Privacy policy

1. Introduction

FinCore Africa Technology Ltd (“we”, “us” or “our”) operates AskMama, an AI-powered companion for parents and caregivers.

We respect the privacy of parents, guardians, caregivers and children. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use our application, website and related services.

We process personal information in accordance with applicable data-protection laws, including the Nigeria Data Protection Act 2023 where applicable.

2. Information we may collect

Depending on the features you use, we may collect the following categories of information:

A. Account and contact information

• Name or chosen display name.
• Email address and telephone number.
• Login credentials or authentication identifiers.
• Account preferences and settings.

B. Baby and caregiving information

• Baby's name or chosen identifier.
• Date of birth or age.
• Feeding and sleeping routines.
• Growth or developmental information entered by a caregiver.
• Reported allergies, sensitivities and previous reactions.
• Symptoms, care concerns and relevant medical history voluntarily supplied by the user.
• Caregiving notes and reminders.

C. AI conversations

• Questions submitted to the AI companion.
• Responses generated by the Service.
• Relevant conversation history, where enabled.
• Feedback, safety reports and support requests.

D. Technical information

Depending on our implementation, we may collect device identifiers, operating system details, diagnostic logs, usage events, crash reports, IP addresses and security-related information.

E. Payment information

If paid features are introduced, we may process transaction references, subscription status and payment-related records. Payment card or bank information should be collected only where necessary through appropriately secured systems or authorised payment providers.

We will not claim to collect or process a category of information that our Service does not actually collect.

3. How we use information

We may process personal information for the following purposes, subject to an appropriate lawful basis:

• Creating and maintaining user accounts.
• Providing AI companion and parenting-support features.
• Maintaining user-entered baby profiles and routines.
• Responding to customer requests and complaints.
• Maintaining security, preventing fraud and investigating abuse.
• Diagnosing technical problems and improving reliability.
• Evaluating AI performance and product safety.
• Complying with legal obligations.
• Communicating important service changes.
• Improving the Service using aggregated or appropriately de-identified information where lawful.

We will not use personal information for purposes incompatible with the purpose disclosed to users without an appropriate legal basis and any required notice or consent.

4. Children's and health-related information

Information about a newborn's health, allergies, symptoms or development may constitute sensitive personal data.

We will implement appropriate safeguards and process children's information only in accordance with applicable law. Where parental or guardian consent is required, we will obtain it through an appropriate mechanism.

We will collect only information reasonably necessary for disclosed purposes and will consider the child's best interests when designing and operating the Service.

Parents and guardians should provide information only where they have appropriate authority to do so.

5. Legal basis for processing

Depending on the information and purpose, we may rely on consent, contractual necessity, legal obligations or another lawful basis permitted by applicable data-protection law.

Where consent is required, particularly for sensitive personal data or children's data, we will obtain it before the relevant processing begins.

Where consent is the legal basis, users may withdraw it subject to applicable law. Withdrawal does not automatically invalidate processing lawfully carried out before withdrawal.

We will explain any material consequences of declining or withdrawing consent where relevant.

6. AI providers and other service providers

We may use third-party technology providers to deliver AI responses, hosting, storage, security, analytics, communications or other Service functions.

These providers may process information on our behalf or independently, depending on their role and the applicable arrangements.

Before launch, we will identify the providers used, assess their privacy and security practices, document their permitted uses of data, and establish appropriate contractual safeguards.

Where conversations or health information are transmitted to an AI provider, we will disclose the relevant processing in accordance with applicable law.

We will not promise that AI conversation data is never used for model training unless our provider arrangements and technical configuration support that statement.

7. Sharing information

We may disclose information where necessary to:

• Authorised service providers operating the Service.
• Professional advisers and auditors subject to appropriate confidentiality obligations.
• Competent authorities where required by law.
• Parties involved in a lawful business restructuring, subject to appropriate safeguards.
• Other recipients where the user has given valid consent or another lawful basis applies.

We do not authorise the sale or unrelated commercial exploitation of a baby's health information through this Privacy Policy.

Any additional sharing, including advertising, research or product partnerships, must be separately assessed and disclosed where required.

8. International data transfers

Some service providers may process or store information outside Nigeria.

Where international transfers occur, we will identify the relevant arrangements and apply the transfer safeguards required by applicable law.

Users may contact us for information about the relevant transfer practices, subject to legal restrictions.

9. Data retention

We retain personal information only for as long as reasonably necessary for the disclosed purposes, subject to applicable legal, security and recordkeeping requirements.

Retention periods may vary by data category. Account information, conversation histories, health-related information, technical logs and transaction records may require different retention periods.

Before launch, we will establish and document retention periods for each category, including backups and information held by third-party providers.

When information is no longer required, we will delete it or anonymise it where appropriate and technically feasible, subject to lawful retention requirements.

10. Security

We will implement technical and organisational measures appropriate to the nature and risks of the information we process.

These measures may include access controls, encryption where appropriate, secure authentication, monitoring, staff confidentiality requirements, vendor assessments, backup controls and incident-response procedures.

No internet-based service can guarantee absolute security. Where a personal-data breach occurs, we will assess it and make notifications required by applicable law.

11. Your privacy rights

Subject to applicable law, you may have rights to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion or erasure where legally available.
• Object to or request restriction of certain processing.
• Withdraw consent where consent is the legal basis.
• Request information about relevant data sharing.
• Complain to the appropriate data-protection authority.

Requests concerning a child's information may require verification that the requester is a parent, guardian or otherwise authorised representative.

We will respond to requests in accordance with applicable legal requirements.

12. Access, correction and deletion

You may be able to update certain information through your account settings.

For information that cannot be managed within the application, contact support@askmama.io.

We will provide a process for requesting account deletion and explain how associated information, conversation histories and backups are handled.

Some records may need to be retained where legally required or where another lawful basis applies. We will not retain information indefinitely merely because it was once submitted.

13. Cookies and analytics

If our website or application uses cookies, SDKs, analytics tools or similar technologies, we will disclose their purposes and provide choices where required by law.

We will not state that tracking technologies are absent unless this has been verified across our website, application and third-party integrations.

14. Changes to this Policy

We may update this Policy to reflect changes in our technology, data practices or legal obligations.

Material changes will be communicated where required, and additional consent will be obtained when legally necessary.

The effective date above identifies the latest version.

15. Contact and complaints

Data controller: FinCore Africa Technology Ltd

Privacy email: support@askmama.io

General support: support@askmama.io

Registered address: [Business Address]

If you are dissatisfied with our response, you may have the right to complain to the Nigeria Data Protection Commission or another competent authority, depending on your circumstances.

This Policy should be read together with our Terms and Conditions and AI Safety and Medical Disclaimer.