Protection Act/Regulation), you may:

• access your data;
• correct inaccurate data;
• request deletion;
• withdraw consent (including research consent) without affecting prior lawful processing;
• object to or restrict certain processing;
• request a portable copy; and
• lodge a complaint with the Nigeria Data Protection Commission.

To exercise these rights, contact info@munahealthtech.com. We respond within the timeframes required by law.

The Service is intended for adults (18+). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact info@munahealthtech.com and we will take appropriate steps.

We may update this policy from time to time. For material changes we will update the “Last updated” date and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

Muna Health Inc. Email: info@munahealthtech.com.