Privacy Policy

Medova (“Medova”, “we”, “us”, or “our”), operated by The Hive Hub Limited, provides a digital healthcare platform and mobile application that lets you consult verified doctors, book laboratory tests, order medications, and manage your health records in one place.

This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to our website, our Android and iOS mobile apps, and related services (together, the “Services”). By using the Services, you agree to the practices described here.

We collect the following categories of information:

• Account & identity information: name, email address, phone number, gender, date of birth, and password.
• Health information: symptoms, medical history, consultation notes, prescriptions, lab test results, allergies, vitals, and any records you or your providers upload. This is sensitive personal data and we treat it with the highest level of protection.
• Booking & transaction information: appointments, lab bookings, medication orders, and payment records. Card and bank details are processed by our payment partners and are not stored on our servers.
• Device & usage information: device type, operating system, app version, and log data used to keep the Services secure and reliable.
• Communications: messages you send to support and notifications you choose to receive.

We use your information to:

• Create and manage your account and verify your identity.
• Facilitate consultations, lab bookings, medication orders, and access to your health records.
• Connect you with the verified doctors, hospitals, and laboratories involved in your care.
• Process payments and send booking and payment confirmations.
• Send appointment reminders, results-ready alerts, and service notifications you have enabled.
• Maintain the safety, security, and integrity of the Services and comply with legal obligations.

We do not sell your personal or health information. We share it only as needed to deliver the Services:

• Verified healthcare providers: the doctors, hospitals, and laboratories directly involved in your care, so they can treat you and share results.
• Service providers: vetted partners who help us operate the platform, such as payment processors, cloud hosting, and messaging/notification providers, under confidentiality obligations.
• Legal & safety: where required by law, court order, or to protect the rights, safety, and security of our users and the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

With your consent, the Medova app may request the following device permissions. You can manage or revoke them anytime in your device settings:

• Camera & photos/storage: to upload documents, medical records, or a profile photo, and for video consultations.
• Microphone: for audio and video consultations.
• Notifications: to deliver appointment reminders, results-ready alerts, and order updates.

Your data is encrypted in transit and at rest, and access is restricted to authorized personnel and the verified providers involved in your care. We apply administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, but we work continuously to protect your data and promptly address any risks.

We retain your information for as long as your account is active or as needed to provide the Services, and thereafter as required to comply with legal, regulatory, tax, accounting, or medical record-keeping obligations. When information is no longer required, we securely delete or anonymize it.

Subject to applicable law, you may:

• Access, update, or correct your personal information.
• Request a copy or deletion of your data.
• Withdraw consent or object to certain processing.
• Manage notification and marketing preferences.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.

The Services are not directed to children under 18, and we do not knowingly collect their information without parental or guardian consent. A parent or guardian may manage a minor’s care through their own account. If you believe a child has provided us information without consent, please contact us and we will take appropriate steps to remove it.

We use trusted third parties to operate the Services, including payment processors and cloud and messaging providers. Their handling of your information is governed by their own privacy policies. Our Services may link to third-party sites or apps that we do not control; we encourage you to review their policies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app or by email. Your continued use of the Services after an update means you accept the revised Policy.