Privacy Policy

Last updated: 5 February 2025 · admin@terasync.ng

1. Introduction

This Privacy Policy ("Policy") explains how TeraSync ("we", "our", or "us") collects, uses, stores, shares, and protects your personal data when you access or use the TeraSync mobile application, website, APIs, and related services (collectively, the "Platform").

TeraSync is a digital healthcare logistics and management platform that enables users to manage prescriptions, order medications, connect with pharmacies, and arrange delivery services. The Platform also incorporates AI-assisted features for support, reminders, and operational assistance.

By creating an account or using the Platform, you expressly consent to the practices described in this Policy. If you do not agree, do not use TeraSync.

We comply with applicable data-protection laws, including the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act (NDPA), and, where applicable, internationally recognised frameworks such as the EU General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for processing your personal data is:

Embrion Technologies Limited (RC: 8569332)
A private company limited by shares incorporated under the laws of the Federal Republic of Nigeria, operating the TeraSync platform.

Email: admin@terasync.ng
Website: https://terasync.ng

3. Data We Collect

3.1 Account and Registration Data

  • Email address
  • Password (stored only in hashed and encrypted form)
  • First name and last name
  • Phone number
  • User role (e.g. patient, pharmacist, delivery partner)

3.2 Profile and Identity Data

  • Date of birth
  • Gender
  • Address, city, state, country, postal/zip code
  • Profile picture (optional)
  • Marital status, state of origin
  • MedSync ID / TeraSync identifier (where assigned)

3.3 Health-Related Data (Sensitive Personal Data)

Where voluntarily provided by you, we may process:

  • Blood group and genotype
  • Allergies
  • Medical conditions or health notes
  • Medication lists and adherence data
  • Prescription images and extracted text (via OCR)
  • Information shared with pharmacies or via in-app chat
  • Health-related information entered into AI-assisted features

You are not required to provide health data. Submission is entirely voluntary and at your discretion.

3.4 Location Data

We may collect approximate or precise location data when you:

  • Enable "Find Pharmacy" or nearby pharmacy search
  • Use "current location" for delivery
  • Save delivery or pickup addresses

Location data is used only for pharmacy discovery, delivery estimation, and fulfilment. You may disable location permissions; however, some features may be limited.

3.5 Chat and Messaging Data

  • Messages sent via pharmacy chat
  • Messages sent via AI-assisted chat
  • Timestamps and conversation metadata required for service operation and support

3.6 Order and Transaction Data

  • Medication orders, quantities, pharmacy details, and order status
  • Payment metadata (transaction reference, amount, status). Note: We do not store full card details. Payments are processed by third-party payment processors such as Paystack.
  • Delivery and dispatch updates from logistics partners

3.7 Device and Technical Data

  • Device tokens for push notifications (e.g. Firebase Cloud Messaging)
  • IP address, device type, operating system version
  • Security logs, error logs, and diagnostics
  • Timezone information for scheduling and notifications

3.8 Emergency and Insurance Data (Optional)

  • Emergency contact name, phone number, and relationship
  • Insurance provider and policy details (where provided)

4. Lawful Basis for Processing

We process personal data based on one or more of the following lawful bases:

  • Consent (particularly for sensitive health data and optional features)
  • Performance of a contract (providing Platform services)
  • Legitimate interest (security, fraud prevention, service improvement)
  • Legal obligation (regulatory and compliance requirements)

4A. AI-Assisted Features and Automated Processing

TeraSync uses AI-assisted systems, including conversational tools and automated processing, to support features such as reminders, prescription handling, chat support, and operational workflows.

You acknowledge and agree that:

  • AI systems operate on probabilistic and non-deterministic models
  • Outputs may be incomplete, inaccurate, or unsuitable for reliance
  • AI features are supportive and informational only

AI outputs do not constitute medical, pharmaceutical, legal, or professional advice and must not be relied upon without independent verification.

5. How We Use Your Data

We use your data to:

  • Create and manage your account
  • Provide prescription upload, OCR, medication ordering, and delivery services
  • Show nearby pharmacies and delivery estimates
  • Process payments, refunds, and order tracking
  • Send notifications (push, email, SMS) for verification, reminders, and updates
  • Operate pharmacy chat and AI-assisted features
  • Detect fraud, secure the Platform, and enforce our terms
  • Improve services using aggregated or anonymised analytics

We do not sell your personal data for third-party marketing.

6. Medical and Clinical Disclaimer

TeraSync:

  • Is not a medical device
  • Is not a clinical decision support system
  • Is not an emergency service

The Platform does not provide diagnosis, treatment, or medical advice. All health-related content, AI outputs, reminders, and pharmacy interactions are provided for informational and logistical purposes only.

You are solely responsible for consulting qualified healthcare professionals for medical decisions.

7. Third-Party Services and Sharing

We share data only as necessary to operate the Platform. Depending on context, third parties may act as data processors or independent controllers under their own privacy policies.

Key providers include:

  • Firebase (Google) – authentication, push notifications
  • Paystack – payment processing
  • Kwik / Gokada / dispatch partners – delivery fulfilment
  • Cloudinary / AWS S3 – storage of uploaded files and images
  • SendGrid / ZeptoMail – transactional emails
  • Termii (or similar) – SMS notifications
  • OpenAI – AI-assisted chat and processing
  • Google Cloud Vision (or similar) – OCR for prescription images
  • Seamfix (or similar) – identity verification (where applicable)
  • Hosting providers (e.g. Railway, Render) – infrastructure and databases

We may also disclose data where required by law, court order, or to protect rights, safety, or property.

8. International Data Transfers

Your data may be processed or stored outside Nigeria where our service providers operate. Where this occurs, we apply appropriate safeguards consistent with NDPR, NDPA, and applicable data-protection principles.

By using TeraSync, you consent to such international transfers.

9. Data Retention and Deletion

We retain personal data only for as long as:

  • Your account remains active
  • Necessary to provide services
  • Required for legal, regulatory, or dispute-resolution purposes

Following account deletion or a valid request, we will delete or anonymise personal data typically within 30–90 days, unless retention is legally required.

Deletion requests may be made via the app or by contacting admin@terasync.ng.

10. Your Rights

Subject to applicable law, you may:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (subject to legal exceptions)
  • Restrict or object to certain processing
  • Request data portability (where feasible)
  • Withdraw consent where applicable
  • Lodge a complaint with a supervisory authority

Requests should be sent to admin@terasync.ng.

11. Security

We implement reasonable technical and organisational safeguards, including encryption, access controls, and secure hosting. No system is completely secure; you are responsible for safeguarding your login credentials.

12. Children and Age Restriction (18+)

TeraSync is intended strictly for users aged 18 years and above.

We do not permit independent accounts for minors. Any access by a minor must occur only through a parent or legal guardian account, where expressly supported.

By using TeraSync, you represent that you are at least 18 years old. We disclaim liability arising from misrepresentation of age.

13. Limitation of Liability

To the fullest extent permitted by law, Embrion Technologies Limited and TeraSync shall not be liable for:

  • Medical outcomes or health decisions
  • AI errors or omissions
  • Loss of data, profits, or business
  • Indirect, incidental, consequential, or punitive damages
  • Failures of third-party services

14. User Indemnity

You agree to indemnify and hold harmless Embrion Technologies Limited, TeraSync, its directors, officers, employees, and partners from any claims, losses, or liabilities arising from:

  • Your misuse of the Platform
  • Inaccurate or unlawful data submission
  • Reliance on AI outputs
  • Violation of law or third-party rights

15. Changes to This Policy

We may update this Policy from time to time. Updates will be posted at https://terasync.ng/privacy.

Continued use of the Platform constitutes acceptance of the updated Policy.

16. Governing Law

This Policy is governed by and construed in accordance with the laws of the Federal Republic of Nigeria.

Terms of Service