Privacy Policy

Oshun Health is a service operated by Oduduwa Muziq (Pty) Ltd, a private company incorporated in the Republic of South Africa under registration number 2023/250283/07, with its registered office at 41 Aston Road, Lonehill, Sandton, Gauteng, 2062, South Africa.

In this policy, “Oshun Health”, “we”, “us”, and “our” refer to Oduduwa Muziq (Pty) Ltd trading as Oshun Health. We are the responsible party (data controller) for your personal information.

Privacy enquiries: hello@oshun.africa.

We collect personal information in three ways:

• From patients (signup form)— name, email, phone, country, city/province, the type of care you need (sick note, general consult, specialist), and a free-text description of what's going on. This description may include health-related information, which POPIA treats as “special personal information.” We process this only with your express consent (the checkbox at signup).
• From doctors (application form) — name, email, phone, country and city, medical registration number (e.g. HPCSA, MDCN), years of practice, specialties, optional LinkedIn or website, and any additional notes you provide.
• Automatically — basic technical information such as IP address and browser type, and Vercel Analytics aggregate page-view data.

We use your personal information to:

• Match patients to a vetted, registered doctor.
• Verify a doctor's medical registration before listing them.
• Contact you about your match by email.
• Operate, secure, and improve the Oshun Health platform.
• Comply with legal and regulatory obligations.

Providing your information is voluntary. Without it we cannot match you to a doctor or evaluate your application — that is the only consequence of declining.

We do not sell your personal information. We do not use the content of your description to train AI models.

We share information only with the parties below, and only to the extent needed for the purpose stated:

• The matched doctor— once we have matched you, we share your name, contact details and the description of what you need with the doctor we've picked. The doctor's own practice handles your information from that point under their professional duties of confidentiality.
• Vercel (United States) — hosts our website and the database where signups are stored.
• Resend (United States) — sends our confirmation and follow-up emails.

Each of these processors is bound by contract to handle your information only on our instructions and to apply appropriate security safeguards.

Vercel and Resend are based in the United States, so your personal information is transferred outside South Africa. Where we transfer personal information across borders we rely on the contractual safeguards offered by those processors and on the lawful transfer mechanisms recognised under POPIA section 72 (and equivalent laws in our other launch markets).

We keep signup details and match history for as long as you remain an Oshun Health user, plus a reasonable retention period afterwards (typically up to 24 months) for service continuity, legal compliance, and dispute resolution. You can request earlier deletion at any time — see Section 8.

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at our database provider, access controls limiting who on our team can see signup data, and regular review of our processors. No system is perfectly secure; if you ever encounter a security concern, please tell us at hello@oshun.africa.

Under POPIA (and equivalent laws in your country) you may:

• Request access to the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your information.
• Object to the processing of your information, or restrict it.
• Withdraw your consent at any time — note this does not affect processing that has already taken place.
• Receive a portable copy of your information.

To exercise any of these rights, email hello@oshun.africa. We will respond within the timeframes required by your local law.

You also have the right to lodge a complaint with the South African Information Regulator (inforegulator.org.za) or the equivalent data-protection authority in your country.

Oshun Health is not directed at children under 18. Where a parent or legal guardian uses Oshun Health on behalf of a child, the parent or guardian must provide consent and remains responsible for the information shared.

We do not use third-party advertising cookies. Vercel may set strictly necessary technical cookies to deliver the site, and Vercel Analytics collects aggregate, non-identifying page-view data.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the effective date at the top of this page and, where appropriate, by emailing registered users. Continued use of the service after a change means you accept the updated policy.

Questions, requests, or complaints about this policy can be sent to hello@oshun.africa.