Privacy notice
Last updated 2026-10-24
This notice explains what LP Health collects when you use the app, why, who else handles it, how long it is kept, and what you can do about it. LP Health is in a testing phase. What it tells you is not a medical diagnosis.
1. Who is responsible
| Controller | [not yet provided by the operator] |
|---|---|
| Address | [not yet provided by the operator] |
| Privacy requests | [not yet provided by the operator] |
2. Who can have an account
You must be 18 or older to create an account. We do not knowingly hold an account for anyone younger. The app takes symptoms only for the adult using it, never for a child: a sick child should be seen by a doctor, with their parent or guardian there. If you believe a child has created an account, write to us at the address above and we will delete it.
3. What we collect and why
| Your account: email address and password | To let you sign in. The password is held by our sign-in provider
(Supabase Auth) and never reaches our own servers.
Legal basis: performing our contract with you (Art. 6(1)(b) GDPR). |
|---|---|
| Your profile: name, phone number, age group, city and area | So a doctor can call you back if a video call drops, so help can be
sent in an emergency, and to check that you are old enough to use the app.
Legal basis: Art. 6(1)(b) GDPR. |
| Your location, only when you tap "Use my location" | To find the areas and hospitals nearest to you. Your phone asks your
permission first. The location is sent to our server in Frankfurt for
that one search and is then dropped: we do not store it, log it, or
share it with anyone. Without it you can choose your area from a list.
Legal basis: Art. 6(1)(b) GDPR; reading the location from your phone is what you asked for by tapping (§ 25(2) no. 2 TDDDG). |
| Health information: the symptoms you report, how long you have had them, and where the app suggested you go | To suggest the right kind of care, and to check whether those
suggestions are correct while the app is being tested.
Legal basis: your explicit consent on the "Before you start" screen (Art. 9(2)(a) and Art. 6(1)(a) GDPR). Without it we store nothing about your health. |
| Your consent choices: when you agreed, withdrew or changed your mind, and which version of the notice you were shown | So we can show what you agreed to, and when (Art. 7(1) GDPR).
Legal basis: our legal obligation to be able to demonstrate consent (Art. 6(1)(c) GDPR). |
| Your own words, when you talk to the app | Kept only if you tick "You may keep what I say". Used to check that
the app understood you.
Legal basis: a separate, optional consent (Art. 9(2)(a) GDPR). |
| Documents you upload (lab results, prescriptions; for doctors: licence, ID and CV) | Kept so you have them in one place, and for doctors so a person can
check your licence before you see patients.
Legal basis: for patients, your explicit consent (Art. 9(2)(a) GDPR); for doctors, Art. 6(1)(b) GDPR and our legitimate interest in patient safety (Art. 6(1)(f) GDPR). |
| Test video calls | No doctor is connected through the app yet; the video call is a test
of the link between two phones. Sound and picture pass through our video
provider. We do not record calls.
Legal basis: Art. 9(2)(a) and Art. 6(1)(b) GDPR. |
| Reports about illegal content | If you send one, your name, email and what you report, to handle it.
Legal basis: our legal obligation under the Digital Services Act (Art. 6(1)(c) GDPR). |
| Technical records (IP address, time and type of request) | Kept briefly by our hosting providers to run the service and keep it
secure. Our own server also counts, in memory only, how many reports
came from one IP address in the last hour, so the report form cannot be
flooded; the count is never written down and is gone within the hour.
Legal basis: our legitimate interest in a working, secure service (Art. 6(1)(f) GDPR). |
The app's triage is automated, but it only suggests where to seek care. It does not make decisions about you that have legal or similarly significant effects (Art. 22 GDPR), and you can always choose a doctor yourself.
4. Who else handles your data
We do not sell your data and we do not use it for advertising. These providers process it on our behalf, under contract:
| Render | Runs the app's server. Region: Frankfurt, Germany. |
|---|---|
| Supabase | Database, sign-in and document storage. Region: Ireland. |
| Resend | Delivers the sign-in emails for Supabase (confirmation and password-reset codes), so it handles your email address and the code in each message. |
| Daily (daily.co) | Video consultations. Calls are routed through its Frankfurt region. If a call fails with an error, Daily's software may send an error report to Daily. |
Some of these companies are based in the United States, even where the data is stored in the EU. Safeguards for any transfer outside the EU/EEA: [not yet provided by the operator]
Inside LP Health. Our admin team can see accounts (email, name, city, when you joined), doctors' licence papers, reports about illegal content, and counts such as how many people signed up this week. The admin area never shows your symptoms, triage answers, recorded words or health files. Admins sign in with a password and a code from an authenticator app, and everything they do (for example approving a doctor, blocking or deleting an account) is written to an audit log with the reason. Only if a court orders it, or we need it to establish, exercise or defend a legal claim, can one person's record be exported, by a separate, deliberate step that is also written to the audit log (Art. 6(1)(c) and (f), Art. 9(2)(f) GDPR).
Talking to the app. Your browser, not LP Health, turns your voice into text. If your phone can do this on the device, the app makes it do so. If it cannot, the app tells you before you start that your browser will send the sound of your voice to its maker's online service (for Chrome, that is Google), under that company's own privacy terms. You can always pick your symptoms from a list instead.
Directions to a hospital. The "Directions" button opens Google Maps with that hospital's position. The app sends nothing to Google; Google Maps only opens if you tap the button, and then Google's own privacy terms apply.
The hospital list. The list of health facilities comes from GRID3 Nigeria Health Facilities (versions 2.0 and 3.0), with data from the Nigeria Health Facility Registry, published under the Creative Commons Attribution 4.0 licence (CC BY 4.0). It may be incomplete or out of date. The hospitals on it are not LP Health partners.
5. Cookies and storage on your device
We use no cookies, no analytics, no advertising trackers and no session recording. While you are signed in, your browser keeps your sign-in session in its session storage, which is removed when you close the tab. This is strictly necessary to provide the service you asked for, so it needs no consent (§ 25(2) no. 2 TDDDG). Fonts, icons and scripts are served from our own server, so opening the app does not send your IP address to font or script providers.
6. How long we keep it
- Your account, profile, health information and documents: until you delete them or your account. You can do both in the app.
- Your recorded words: deleted after 180 days, or at once if you withdraw that consent, whichever comes first.
- Your consent choices: as long as your account exists, and deleted with it.
- When you delete your account, we keep only its random account number and the time, for 30 days, so that a sign-in left open on a phone cannot bring the account back. The audit log keeps a dated note that the account was deleted, by whom and why, as described below.
- The admin audit log (what an admin did, to which account number, when and why): six years, so that admin decisions can be accounted for. It holds no health information.
- A record exported for a court order or a legal claim: only as long as that proceeding needs it (Art. 17(3)(e) GDPR).
- Reports about illegal content: as long as needed to handle the report and any dispute about it.
- Technical records: as long as our hosting providers keep their logs.
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format (Art. 15–21 GDPR). You can withdraw any consent at any time. This does not affect what was done before you withdrew it.
In the app, under My account → Privacy and my data, you can:
- download everything we hold about you,
- stop us keeping your recorded words, which also deletes the ones already kept,
- withdraw your consent, after which nothing more about your health is stored,
- delete your account and everything in it.
For anything else, write to [not yet provided by the operator]. You also have the right to complain to a data protection authority. The authority responsible for us is [not yet provided by the operator]. If you are in Nigeria, the Nigeria Data Protection Act 2023 also protects you, and you can complain to the Nigeria Data Protection Commission.
8. Changes to this notice
If we change what we do with your data, we will update this page, and where the change affects what you agreed to, we will ask you again in the app.