Privacy Policy

Last updated: June 2026

PlateMind Nutrition ("PlateMind", "we", "us") provides dietitian-led nutrition care, including consultations, a 12-week programme, meal plans and clinical reports. This policy explains what personal data we collect, why we use it and the choices you have. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and related guidance from the Nigeria Data Protection Commission.

Who is responsible for your data

PlateMind Nutrition is the data controller for the personal data described in this policy. Where you are referred to us by a clinic, employer or other partner organisation, that organisation may also be a controller for the information it shares with us.

Information we collect

  • Identity and contact details: name, email address, phone or WhatsApp number, location and preferred contact method
  • Health and clinical information: medical history, diagnosed conditions, medications, allergies, measurements (such as weight, height, blood pressure and blood glucose), laboratory results, symptoms, lifestyle and dietary habits, and food preferences
  • Information you give us in forms: pre-consultation intake forms, food preference forms, weekly check-ins and the Week 12 programme review
  • Consultation records: appointment details, clinical notes written by your dietitian, meal plans and clinical reports
  • Payment information: programme selection, amounts paid and payment references. Card details are entered directly with our payment provider, Paystack. We do not see or store your full card number
  • Communication records: emails and WhatsApp messages we send you, reminders, and whether they were delivered, opened or acted on (for example, confirming attendance or rescheduling)
  • Technical information: basic device, browser and usage data needed to keep the service secure and working
  • Health information is sensitive personal data. We only collect what your dietitian needs to provide safe and effective care.

    How we use your information

  • To deliver your consultations and the 12-week programme, including scheduling, video meeting links, reminders and follow-ups
  • To prepare personalised meal plans, clinical reports and progress summaries
  • To send weekly check-ins, review your answers and flag anything your dietitian should follow up on
  • To process payments, renewals and payment reminders
  • To contact you about your care, appointments and account
  • To share reports with your doctor or another healthcare professional when you ask us to or agree to it
  • To keep our services secure, prevent misuse and meet our legal and professional obligations
  • With your consent, to send newsletters or educational content. You can unsubscribe at any time
  • Legal basis for processing

    We process your data because it is necessary to provide the services you have requested (contract), because you have given consent (in particular for health information and marketing), because we must comply with legal obligations, or because we have a legitimate interest in running a safe and effective service. Where we rely on consent, you can withdraw it at any time. This does not affect processing that took place before you withdrew.

    Use of AI tools

    We use artificial intelligence tools to help our dietitians draft meal plans, clinical summaries and reports. AI output is always reviewed, edited and approved by a qualified dietitian before it is shared with you. AI is not used to make automated decisions about your care without human review. Information sent to AI providers is limited to what is needed for the task.

    Who we share your information with

    We do not sell your personal data. We share it only with:

  • Your PlateMind dietitian and authorised PlateMind staff involved in your care
  • A referring clinic or partner organisation, where you joined through them, limited to what is needed for your care
  • Your doctor or other healthcare professionals, when you ask us to or agree to it
  • Service providers who help us run PlateMind, including Paystack (payments), Zoho (email and booking), Google (calendar and video meetings), WhatsApp (messaging), our cloud hosting provider and AI service providers (such as OpenAI and Anthropic)
  • Regulators, law enforcement or courts, where we are required by law
  • Our service providers may only use your data to provide services to us and must protect it.

    International transfers

    Some of our service providers store or process data outside Nigeria. When this happens, we take steps required by the NDPA to make sure your data is adequately protected, such as using providers with appropriate safeguards and contractual protections.

    How long we keep your information

    We keep clinical records, consultation notes, meal plans and reports for as long as needed to provide your care and to meet professional and legal record-keeping requirements. Payment records are kept as required for accounting and tax purposes. When data is no longer needed, we delete or anonymise it securely.

    How we protect your information

    We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls so that only authorised staff can view patient records, secure personal links for forms and appointments, and trusted hosting providers. No system is completely secure. If a data breach is likely to put your rights at risk, we will notify you and the Nigeria Data Protection Commission as required by law.

    Personal links in emails and messages

    Check-in, booking and appointment emails contain personal links so you can complete forms, confirm attendance or reschedule without signing in. Please do not forward these links to others. If you think a link has been shared by mistake, contact us and we will issue a new one.

    Your rights

    Under the NDPA you have the right to:

  • Be told how your data is used
  • Access a copy of your personal data
  • Ask us to correct inaccurate or incomplete data
  • Ask us to delete your data, where we are not required to keep it
  • Restrict or object to certain processing
  • Receive your data in a portable format
  • Withdraw consent at any time
  • Opt out of marketing messages
  • Complain to the Nigeria Data Protection Commission (ndpc.gov.ng)
  • To exercise any of these rights, email privacy@platemind.app. We may need to confirm your identity before responding.

    Children

    Our services are intended for adults. If a patient under 18 is cared for by PlateMind, a parent or guardian must provide consent and manage communications on their behalf.

    Changes to this policy

    We may update this policy from time to time. The date at the top shows when it was last updated. If we make significant changes, we will let you know by email or through the service.

    Contact us

    PlateMind Nutrition, Lagos, Nigeria

    Privacy questions: privacy@platemind.app

    General enquiries: hello@platemind.app

    Phone / WhatsApp: +234 706 203 9281

    PlateMind provides nutrition guidance and educational insights only. The information provided does not replace professional medical advice, diagnosis, or treatment. Users should always consult a qualified healthcare professional regarding medical conditions or dietary changes. PlateMind is not a substitute for medical care.