Privacy Policy
Draft — pending legal review. This wording mirrors the policy shipped in the app and has not yet been reviewed by a Nepal-qualified lawyer. Passages still to be settled are highlighted.
1. What we collect
Account details (your mobile number, name, date of birth, email if you sign in with Google); the health information you enter (last period date, pregnancy and medical history, blood group, chronic conditions, family and obstetric history, weight, blood pressure, kick counts, symptoms and mood logs, and your screening answers); any medical reports you upload; the messages you send in a consultation; emergency contacts you add; your Apple Health walking data, if you choose to connect it; and anything you post if Mupa offers a community feature.
2. Why we collect it, and your consent
We use this to run the features you use — personalised weekly guidance, reminders, trackers, nutrition estimates — and, when you choose, to let a doctor advise you. Because pregnancy and health information is sensitive, we ask for your consent separately for: (a) processing your health data to power the app's features, (b) sharing the relevant information with a specific doctor when you start a consultation, and (c) sending you marketing or campaign notifications. You can review and change your notification preferences at any time in the app, and you can withdraw consent by contacting us — though withdrawing consent for health-data processing may limit which features still work for you.
3. Sensitive health data
Your pregnancy and medical information is sensitive. We use it only to run the features you use. When you start a consultation, the relevant information you choose to share is made available to that doctor so they can advise you, and nowhere else.
4. Sharing
We share data with: the doctor you consult; payment providers (eSewa and Khalti) to process payments — they receive payment details but not your medical data; our SMS provider, to deliver login codes to your phone number; and service providers that host the app securely. We do not sell your data, and we do not use your Apple Health data for advertising or profiling.
5. Where your data is processed
Our servers and cloud infrastructure may be located outside Nepal, depending on our hosting provider. We'll name our specific hosting provider and data region here once our production infrastructure is finalised; until then, assume your data may be processed on international cloud infrastructure, protected in transit with encryption. [Placeholder — confirm hosting provider, data region, and at-rest encryption details once infrastructure is finalised.]
6. Storage and security
Data is stored on access-controlled servers. Login codes are never stored in plain text. Uploaded reports are kept private and are intended to be served only to you and, if you share them, your consulting doctor via access-controlled links rather than public ones. No system is perfectly secure, and we will let you know if a breach materially affects your data.
7. How long we keep it
We keep your account and health data for as long as your account is active, and delete it when you request account deletion, except where we're required to keep certain records for longer — for example, payment and invoice records, which we may need to retain for several years to meet Nepali tax and accounting requirements even after your account is deleted.
8. Your choices
You can view and update your profile, manage your notification preferences, delete your data from the app (Profile → “Delete my data & start over”), and stop using consultations at any time. Contact us to request a full account deletion or to ask what data we hold about you.
9. Children
Mupa is not directed at children and is not knowingly used by anyone under 18. We collect date of birth to help confirm this.
10. Community content
If you post in a community or story-sharing feature, that content is visible to other users. Please don't include personal or medical information about yourself or others that you're not comfortable making public — see our Community Guidelines.
11. Changes
We may update this Privacy Policy. We'll update the date above when we do, and let you know about significant changes.
12. Contact
Privacy questions or requests: hello@mupacare.com.