FindMyCare

Quorum AI Limited · Legal

Privacy Policy

How Quorum AI Limited collects, uses, discloses, and safeguards your personal information across the FindMyCare website, mobile application, and "Report and Earn" verification program — in compliance with the NDPA 2023, GAID 2025, and other applicable Nigerian data protection laws.

1. Introduction

Welcome to FindMyCare, a product of Quorum AI Limited ("the Company," "we," "us," or "our"). We are committed to protecting your privacy and ensuring that your personal data is handled in strict compliance with the NDPA 2023, GAID 2025, and other applicable data protection laws and regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, or participate in our "Report and Earn" crowdsourcing verification program.

This policy was last updated on 28 September 2026.

2. Scope

This Policy applies to all personal data collected and processed by FindMyCare in connection with our lending, financial, and customer services. It applies to clients, prospective clients, employees, contractors, vendors, and any individual whose data we process.

3. Personal data we collect

We collect personal data to provide and improve our services. We may collect and process the following categories of personal data:

  • Identification information — Full name, gender, date of birth, passport photograph, NIN, BVN, and other government-issued IDs.
  • Contact information — Phone number, email address, residential and mailing address.
  • Location data— GPS coordinates and location information, specifically when using the "Report and Earn" feature or searching for nearby facilities.
  • Digital information — IP address, browser type, operating system, and device identifiers.
  • Usage data — Information about how you use our platform, including search queries for healthcare facilities.
  • User-generated content — Photos of healthcare facilities and verification reports submitted through the platform.

Note: While FindMyCare is a health directory, we do not collect your personal medical records or diagnoses during Phase 1 operations. However, your search queries for specific medical specialties may be considered sensitive health data under the NDPA 2023.

4. Legal basis for processing

We process personal data on one or more of the following lawful grounds:

  • Consent of the data subject.
  • Compliance with legal or regulatory obligations (e.g., CBN, NDPC, FCCPC, AML/CFT laws).
  • Legitimate interests pursued by the Company.
  • Vital interest of the data subject.

5. Purpose of data processing

We process personal data for the following purposes:

  • Service delivery— To register your account, provide access to the directory, and process "Report and Earn" rewards (Lawful basis: Performance of a Contract).
  • Platform improvement — To analyze usage trends and improve our search algorithms (Lawful basis: Legitimate Interest).
  • Verification integrity — To verify the accuracy of crowdsourced facility reports and prevent fraud (Lawful basis: Legitimate Interest).
  • Communication — To send you service updates, security alerts, and support messages (Lawful basis: Consent / Performance of a Contract).

6. Data sharing and third-party disclosure

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

  • Service providers — With trusted third-party vendors (e.g., cloud hosting providers, payment processors for rewards) who operate under strict data processing agreements.
  • Legal obligations — When required by regulatory bodies such as NDPC, CBN, SEC, FCCPC, and law enforcement agencies where required.
  • Business transfers — In the event of a merger, acquisition, or sale of Quorum AI Limited assets.

7. Cross-border / international data transfers

FindMyCare utilizes cloud infrastructure that may involve transferring your data outside Nigeria. Where personal data needs to be transferred outside Nigeria, we will ensure that adequate safeguards (such as Standard Contractual Clauses) are in place in line with the NDP Act 2023 and GAID 2025.

8. Data security and retention

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, loss, misuse, or disclosure.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law.

  • Account data is retained as long as your account is active.
  • Verification reports and photos are retained indefinitely to maintain the integrity of the health directory, though they may be anonymized.
  • If you request account deletion, your personal data will be securely erased within 30 days, subject to legal retention requirements.

9. Your data protection rights

As provided under the NDPA 2023, you have the right to:

  • Be informed about the processing of your data.
  • Access the personal data we hold about you.
  • Request rectification of inaccurate or incomplete data.
  • Request erasure of your personal data ("right to be forgotten").
  • Restrict processing in certain circumstances.
  • Object to the processing of your personal data (including for direct marketing).
  • Request data portability.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Requests can be made by contacting us via the details in Section 12.

10. Cookies & digital tracking

Our website and digital platforms may use cookies, web beacons, and related technologies to enhance user experience, track usage patterns, and improve our services. Users can manage cookie preferences through their browser settings.

11. Breach notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, FindMyCare, through Quorum AI Limited, will notify the NDPC within 72 hours and affected individuals without undue delay, in accordance with the NDP Act 2023.

12. Contact information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:

Data Protection Officer
Quorum AI Limited
17, Tokunbo Alli Street, off Toyin Street, Ikeja, Lagos, Nigeria
Email: legal@quorumai.africa
Phone: +234 805 241 4517

13. Policy review & updates

This Privacy Policy will be reviewed periodically to ensure ongoing compliance with applicable laws and regulations. Updates will be communicated through our website, mobile applications, or direct communication channels.