Privacy notice

Last updated: 18 September 2026

Who is responsible

Aurum Digital Consulting Ltd operates MidlifeCare Africa and is responsible for deciding how information in this service is handled. Privacy questions can be sent to hello@aurumdigitalconsulting.com.

Information we handle

• Your email address when you choose to protect your journal.
• The symptom ratings, notes, menstrual pattern, life-impact ratings and appointment priorities you choose to record.
• Medicines, supplements, period dates and bleeding events you choose to add to your care records.
• Health-history items and post-appointment notes you choose to record, including allergies, conditions, procedures, family history, previous treatments, care preferences, investigations and next steps.
• Your selected plan, subscription status and payment-provider references when you choose Plus. We do not receive or store your full card or bank details.
• A random browser-session identifier before you connect an account.
• Limited technical and security information needed to deliver, protect and troubleshoot the service.

Why we use it

We use this information to save and show your journal, generate the summary you request, connect records to your account, prevent misuse, keep the service secure and resolve technical problems. Health-related entries are not used for advertising.

We use privacy-focused product analytics to understand page visits, broad product actions and aggregated website performance. This includes whether actions such as saving a check-in, opening a summary, creating a calendar reminder or starting checkout are used, together with page-speed and stability measurements. Analytics events do not include symptom ratings, journal notes, medicine names, health-history entries, appointment notes, period dates, email addresses, payment references or other free-text information. Query parameters and page fragments are removed before a page visit is sent.

Operational error logs are designed to record the failed area, error category and status only. They do not intentionally include symptom ratings, journal notes, medicine names, health-history entries, appointment notes, period dates or email addresses.

Workplace and sponsored programmes

If an employer, university, HMO or occupational-health provider sponsors access, that organisation does not receive your name, email address, symptoms, journal entries, medicines, period information, clinician summary or individual usage history from MidlifeCare. Any pilot reporting is limited to non-identifying programme activation and activity counts or rates for sufficiently large groups. Groups below 20 participants are suppressed. MidlifeCare does not report employee-level health outcomes or symptom prevalence to sponsors.

Where it is processed

We use service providers for secure database hosting, website delivery, transactional email and payment processing. Paystack handles payment details under its own security and privacy controls. Our providers process information for us under their service terms and security controls. Information may be processed outside Nigeria, with safeguards appropriate to the service and applicable law.

How long we keep it

Protected journal entries remain available until you delete individual entries or delete your account. Unprotected browser entries remain associated with that browser session. Limited copies may remain temporarily in encrypted infrastructure backups before they expire through provider retention cycles.

Your choices and rights

• Review and correct an entry using its edit control.
• Download a copy of protected account data.
• Delete entries individually or permanently delete your account and protected journal.
• Ask about access, correction, restriction, objection or another data-protection right that applies to you.
• Contact the Nigeria Data Protection Commission if you believe a concern has not been resolved.

Reminders and installation

Calendar reminders are created as a file on your device. MidlifeCare does not receive access to your calendar. The reminder contains no symptoms, medicines or private notes. Installing the web app does not change how your account records are protected.

Security and important limits

We use access controls, encrypted connections, request controls and row-level database policies. No online service can promise absolute security. Keep access to your email account and devices protected, and avoid recording details you do not need in your care summary.

Contact and regulator

Contact us at hello@aurumdigitalconsulting.com. You can also find official data-protection information at the Nigeria Data Protection Commission.