Privacy Policy

This Privacy Policy explains what personal and health information EmergencyEcho collects, why we collect it, and who it's shared with. "We," "us," and "EmergencyEcho" refer to the platform operator; "you" refers to anyone with an EmergencyEcho account — patient, doctor, nurse, or partner.

1. Information We Collect

• Account information: full name, username, phone number, email address, password (stored as a salted hash, never in plain text), and role.
• Health information: symptoms, vitals, chief complaint, current medications, allergies, surgical history, and other details you or a clinician enter into your Digital Medical Kit (DMK) or a consultation record.
• Voice intake data: if you use the Echo AI voice intake flow, your call audio is recorded and converted to text so Echo AI can ask follow-up questions; the recording and transcript are stored as part of your medical record. Live video consultations with a doctor or nurse are not recorded.
• Location: if you use the SOS/emergency feature, your device location is collected so a clinician and your emergency contact can be informed where you are.
• Payment information: consultation and wallet transactions are processed by our payment partner (Paystack); EmergencyEcho does not store your full card number.
• Device and usage information: basic technical data (browser/device type, IP address, timestamps) used for security (e.g. detecting suspicious login activity) and to keep the service working.

2. How We Use Your Information

• To connect you with a licensed clinician and let them review your case.
• To maintain your medical record (DMK) across visits.
• To process payments and maintain your in-app wallet.
• To respond to an SOS/emergency alert.
• To secure your account (fraud/abuse detection, login-attempt monitoring).
• To meet legal and regulatory record-keeping obligations for a healthcare platform.

3. Echo AI and Automated Processing

Echo AI processes your spoken or typed symptoms into a structured clinical summary using an AI model. This processing is used only to prepare information for a licensed clinician — it is never the basis of a diagnosis or treatment decision on its own, and a human clinician reviews your case before anything is acted on.

4. Who We Share Information With

• Your treating clinician — the doctor or nurse assigned to or accepting your consultation sees your relevant medical information for that consultation.
• MDCN / NMCN — where required for verifying a clinician's registration, or for regulatory oversight of clinical activity on the platform.
• Our payment processor (Paystack) — for processing wallet top-ups, consultation payments, and withdrawals.
• Your emergency contact — only when you trigger the SOS feature, or when a clinician determines your case is a medical emergency.
• We do not sell your personal or health information to third parties.

5. Data Retention

Medical records are retained for as long as your account is active and for a reasonable period afterward to meet standard healthcare record-keeping practice. You may request deletion of your account as described below, though some records may need to be retained longer where required by applicable health-record regulation.

6. Data Security

Passwords are stored as salted hashes, never in plain text. Sensitive fields such as multi-factor authentication secrets are encrypted at rest. Access to clinical records is role-restricted (a clinician sees only the patients assigned to or accepted by them; an administrator's access is logged). No system is perfectly secure, and we continue to improve these protections over time.

7. Your Rights

You can request a copy of the personal and health information we hold about you, ask us to correct inaccurate information, or request deletion of your account, by contacting us at the address below. You can also delete your account yourself, in the app under Settings → Delete account or at emergencyecho.org/delete-account. We will respond within a reasonable time and explain if any part of a request can't be completed (for example, where a record must legally be retained).

8. Children's Privacy

EmergencyEcho accounts are intended for users 18 and over, or for a parent/legal guardian registering and managing access on a minor's behalf. We do not knowingly allow a minor to create and control their own account independently.

9. Cookies and Local Storage

We use browser local/session storage to keep you signed in and to remember a small number of preferences (such as having already seen the voice-intake consent notice). We do not use third-party advertising trackers.

10. Changes to This Policy

We may update this Policy as the platform changes. A meaningful update will be reflected with a new "last updated" date above.

11. Contact

Questions about this Policy, or a request under section 7 above, can be sent to support@emergencyecho.org.