Privacy policy

Qureo Health Technologies ("Qureo", "we", "our", "us") is a digital health company registered and operating in Liberia. We operate the Qureo platform, including the mobile application, web platform, and related services.

For the purposes of data protection law, Qureo Health Technologies is the data controller responsible for the personal information collected through the Qureo platform.

If you have questions about this policy or how we handle your information, you can contact us at privacy@qureohealth.com.

We collect the following categories of information:

Account and identity information

• Name, email address, or phone number provided when creating an account
• Country and location information to determine service availability
• Account preferences and communication settings

Health information you choose to share

• Symptoms, health concerns, or questions you describe when using Qureo
• Health records, prescriptions, test results, or documents you upload or share
• Information you share during consultations with healthcare professionals
• Monitoring data you choose to record, such as symptoms or health metrics

Service and usage information

• Services you access and interactions with the platform
• Device type, operating system, and app version
• Access channel used (app, web, WhatsApp, SMS, USSD)
• Log data, error reports, and performance information

Payment and financial information

• Payment method details processed through secure third-party payment providers
• Transaction history for services accessed through Qureo Wallet

You are never required to share health information to register for Qureo. Health information is shared only when you choose to use a specific service.

We collect information in the following ways:

• Directly from you when you create an account, use a service, or contact us
• Automatically through your use of the platform, including usage logs and device data
• From healthcare professionals and other Participating Providers when they share information relevant to your care with your consent
• From third-party services you connect to Qureo, such as payment providers or laboratory services

We collect the minimum information necessary to provide the services you request. We do not collect sensitive health information unless it is required for the service you are accessing.

We do not use your health information for advertising, marketing profiling, or any purpose unrelated to providing your care journey.

Qureo shares your information only in the following circumstances:

With healthcare professionals, with your consent

When you access a consultation or other clinical service, we share the health information you have chosen to include with the relevant healthcare professional. You control what information is shared before each consultation.

With Participating Providers, to fulfil a service

When you request a pharmacy, laboratory, or other service, we share the minimum information necessary with the relevant provider to fulfil that service. For example, a prescription with a pharmacy or a test request with a laboratory.

With service providers, to operate the platform

We use trusted third-party service providers (such as cloud infrastructure, payment processors, and analytics services) who process data on our behalf under strict data protection agreements. These providers may not use your data for any other purpose.

For legal compliance

We may disclose information where required by applicable law, court order, or regulatory authority. We will notify you of such disclosures where permitted by law.

Qureo will never:

• Sell your personal data or health information to any third party
• Share your individual health information with your employer, even if your employer is a Qureo partner organisation
• Share your health information with governments, insurers, or public health authorities without your explicit consent, except where required by law
• Use your health information for advertising, marketing profiling, or third-party commercial purposes
• Share your information with campaign partners or health programme organisers at an individual level without your consent

Partner organisations that use Qureo to run health programmes or campaigns may receive aggregate, anonymised data about programme participation and outcomes. They will never receive your individual identifiable information without your explicit consent.

Health information is among the most sensitive categories of personal data. Qureo treats all health information with a higher standard of care and protection.

We collect and process health information only:

• With your explicit consent for each type of processing
• Where necessary to provide a specific service you have requested
• Where required for the provision of healthcare or social care
• Where required by applicable law

You can withdraw consent for health information processing at any time through your account settings. Withdrawal of consent will not affect any processing already carried out before withdrawal.

Particularly sensitive health topics, including sexual and reproductive health, mental health, and HIV status, are handled with additional discretion. Information in these categories is not visible to other users and is shared with healthcare professionals only with your explicit action.

Qureo AI uses the health information and context you share during a session to provide guidance. This includes the symptoms, concerns, and information you describe in the current interaction.

How your data is used with Qureo AI:

• Session data is used to provide guidance within your current care interaction
• With your consent, previous interactions may inform follow-up guidance and continuity of care
• Anonymised and aggregated data may be used to improve the accuracy and safety of Qureo AI
• Your identifiable health information is never used to train AI models without your explicit consent

Qureo AI does not retain a memory of your individual interactions across sessions unless you have explicitly enabled this feature. Each interaction begins with only the context you choose to provide.

We retain your information for as long as necessary to provide the services you have requested and as required by applicable law.

• Account information is retained for the duration of your account and for a reasonable period after closure to enable account recovery
• Health records and consultation history are retained in accordance with applicable health record keeping requirements
• Transaction records are retained as required by financial and tax regulations
• Usage and log data is retained for a limited period for security and performance purposes

When you close your account, we will delete or anonymise your personal data within a reasonable period, subject to any legal retention requirements. You can request early deletion of specific data through your account settings or by contacting us.

Qureo implements appropriate technical and organisational security measures to protect your personal and health information against unauthorised access, loss, destruction, or alteration. These include:

• Encryption of health data in transit and at rest
• Access controls limiting who within Qureo can access health information
• Regular security assessments and monitoring
• Secure development practices and vulnerability management
• Staff training on data protection and confidentiality

No digital platform can guarantee absolute security. If you believe your Qureo account has been compromised, contact us immediately at security@qureohealth.com.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

You have the following rights over your personal information. You can exercise most of these through your account settings or by contacting us.

To exercise any of these rights, contact us at privacy@qureohealth.com. We will respond within 30 days. We may need to verify your identity before processing your request.

The Qureo web platform uses cookies and similar tracking technologies to operate the service and improve your experience.

• Essential cookies, required for the platform to function. Cannot be disabled.
• Performance cookies, help us understand how the platform is used so we can improve it. You can opt out.
• Preference cookies, remember your settings and choices. You can opt out.

We do not use advertising cookies or share cookie data with advertising networks. You can manage your cookie preferences through your browser settings or through the cookie settings in the Qureo platform.

The Qureo mobile app does not use cookies but may use similar device identifiers for essential service operation and anonymised analytics.

Qureo is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

Users aged 13 to 17 may use Qureo with the consent and supervision of a parent or legal guardian. The parent or guardian accepts responsibility for the minor's use of the platform and agrees to these terms and our Privacy Policy on the minor's behalf.

If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child in error, please contact us at privacy@qureohealth.com.

Qureo is based in Liberia and primarily processes data within Liberia. Some of our service providers operate in other countries. Where we transfer data internationally, we take steps to ensure appropriate safeguards are in place in accordance with applicable data protection law.

We select service providers that maintain appropriate security standards and enter into data processing agreements that require them to protect your information to a standard at least equivalent to that described in this policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. We will notify you of material changes by email or through the platform before the changes take effect.

The date at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically. Your continued use of Qureo after an updated policy takes effect constitutes your acceptance of the changes.

Version history

If you have questions about this policy, wish to exercise your data rights, or have a concern about how we handle your information, please contact our privacy team.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.