This Privacy Policy complies with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023. It governs how MentorNaijaHealthInsuranceIntel AI, a product of OmniAlera Technologies Holdings Inc., collects, uses, and protects your personal data.
MentorNaijaHealthInsuranceIntel AI is operated by OmniAlera Technologies Holdings Inc.. We are Nigeria's first independent, AI-powered health insurance comparison and enrollment platform. Data Controller: OmniAlera Technologies Holdings Inc. Contact: privacy@omnialera.com Website: mentornaijahealth.com
We collect the following categories of personal data: • Identity data: First name, last name, date of birth • Contact data: Email address, phone number, residential address, state of residence • Health data: Pre-existing medical conditions, family size, health priorities — provided voluntarily during the plan finder quiz. This is sensitive personal data under the NDPR. • Financial data: Payment reference numbers and plan premium amounts. We do not store card numbers — all card data is processed by Paystack. • Usage data: Pages visited, quiz responses, plans compared, time on platform, device type, browser type, IP address • Insurance data: Enrolled plan details, policy references, enrollment dates, claims you log through our claims tracker • Communication data: Reviews you submit, support messages, WhatsApp messages if you use our bot We do not collect: passport numbers, bank account numbers, BVN, NIN, or any biometric data.
• Contractual necessity: Processing your name, contact details, and payment reference to fulfil your enrollment and deliver your e-card • Legitimate interest: Using anonymised quiz data and usage analytics to improve plan recommendations and platform performance • Consent: Processing your health data (pre-existing conditions) for plan matching — you may withdraw consent at any time • Legal obligation: Maintaining enrollment records for regulatory and tax compliance
• To provide AI-powered plan recommendations tailored to your health needs and budget • To process your enrollment and deliver your insurance e-card • To send enrollment confirmations, policy documents, and renewal reminders • To enable claims tracking and dependent management • To improve the accuracy of our plan comparison algorithm • To generate anonymised market intelligence (your data is never identifiable in reports) • To comply with NHIA, NAICOM, and NDPR regulatory requirements We do NOT sell your personal data to any third party. We do NOT use your data for advertising on other platforms.
We share your data only with the following recipients, and only to the extent necessary: • Anthropic (USA): Your anonymised quiz responses are processed by Claude AI to generate plan recommendations. Privacy policy at anthropic.com/privacy. • Paystack (Nigeria): Your name, email, and payment amount are shared with Paystack to process premium payments. Paystack is PCI-DSS compliant. Privacy at paystack.com/privacy. • Supabase (USA): Your account data and enrollment records are stored in our Supabase PostgreSQL database, hosted on AWS infrastructure with encryption at rest. • HMOs (Nigeria): When you enroll in a plan, your name, contact details, date of birth, and enrollment details are shared with the chosen HMO to activate your coverage. • SendGrid (USA): Your email address is used to send transactional emails via SendGrid. • Twilio (USA): If you use our WhatsApp bot, your phone number and messages are processed by Twilio's WhatsApp Business API. All third-party processors are bound by Data Processing Agreements that require NDPR-equivalent protection.
• Account data: Retained for the duration your account is active, plus 2 years after closure • Enrollment records: Retained for 7 years (Nigerian insurance regulatory requirement) • Quiz session data (anonymised): Retained for 24 months to improve recommendations • Payment records: Retained for 7 years for tax and financial compliance • Support communications: Retained for 2 years • Claims data: Retained for 5 years in anonymised, aggregated form for the Claims Intelligence Score When the retention period expires, your data is securely deleted or irreversibly anonymised.
• Right of access: Request a copy of all personal data we hold about you • Right to rectification: Request correction of inaccurate personal data • Right to erasure: Request deletion of your personal data (subject to legal retention requirements) • Right to data portability: Receive your personal data in a structured, machine-readable format • Right to object: Object to processing based on legitimate interest • Right to withdraw consent: Withdraw consent for health data processing at any time To exercise any of these rights, use our Data Deletion form at /data-deletion or email privacy@omnialera.com. We will respond within 30 days.
• AES-256 encryption for all personal health information stored in our database • TLS 1.3 encryption for all data in transit • Supabase Row Level Security (RLS) ensuring users can only access their own data • Regular security audits and access controls • Anonymisation of health data used for analytics and market reports In the event of a data breach likely to result in risk to your rights, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours and notify affected users promptly.
Our platform is not directed at persons under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, contact privacy@omnialera.com immediately.
Some of our service providers (Anthropic, Supabase, SendGrid, Twilio) are based in the United States. Data transfers to these providers are governed by Standard Contractual Clauses and Data Processing Agreements that ensure NDPR-equivalent protection.
Data Protection Officer: Dr. Omokayode Abiola Aderolu Email: privacy@omnialera.com Postal address: OmniAlera Technologies Holdings Inc., [Business Address] If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.