Naya
PrivacyTermsSign up for free
Legal

Privacy Policy

You trust Naya with details about your baby’s health and your own. This policy explains what we collect, why we need it, who can see it, and how you stay in control.

Effective: [date of launch]Last updated: 15 October 2026

The short version

  • We collect what you tell Naya about you and your baby, so we can give answers that fit your baby’s age and keep your records in one place.
  • Health details are sensitive. We only process them with your explicit consent, and you can withdraw it at any time.
  • We never sell your data, and we don’t use your baby’s health information for advertising.
  • You can see, download, correct or delete your data from the app or by emailing us.

1Who we are

Naya (“Naya”, “we”, “us”) is a baby-care and development companion for mothers and caregivers, available at asknaya.africa and through the Naya app. Naya is operated by [legal entity name], a company registered in Nigeria under RC number [RC number], with its registered office at [registered address].

We are the data controller for the personal data described in this policy. We follow the Nigeria Data Protection Act 2023 (NDPA) and the regulations and directives issued by the Nigeria Data Protection Commission (NDPC). Where we serve users in other countries, we also follow their data protection laws, such as Kenya’s Data Protection Act 2019, Ghana’s Data Protection Act 2012 and South Africa’s Protection of Personal Information Act (POPIA).

Our Data Protection Officer can be reached at privacy@asknaya.africa.

2What we collect

Information you give us

  • Your account: name, phone number (including WhatsApp number), email address, city or state, and password.
  • Your baby’s profile: name or nickname, date of birth, sex, and anything else you choose to add, such as birth weight.
  • Health information: symptoms, concerns, medicines and doses, reactions, vaccinations, visits and diagnoses, growth measurements, milestones, and notes you add to your baby’s record.
  • Conversations with Naya: the questions you ask, the replies you receive, and any photos you attach.
  • Messages to us: feedback, support requests and survey answers.

Information collected automatically

  • Device and usage: device type, operating system, browser, app version, IP address, approximate location derived from your IP address, pages and features used, and crash reports.
  • Cookies and similar technologies: see section 12.

We do not collect your precise GPS location, your contacts, or your bank card details. If we introduce paid features, payments will be handled by a licensed payment provider and we will only receive confirmation of payment.

3How we use it

  • To create and run your account and your baby’s profile.
  • To answer your questions with guidance that fits your baby’s age and history.
  • To keep your baby’s record, timeline, medicines, reactions and vaccinations in one place, and show you what to expect at each age.
  • To send messages you ask for, such as reminders, and essential service messages by WhatsApp, SMS or email.
  • To spot urgent warning signs in what you tell us and prompt you to seek care.
  • To keep Naya safe and secure, prevent misuse, and fix problems.
  • To improve Naya’s content and features. Where possible we use aggregated or de-identified data for this.
  • To meet our legal obligations and respond to lawful requests from authorities.

We will only send you marketing messages if you opt in, and every message will tell you how to stop them.

4Legal bases

We only process personal data where the law allows it. For each purpose we rely on one of these bases:

PurposeData usedLegal basis
Running your accountAccount details, device dataContract
Answers and records about your babyBaby profile, health information, conversationsExplicit consent
Urgent-care promptsSymptoms you describeExplicit consent; vital interests
Security and fixing problemsDevice and usage dataLegitimate interests
Improving NayaDe-identified usage and conversation dataLegitimate interests or consent
Marketing messagesName, contact detailsConsent
Legal and tax recordsAs requiredLegal obligation

Health information is sensitive personal data under the NDPA. We ask for your explicit consent before you add it, and you can withdraw that consent at any time in your settings. If you withdraw it, Naya will no longer be able to give personalised guidance or keep health records, but this does not affect anything we did before you withdrew.

5Naya’s AI answers

Naya uses artificial intelligence to understand your questions and write replies, drawing on reviewed baby-care content and your baby’s profile. Please keep these points in mind:

  • Your messages are processed by AI service providers acting on our instructions. Our contracts with them do not allow them to use your data to train their own models or for any purpose of their own. [confirm with provider terms]
  • Naya does not make decisions about you that have legal or similarly significant effects. Its answers are guidance only, and it does not diagnose your baby.
  • We may review a small sample of de-identified conversations to check answer quality and safety. Reviewers are bound by confidentiality.

6Who we share with

We do not sell or rent your personal data, and we do not share your baby’s health information with advertisers, employers, insurers or data brokers.

We share data only in these situations:

  • Service providers who help us run Naya, such as cloud hosting, AI processing, messaging (WhatsApp, SMS and email), analytics and customer support. They may only use your data to provide services to us, under written data processing agreements.
  • People you choose: if you export or share part of your baby’s record, for example with a doctor, nurse or family member.
  • Authorities when the law requires it, or when it is necessary to protect someone’s life or safety.
  • A new owner if Naya is merged with or acquired by another company. They would have to honour this policy, and we would tell you before your data moves.

7Where data is stored

Some of our service providers store or process data outside Nigeria, including in [e.g. the European Union, the United States]. When data leaves Nigeria, we make sure it stays protected as the NDPA requires. We do this by using countries or providers with adequate protection, signing contractual safeguards, or, where appropriate, asking for your consent after explaining the risks.

8How long we keep it

  • Your account, baby profile and records are kept while your account is active, so your history is there when you need it.
  • If you delete your account, we delete or anonymise your data within 30 days. Backups are overwritten within a further 90 days.
  • If your account is inactive for 3 years, we will contact you. If you don’t reply, we will delete your account.
  • We keep a limited amount of data for longer if the law requires it, for example tax records or a record of your consent.

9Keeping it safe

We use encryption in transit and at rest, strict access controls, staff confidentiality agreements and regular security reviews. Only people who need your data to do their job can access it.

No system is completely secure. If a breach puts your rights at risk, we will report it to the NDPC within 72 hours of becoming aware of it. If the risk to you is high, we will also tell you directly and explain what you can do.

Help us protect your account by using a strong password and not sharing your login.

10Your rights

Under the NDPA and other applicable laws, you have the right to:

  • Access the personal data we hold about you and your baby.
  • Correct anything that is wrong or incomplete.
  • Delete your data or your whole account.
  • Download your data in a common, machine-readable format (portability).
  • Restrict or object to some processing, including processing based on legitimate interests.
  • Withdraw consent at any time.
  • Not be subject to decisions made solely by automated means that significantly affect you.

Most of these are available in the app under Settings › Privacy. You can also email privacy@asknaya.africa. We will reply within 30 days and may ask you to confirm your identity first. Exercising your rights is free.

11Children

Naya is for parents and caregivers aged 18 or over. Children cannot have their own account.

Much of the data in Naya is about babies. By adding a baby to your account, you confirm that you are their parent or legal guardian, or that you have the parent’s or guardian’s permission. We treat information about babies with the same care as sensitive personal data, and use it only to support their care through your account.

12Cookies

We use a small number of cookies and similar technologies:

  • Essential cookies keep you signed in and keep Naya secure. These cannot be switched off.
  • Analytics cookies help us understand which features are used so we can improve them. We only set these if you agree, and you can change your choice at any time.

We do not use advertising or cross-site tracking cookies.

13Changes to this policy

If we make a meaningful change, we will tell you in the app or by message before it takes effect. If the change affects how we use your health information, we will ask for your consent again. The date at the top of this page shows when it was last updated.

14Contact and complaints

For questions or requests about your data, contact our Data Protection Officer at privacy@asknaya.africa or write to [registered address].

If you are not happy with how we handled your concern, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng, or to the data protection authority in your country.