1 Introduction & Scope
Welcome to MedxGo ("we", "us", "our", or "the Platform"), operated by MedxGo Technologies Limited. MedxGo is an on-demand food delivery and verified pharmacy essentials ecosystem designed to provide rapid, reliable, and secure fulfillment for customers, restaurant vendors, licensed pharmacy partners, and dispatch riders across Nigeria (including Lagos, Osun, Ogbomoso, and expanding states).
This Privacy Policy applies to our mobile applications (MedxGo Customer App, MedxGo Vendor App, and MedxGo Rider App available on the Apple App Store and Google Play Store), websites, APIs, and associated communications. By downloading, registering, or utilizing MedxGo services, you acknowledge and agree to the collection and handling of your data as outlined in this policy.
2 Information We Collect
To deliver food items, facilitate pharmacy orders, verify riders, and maintain platform security, we collect data across several distinct categories:
Full name, phone number, email address, password hash, saved delivery addresses, profile photo, and delivery contact notes.
Payment status, transaction reference IDs, and payout bank details (for vendors and riders). Credit card numbers are tokenized directly by certified gateways (Paystack/Flutterwave).
For vendors and riders: Corporate Affairs Commission (CAC) certificates, government ID, driver’s license, vehicle registration, and guarantor details.
IP address, device model, operating system version, push notification tokens, crash reports, and app performance diagnostics.
3 Health, Pharmacy & Prescription Data
When utilizing the MedxGo Pharmacy section to order medications or upload medical prescriptions, we process sensitive health-related data with elevated security safeguards:
- Prescription Uploads: Scans or photographs of medical prescriptions provided by registered physicians.
- Medication Inquiries: OTC medicine orders, dosage requirements, and fulfillment notes.
- Strict Purpose Limitation: Prescription data is only shared with the licensed dispensing pharmacy partner tasked with fulfilling your specific order.
- No Behavioral Profiling: We strictly prohibit the use of your health or medical prescription data for third-party advertising, commercial profiling, or marketing brokerages.
4 Location & GPS Tracking
MedxGo relies on precise and approximate location services to provide core functionality:
- Customer Location: Used to display nearby restaurants and pharmacies, calculate accurate delivery fees, and guide riders directly to your doorstep.
- Rider Location (Foreground & Background): When riders toggle online or accept a delivery task, continuous GPS coordinates are captured to calculate real-time estimated time of arrival (ETA) and route optimization.
- Permission Control: You can manage or revoke location permissions at any time via your device operating system settings (iOS Settings or Android App Permissions). However, disabling location may prevent order placement or live tracking.
5 How We Use Your Data
We process your personal information strictly for legitimate operational purposes:
- Order Fulfillment: Connecting your order with vendors, verifying inventory, and dispatching riders.
- Communication: Sending SMS verification codes (OTP), delivery status notifications, and customer support messages.
- Safety & Verification: Securing handoffs via 4-digit order confirmation codes.
- Financial Processing: Facilitating secure payments, rider disbursements, and vendor settlements.
- Platform Security: Detecting, preventing, and combating fraudulent transactions, account takeovers, and abusive behaviors.
6 Third-Party Sharing & Disclosures
We only share necessary subsets of your data with trusted entities under strict confidentiality agreements:
| Recipient Entity | Data Disclosed | Purpose of Sharing |
|---|---|---|
| Restaurant & Pharmacy Vendors | Order items, recipient first name, delivery notes | Order preparation, packaging, and pharmacist verification. |
| Dispatch Riders | Delivery location, customer phone number (masked or direct) | Physical transit and handoff of the delivery package. |
| Payment Processors (Paystack/Flutterwave) | Customer email, order amount, transaction reference | Secure billing, chargeback resolution, and PCI-DSS compliance. |
| Regulatory & Legal Authorities | Requested records as mandated by Nigerian law | Compliance with valid court orders, subpoenas, or statutory obligations. |
7 Data Security & Storage
We implement comprehensive technical and organizational safeguards to protect your personal data:
- Encryption: All data transmitted between your device and MedxGo servers is encrypted using Transport Layer Security (TLS 1.3). Sensitive credentials and tokens are encrypted at rest using AES-256 standards.
- Access Control: Strict role-based access control (RBAC) ensures only authorized personnel have access to administrative databases.
- Data Center Security: Cloud databases are hosted on ISO 27001 and SOC 2 certified server infrastructure with automated backups and firewall monitoring.
8 Data Retention & Account Deletion
We retain personal information only for as long as necessary to fulfill service operations, provide dispute resolution, and comply with Nigerian tax, audit, and legal recordkeeping regulations.
You have the right to request deletion of your account and personal data at any time. We provide an easy-to-use in-app deletion button as well as a dedicated web-based deletion portal:
Visit Account Deletion Portal →
9 Your Privacy Rights
Under the Nigeria Data Protection Act (NDPA) and global privacy standards, you enjoy the following rights:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal details.
- Right to Erasure ("Right to be Forgotten"): Request full deletion of your account and profile records.
- Right to Object & Restrict: Opt-out of promotional marketing messages at any time.
- Right to Portability: Request transmission of your profile data in a machine-readable format.
To exercise any of these rights, contact our Data Protection Officer at privacy@medxgo.ng.
10 Children's Privacy
MedxGo does not knowingly solicit or collect personal data from children under the age of 13 (or under 18 for prescription medications without parental supervision). If you believe a minor has provided us with personal data without guardian consent, please contact us immediately, and we will delete the account and associated records promptly.
11 Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect app enhancements, regulatory guidelines, or legal modifications. When major revisions occur, we will notify you through in-app alerts, email notifications, or by revising the "Last Updated" date at the top of this document.
12 Contact Us & Data Protection Officer
If you have any questions, inquiries, or complaints regarding this Privacy Policy or our data practices, please reach out to us: