Data Protection
How we protect your personal and health data
Last Updated: May 16, 2025
Our Commitment to Data Protection
At Feminity, we understand that your health data is extremely sensitive and personal. We are committed to protecting your data and maintaining your trust. This Data Protection Policy outlines our practices for collecting, storing, processing, and securing your data.
Data We Collect
We collect several types of data to provide our services, including:
- Account Information: Name, email address, date of birth, and other information you provide when creating an account.
- Health Data: Menstrual cycle information, pregnancy details, symptoms, medication schedules, and other health-related data you choose to track.
- Usage Data: Information about how you use our application, including features accessed and time spent.
- Device Information: Information about your device, including model, operating system, and IP address.
How We Protect Your Data
Technical Safeguards
We implement a variety of security measures to protect your data, including:
- Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Your health data is also encrypted at rest.
- Access Controls: We restrict access to personal data to authorized personnel only, based on the principle of least privilege.
- Regular Security Audits: We conduct regular security assessments and penetration testing to identify and address potential vulnerabilities.
- Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, fire detection, and suppression systems.
Organizational Safeguards
We also implement organizational measures to protect your data:
- Employee Training: All employees receive regular training on data protection and security best practices.
- Data Protection Officer: We have appointed a Data Protection Officer responsible for overseeing our data protection strategy.
- Data Processing Agreements: We have agreements with all third-party service providers that process data on our behalf, ensuring they maintain appropriate security measures.
Data Retention
We retain your personal data only for as long as necessary to provide you with our services and as required by law. You can request deletion of your account and associated data at any time.
Your Data Protection Rights
Depending on your location, you may have the following rights regarding your data:
- The right to access your personal data
- The right to rectify inaccurate personal data
- The right to erasure (the "right to be forgotten")
- The right to restrict processing of your personal data
- The right to data portability
- The right to object to processing of your personal data
- The right to not be subject to automated decision-making
Data Breach Procedures
In the event of a data breach that affects your personal data, we will notify you and the relevant supervisory authorities as required by applicable law. We have incident response procedures in place to detect, report, and investigate suspected data breaches.
International Data Transfers
Feminity is based in Nigeria, but our services may be provided using infrastructure in other countries. If we transfer your data outside your country of residence, we ensure appropriate safeguards are in place to protect your data.
Changes to This Policy
We may update this Data Protection Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date.
Contact Us
If you have questions or concerns about our data protection practices, please contact our Data Protection Officer at dpo@feminity.health.