Privacy Policy

Imole Health, also known as Ìmọlẹ (“Imole”, “we”, “our” or “us”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, protect and share information when you use the Imole Health website, mobile application and related services.

Imole Health is a voice-first mental-health and emotional-wellbeing platform designed to provide culturally relevant support, including support in Nigerian languages (English, Yorùbá, Igbo, Hausa and Nigerian Pidgin). The platform may also help users connect with clinicians, counsellors, faith leaders, organisations or other approved support providers.

This Privacy Policy applies to the Imole Health mobile application with the package name life.imolehealth.app and the website at https://imolehealth.life.

Depending on the features you use, we may collect the following information:

Account and profile information

• Your name
• Your telephone number (we sign you in with a one-time code sent by SMS — there is no password to store)
• Preferred language
• General location, such as your state or city, where you choose to provide it
• Your account role (individual, caregiver, faith leader, provider or organisation representative)
• Profile information you choose to provide, including a profile image

We do not currently require an email address or date of birth to create an account. If you contact us by email, we will hold that email address in order to reply.

Mental-health and wellbeing information

• Mood entries
• Wellbeing assessment answers and scores (for example PHQ-9 and GAD-7 style self-checks)
• Personal notes attached to mood entries
• Goals, preferences and action-plan progress
• Crisis-risk indicators generated from your assessment answers
• Emergency contacts you choose to save
• Information you voluntarily share during conversations or support sessions

Voice, audio and communication information

Imole Health uses voice output (text-to-speech) so that questions and guidance can be read aloud in your language. To do this, the text of the question — not your voice — is sent to our speech providers. Imole Health does not record, upload or store your microphone audio, and does not perform speech-to-text on your voice.

Video and audio sessions in the app run through Jitsi Meet. Those calls are peer-to-peer and encrypted in transit, and Imole Health does not record or store the call content.

Messages and appointment information

We may process appointment requests, session details and communications between users and approved clinicians, counsellors, faith leaders or organisations.

Provider and organisational information

Clinicians, counsellors, faith leaders and organisation representatives may provide professional details, qualifications, areas of support, organisation details and identity-verification information.

Subscription and transaction information

Subscriptions bought on the website are processed by Paystack. Subscriptions bought inside the iOS or Android app are processed by Apple or Google Play and administered through RevenueCat. Imole Health never receives or stores your complete payment-card details. We receive and store information such as subscription plan, billing cycle, transaction reference, amount, currency, status, renewal date and store product identifier.

Technical and usage information

• Device type, platform and operating system
• App version
• Internet Protocol address, processed by our hosting provider for security
• Login and activity timestamps
• Diagnostic and error information when something goes wrong
• Billing events (paywall views, purchases, restores, cancellations and errors) used to diagnose subscription problems
• Security and fraud-prevention information

Website information

The website uses only essential local storage and cookies required for sign-in, security and remembering your language choice. We do not run third-party advertising, marketing or behavioural analytics trackers.

We may use personal information to:

• Create and manage user accounts
• Provide mental-health and emotional-wellbeing features
• Read questions and guidance aloud in your chosen language
• Personalise language, content and support options
• Connect users with selected support providers
• Manage appointments and communications
• Process and verify subscriptions
• Respond to questions, complaints and support requests
• Maintain the security and reliability of the service
• Detect misuse, fraud or unauthorised activity
• Diagnose technical problems
• Improve the accessibility and functionality of Imole Health
• Comply with legal, regulatory and safety obligations

We will not use mental-health information, private conversations, voice information or journal content for targeted advertising.

Imole Health uses automated speech synthesis to read content aloud in Nigerian languages. Where we introduce further artificial-intelligence features, they will assist with general emotional support, translation, wellbeing information or service navigation, and only the information reasonably necessary to provide the requested feature will be transmitted.

Assessment scoring in Imole Health is rule-based: your answers are scored against published questionnaire thresholds. Automated results and any AI-generated response are not medical diagnoses and are not a replacement for assessment or treatment by a qualified health professional.

The speech and processing providers currently used are listed in the Service Providers section below. Imole Health does not sell personal or sensitive user information.

With a provider selected by the user

When you request support from a clinician, counsellor, faith leader or organisation, relevant information may be shared with that provider to deliver the requested service.

With an organisation

Where access is provided through a church, mosque, employer, charity or other organisation, the organisation does not automatically receive your private conversations or detailed mental-health information. Anything shared with an organisation will be explained to you and limited to what is necessary and authorised.

With service providers

We use the following providers, and only for the purposes shown:

• Lovable Cloud (built on Supabase) — account authentication, one-time SMS sign-in codes, database hosting and storage of your profile, assessments, mood entries and subscription records.
• Microsoft Azure AI Speech — text-to-speech for Yorùbá, Igbo, Nigerian English and Nigerian Pidgin. Only the question text is sent.
• ElevenLabs — text-to-speech for Hausa. Only the question text is sent.
• Google Translate text-to-speech — a fallback voice service used only when the providers above are unavailable. Only the question text is sent.
• Jitsi Meet — encrypted video and audio sessions between you and a provider. Calls are not recorded by Imole Health.
• Paystack — payment processing for subscriptions bought on the website.
• Apple App Store and Google Play — payment processing for subscriptions bought inside the mobile apps.
• RevenueCat — administration and verification of in-app subscription purchases, renewals and cancellations.
• Cloudflare (via Lovable hosting) — website and application hosting, delivery and security.

These providers may process information only to deliver services to Imole Health and must protect the information appropriately. We do not use third-party advertising networks or data brokers.

For legal or safety reasons

Information may be disclosed when reasonably necessary to comply with applicable law, respond to a valid legal request, protect users or other people from serious harm, investigate fraud, or protect the rights and security of Imole Health.

Business changes

Information may be transferred as part of a merger, restructuring, financing or sale of the business. Users will be informed where legally required.

Imole Health does not sell personal or sensitive user information to advertisers, data brokers or other third parties.

Clinicians and other regulated professionals using Imole Health remain responsible for complying with their own professional, ethical and legal confidentiality obligations.

Faith leaders and community support providers may not be subject to the same professional confidentiality rules as registered clinicians. The app identifies the type of provider before you begin communicating with them.

Please avoid sharing information you do not want a particular provider to receive.

Imole Health uses the following safeguards, which are actually implemented in the service:

• All traffic between your device and our servers is encrypted using HTTPS/TLS.
• Sign-in uses one-time codes sent to your phone; we never store a password.
• Every database table is protected by row-level security, so your records can only be read by your own signed-in account.
• Administrative functions are restricted to verified administrator roles that are checked on the server, never in the browser.
• Payment webhooks are verified with cryptographic signatures before any subscription change is applied.
• Secret keys are stored server-side and are never exposed to the app or website.
• Billing and security events are logged so that problems and misuse can be investigated.
• The database is hosted on managed infrastructure with automated backups.

No electronic platform can guarantee absolute security. Please protect access to your phone number and notify us immediately if you suspect unauthorised access to your account.

We retain personal information only for as long as reasonably necessary to provide the service, maintain security, fulfil legal obligations and resolve disputes.

Account information, assessments, mood entries, action plans and emergency contacts are retained while your account remains active, so that you can see your history and progress over time. We do not automatically expire this content.

Video and audio sessions are not recorded and therefore leave no stored content. Question audio generated for text-to-speech is cached temporarily for playback speed and is not linked to your identity.

When an account is deleted, your profile, assessments, mood entries, notes, emergency contacts, crisis records, roles and subscription records are permanently deleted, and billing records are anonymised so they can no longer be linked to you. Records held by Paystack, Apple, Google Play or RevenueCat are retained by those providers under their own legal and accounting obligations.

Information contained in secure backups may remain for a limited period before being automatically overwritten or deleted.

You may delete your Imole Health account and associated personal information at any time.

In the app: open Me → About Ìmọlẹ → Delete My Account. This permanently deletes your account immediately.

On the web: use the public account-deletion page at https://imolehealth.life/delete-account.

Deactivating or simply signing out of an account is not the same as deleting it. Deletion permanently removes or anonymises your account and associated information, subject only to legitimate legal-retention requirements.

Depending on where you live, you may have rights to:

• Request access to your personal information
• Correct inaccurate information
• Request deletion
• Withdraw consent
• Object to or restrict certain processing
• Request a copy of the information you provided
• Complain to an applicable privacy or data-protection authority, including the Nigeria Data Protection Commission

You can exercise these rights through our contact channels on the Support page, on WhatsApp, or by emailing privacy@imolehealth.life. We may need to verify your identity before completing a privacy request, and we respond within 30 days.

Imole Health uses service providers located in countries other than Nigeria, including the United States and the European Union.

Where information is transferred internationally, we take reasonable steps to ensure that it receives appropriate protection and that transfers are made in accordance with applicable privacy laws, including the Nigeria Data Protection Act.

Imole Health is not intended for children under 18. We do not knowingly collect personal information from children in circumstances where valid consent is required but has not been obtained.

A parent or guardian who believes that a child has provided information without appropriate authorisation should contact us so the information can be reviewed and deleted.

Imole Health provides general mental-health, emotional-wellbeing and service-navigation support.

It is not an emergency service and is not a replacement for professional medical diagnosis, treatment, psychotherapy or crisis intervention.

If you believe you or another person are in immediate danger, contact local emergency services or an appropriate crisis service straight away.

Imole Health may contain links to external websites, services or resources. Their privacy practices are governed by their own policies.

Please review the privacy policy of an external service before providing personal information to it.

We may update this Privacy Policy when our services, technology, legal obligations or data practices change.

The updated version will be published on this page with a revised effective date. Where a change is significant, we may also provide notice through the app or website.

Questions, privacy requests, complaints or account-deletion requests can be submitted through our contact channels on the Support page.

• Website: https://imolehealth.life
• Privacy requests: privacy@imolehealth.life
• General support: support@imolehealth.life
• WhatsApp: +61 430 524 576