CuraTools — clinical calculators and family medicine tools

Privacy Policy

Effective date: July 18, 2026

1. Introduction

CuraTools ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clinical decision-support platform. We comply with the Nigeria Data Protection Regulation (NDPR) and other applicable data protection laws.

2. Information We Collect

Account Information

  • Name (first and last)
  • Email address
  • Password (stored in encrypted form)

Optional Profile Information

  • Sex / gender
  • Date of birth
  • Phone number (WhatsApp)
  • Occupation and medical specialty
  • Purpose of use

Usage Data

  • Tools accessed and calculations performed
  • Saved summaries and favourites
  • Exam mode performance (anonymized)

Payment Information

Payment transactions are processed by third-party providers (Paystack and Flutterwave). We do not store your credit card numbers or banking details on our servers. We only retain transaction references and payment status for billing records.

3. How We Use Your Information

  • Service Provision: To provide and maintain the Platform, including tool calculations, saved summaries, and exam features.
  • Account Management: To create and manage your account, authenticate users, and provide customer support.
  • Payment Processing: To process subscription payments and manage your subscription tier.
  • Analytics: To analyze anonymized usage patterns and improve the Platform. All analytics data is anonymized using one-way hashing and does not contain free-text or personally identifiable information.
  • Communication: To send transactional emails (verification, password resets, welcome messages) and, with your consent, product updates.

4. Patient Data

CuraTools is NOT a medical record system. We strongly advise against entering real patient identifying information into the Platform. If you choose to enter patient data for clinical decision support:

  • You are solely responsible for ensuring compliance with all applicable patient data protection laws and your institution's policies.
  • You must have appropriate authorization and data processing agreements in place.
  • Patient data entered into tool calculators is processed in real-time and is not stored on our servers unless you explicitly save a summary.
  • Saved summaries are encrypted at rest and associated only with your user account.

5. Data Storage and Security

  • Data is stored in a PostgreSQL database with access controls.
  • All data in transit is encrypted via HTTPS/TLS.
  • Passwords are hashed using industry-standard algorithms.
  • Session tokens are securely managed by our authentication system.
  • We implement role-based access controls to limit internal data access.

6. Analytics

We use an anonymized analytics system that tracks tool usage patterns to improve the Platform. This system:

  • Uses one-way SHA-256 hashing for user identifiers (no reversible PII).
  • Stores only predefined event names (e.g., tool_view, tool_compute).
  • Never stores free-text, patient data, or personal names in analytics.
  • Uses deduplication to ensure accurate counts.

7. Third-Party Services

We integrate with the following third-party services:

  • Paystack & Flutterwave: Payment processing. Subject to their respective privacy policies.
  • Google OAuth:Optional sign-in authentication. Subject to Google 's privacy policy.
  • Resend: Transactional email delivery (verification, password resets).
  • WhatsApp Cloud API:Optional bot communication. Subject to Meta 's privacy policy.

8. Your Rights

Under applicable data protection laws, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data and account.
  • Portability: Request a machine-readable export of your data.
  • Objection: Object to processing of your personal data for specific purposes.

To exercise these rights, contact us at [email protected].

9. Cookies

We use minimal cookies for:

  • Session Management: To keep you signed in across page loads.
  • Theme Preference: To remember your light/dark mode choice.

We do not use third-party tracking cookies or advertising cookies.

10. Children's Privacy

CuraTools is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the Platform. We encourage you to review this page periodically.

12. Contact

For privacy-related inquiries, please contact our Data Protection Officer at [email protected].