Privacy Policy

Last updated: 19 October 2026 · Version 2026-10d · Applies to SabiCare on WhatsApp and any other messaging app we support. Written to comply with the Nigeria Data Protection Act 2023 (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC).

In short: we use your phone number (or your user ID on another messaging app we support) to run SabiCare, we keep what you send us only as long as needed, we never sell your data, and you can ask us to delete everything at any time by sending DELETE MY DATA to the bot.

1. Who we are

SabiCare is operated by ADOPTAI CONSULT ("SabiCare", "we", "us"), the data controller for the information described here. You can reach us at any time by messaging SabiCare on WhatsApp, or through adoptaiconsult.com. Privacy contact email: adoptaiconsult@gmail.com.

2. What we collect

• Your identifier. On WhatsApp, your phone number (supplied automatically by WhatsApp; required). On any other messaging app we support, your numeric user ID on that app (we do not store your username or profile photo).
• Your preferences. Your chosen language, your plan, when you were last active, your referral code, your time zone (worked out from your number's country code, or the one you pick with TIME ZONE, so reminders come at your local time), and, on a messaging app that gives us no phone number, the region you pay from (which sets your currency).
• Product checks. NAFDAC numbers, product names and the result we returned, with the time of each check. If you send a photo of a pack we read the number from it.
• Your care plan and reminders (health-related). Only if you choose to set one up (by sending SETUP, ADD MEDICINE or WATER): the medicines you list, the times you pick, how many tablets or days you have left, your check-in replies (taken / not yet / skip) and a weekly summary of how many doses you took. Drink-water and meal reminders (up to 4 a day each) store only their times.
• Optional context you may give us. Everything in this item is optional and you can skip any of it. Your first name or nickname (so reminders can greet you and alerts can say who they are about); the illness or condition your plan is for, such as "Hypertension" (a label we show back to you, which we never use to suggest a medicine or a dose); and a caregiver's name or label, such as "Mum" or "Dr Ade".
• A caregiver, family member, pharmacist or friend you choose to involve. We never add someone from a number you type. You get a one-time link to send them, and they are linked only after they open it and accept. We then keep their messaging ID (a WhatsApp number, or a user ID on another messaging app we support) and the optional label you gave them, so we can message them if you keep missing doses of the medicines you linked. They see your name (if you gave one), the medicine name and how many doses were missed. They can stop at any time by sending STOP ALERTS.
• Location. Your state, area or exact location only when you use the nearby-pharmacy feature and say yes when we ask.
• Reports. Text, photos or video you send when you report a suspicious product.
• Payments. When you pay for a plan or an extra caregiver, our payment partner Flutterwave handles your card or bank details. We receive only the amount, currency, status, reference and the number or account the payment was made for, and we keep a record of each payment link we create for you (what it was for and its price) so a payment can only ever be applied as quoted. We never see or store your card or bank details.
• Announcements. We occasionally send news about SabiCare (for example new features or product-safety alerts). For each one we record whether it reached you: sent, delivered, read (as reported by WhatsApp), or not delivered and why. Send STOP UPDATES any time to stop announcements (START UPDATES to get them again); your reminders and alerts are not affected.
• Technical records. Message IDs, timestamps and error logs needed to run and secure the service. Phone numbers in our logs are masked.

We do not ask for your email address, your bank details, your contacts or your national ID number.

3. Why we use your data, and our lawful basis

Purpose	Lawful basis (NDPA s.25)
Verify products you ask about and reply to you	Performance of the service you requested
Set up and send reminders you opt into; handle your health-related reminder data, your optional name and illness label, and your adherence summary	Your explicit consent (you opt in by setting a reminder; every extra detail is optional)
Contact a caregiver you named about missed doses	Your consent (you invite them) and their consent (they accept the link; they can leave with STOP ALERTS)
Find nearby pharmacies from your location	Your explicit consent (we ask first)
Process payments and keep financial records	Contract and legal obligation (tax and accounting law)
Send occasional announcements and record whether each one reached you	Our legitimate interests (keeping you informed about the service and product safety); you can object at any time with STOP UPDATES
Keep the service secure, prevent abuse and fraud, fix errors	Our legitimate interests, balanced against your rights
Understand usage in aggregated, anonymised form (which products are checked most, where, how often)	Our legitimate interests
Share product-safety information with regulators when required by law	Legal obligation

4. Health-related (sensitive) data

Information about the medicines you take is health data, which the NDPA treats as sensitive personal data. We only process it if you choose to set up a reminder, and we ask for that choice explicitly. You can withdraw it at any time by cancelling the reminder (send REMINDERS) or deleting your data (DELETE MY DATA). Withdrawing does not affect anything we did before. Reminders are an aid, not medical advice and not a substitute for your doctor or pharmacist.

The illness label, your medicines and your adherence are used only to run your reminders, to show them back to you, and (for the parts you chose to link) to alert your caregiver. They are not used for advertising and are never sold or shared with anyone else. Please do not enter another person's health information unless you are their parent, guardian or carer, or they have asked you to.

5. Who we share data with

We do not sell your data and we do not use it for third-party advertising. We use trusted service providers ("processors") who handle data only on our instructions to run SabiCare:

• Meta (WhatsApp Business Platform), and the provider of any other messaging app you use with us: to deliver messages between you and SabiCare. Their own privacy policies also apply to your use of those apps.
• Supabase: database and file storage.
• Oracle Cloud: the server SabiCare runs on.
• Groq: reads product photos and helps understand your messages.
• Google: translation, and place search for the pharmacy locator.
• Flutterwave: payments.
• Sentry: error reports so we can fix problems. Message text, names and phone numbers are removed before anything is sent.

We may also disclose data when the law requires it (for example a court order or a request from a competent Nigerian authority), or to protect people from serious harm. If a household member or caregiver is named in a reminder, they receive only the limited notices described to you when you set it up.

6. Transfers outside Nigeria

Some of the providers above store or process data outside Nigeria. Where that happens we rely on the safeguards the NDPA allows (such as contractual protections and the providers' own security and data-protection commitments) and send them only what they need to do their job.

7. How long we keep data

• Product photos you send: deleted automatically after 30 days.
• Your account, check history, care plan, names and caregiver links: kept while your account is active, so the service and your reminders keep working, until you ask us to delete them. Cancelling a reminder (REMINDERS) stops it; DELETE MY DATA erases all of this, including your name and the care-plan details. A caregiver's own link is removed when they send STOP ALERTS.
• Payment records: kept for as long as Nigerian tax and accounting law requires, even if you delete your account (they are not used for anything else).
• Announcement delivery records: kept with the announcement so we can see how many people it reached; erased with your account when you send DELETE MY DATA.
• Security logs: kept for a short period for troubleshooting and abuse prevention.

8. Your rights

Under the NDPA you have the right to: be informed about how we use your data; access a copy of it; have it corrected; have it erased; restrict or object to certain uses; receive your data in a portable format; withdraw consent at any time; and not be subject to a decision made only by automated means that significantly affects you (we make no such decisions: our results are informational).

To delete your data: send DELETE MY DATA to SabiCare and confirm. This removes your account, name, check history, care plan, reminders, your photos, your reports, and any caregiver or family links to you from our systems (except records we are legally required to keep, see section 7). To stop the free week or invite rewards being claimed again by deleting and re-joining, we keep only a one-way code made from your number (it cannot be turned back into your number), with two yes/no facts: whether the free week was used and whether you were already counted as an invited friend. For anything else, such as getting a copy of your data, message us or write to the privacy email above. We will respond within 30 days. If you are not satisfied you may complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

9. Children

SabiCare is for people aged 18 and over. Children under 18 should use it only with a parent or guardian, who is responsible for any consent given. We do not knowingly collect data from children without that consent; if you believe we have, tell us and we will delete it.

10. Security and breaches

Data is encrypted in transit and at rest; the database is not publicly exposed and only the SabiCare service can access it; access is limited to authorised people; and secrets such as access tokens, and full phone numbers, are kept out of our logs. No system is perfectly secure. If a personal-data breach occurs that is likely to put your rights at risk, we will notify the NDPC within 72 hours and tell you without undue delay where the law requires.

11. Automated processing and AI

Reading a photo and translating messages are done with automated (AI) tools. They can make mistakes. A "verified" result means the number matches a NAFDAC register entry, not a guarantee about a particular pack in your hand. See our Terms of Use.

12. Changes to this policy

We will update this page when our practices change and change the "last updated" date above. If a change is significant we will tell you in the app. Continuing to use SabiCare after that means you accept the update, except where the law requires us to ask for your consent again.

13. Contact

Questions or requests about your data: message SabiCare on WhatsApp, or use the privacy email above.

Terms of Use →

Back home

SabiCare by ADOPTAI CONSULT