Privacy Policy

Depending on how you use Menda, we may collect:

• Account details — name, phone number, email, and role (donor, patient, or hospital staff).
• Campaign details — patient first name, age, medical condition, the treating hospital, the verified bill, and any photo or story a patient chooses to add.
• Payment details — donation amount and payment reference. Card and bank details are processed by our payment provider (Flutterwave) and are never stored by Menda.
• Hospital details — for registered hospitals: contact, onboarding documents, and settlement bank account.
• Usage data — basic technical information such as device type and app activity, used to keep the service secure and reliable.

• To create and verify campaigns with the treating hospital.
• To process donations and disburse funds to hospitals.
• To send receipts, confirmations, and important notices.
• To prevent fraud and keep the platform safe.
• To comply with legal and regulatory obligations.

We do not sell your personal information, ever.

Donations are collected through Flutterwave, a CBN-licensed payment processor, and are paid directly to the treating hospital's verified bank account, never to a patient or family member. Health information shown on a campaign is limited to what is needed to explain the case and is confirmed with the hospital first.

We only share information where necessary:

• With the treating hospital, to verify and settle a campaign.
• With service providers (e.g. Flutterwave for payments, our hosting and database providers) under strict confidentiality.
• Where required by law or to protect people from harm.

We protect your data with encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to keep your information safe and to respond quickly to any incident.

Under the NDPR you may:

• Ask what personal data we hold about you.
• Ask us to correct or delete your data.
• Withdraw consent or object to certain processing.

To exercise any of these, contact us at getmenda@gmail.com.

We keep information for as long as needed to run campaigns, meet legal obligations, and resolve disputes, after which it is deleted or anonymised.

Menda's website does not use advertising cookies, analytics, or any tracker that follows you to other sites. We do not sell or share browsing data, because we do not collect it.

Two small things may be stored by your own browser, and neither is sent to us:

• Whether you closed the “get the Menda app” bar, so it does not keep reappearing.
• Whether you have seen the notice about this page, for the same reason.

The Menda app itself stores what it needs to keep you signed in, and a payment you have started so it can be confirmed when you return from your bank. Clearing your browser or app data removes all of it.

If we ever add analytics, we will ask first, it will be off until you say yes, and declining will be as easy as accepting.

Menda is for adults (18+). A child can be the beneficiary of a campaign created and managed by a parent or guardian, but accounts are for adults only.

We may update this policy from time to time. Material changes will be announced on this page, and the “last updated” date will change.

Menda Health Technologies, Lagos, Nigeria.
Email: getmenda@gmail.com