Privacy Policy
Version 1.5 · Effective 2026-10-10
This policy explains what WOW Care collects, why, who we share it with, how long we keep it, and how you can have it deleted. We use your mobile number and membership details to sign you in and show your plan and your care plan. Payment providers handle your card or mobile money details. We never sell your information, we never use it for advertising, and the App does not track you.
1. Who is responsible for your information
Innovarx Global Health ("Innovarx", "we", "us") is responsible for the personal information processed through WOW Care (the "App"). We are registered in The Gambia under registration number C 201902401235, with our registered office at 1568 Galloway Rd, Charlotte, NC 28262. Send questions and requests about your information to info@innovarxglobal.com.
This policy covers the App only. The App shows the parts of your care plan described in section 2; your full clinical records held by your care team are covered by your care agreement with Innovarx and the law on health records. You can read this policy at any time in the App under Profile > Privacy Policy, and at https://www.innovarxglobal.com/legal/privacy-policy. The Terms of Service are under Profile > Terms of Service and at https://www.innovarxglobal.com/legal/terms-of-service.
2. Information we collect
The App uses only the information it needs to work:
-
Identity and contact: your name and the mobile number registered to your membership. Innovarx records these when it enrols you; the App uses them to sign you in and greet you.
•
Account identifier: the membership number or internal ID that links the App to your membership record.
•
Sign-in and security: one-time codes sent by SMS (checked, then discarded), your PIN (checked by our servers; the App keeps only a session token, in your device's secure storage), and whether you chose to unlock the App with your device biometrics. Biometric data stays on your device and is never sent to us. -
Membership: your plan, its start and end dates and its status. For sponsors, the name, plan, plan period and payment status of each person you pay for.
-
Care plan: once your care team has set it up, the App shows the care plan they record for you: your medications, care goals, care tracker and visit history. Your care team enters this information; the App displays it and records only whether you have chosen to share it with your sponsor.
-
Payments: the amount, currency, date, payment provider, status and reference of each payment made through the App. We do not receive or store your card number, expiry date or security code, or your mobile money PIN. Card details are entered directly into Stripe's secure payment form; Wave payments are approved in the Wave app.
-
Device and diagnostics: if the App crashes or hits an error, a report is sent to our error monitoring service. It includes the device model, operating system version, App version and a technical description of the error. Phone numbers, codes and session tokens are removed from these reports before they leave your device.
-
Settings kept on your device only, such as whether you last used the member or sponsor view.
We do not collect your precise location, contacts, photos, health or fitness data from your device, or advertising identifiers. The App asks for camera access only if you choose to scan a card in the Stripe payment form; the image is processed on your device and is not sent to or stored by us.
3. Why we use it and our legal grounds
-
To provide the App and your membership (to perform our agreement with you): signing you in, showing your plan and your care plan, taking payments and issuing receipts.
-
To keep your account and our systems secure (our legitimate interest and, where applicable, a legal duty): verifying your number, locking the App and detecting misuse.
-
To fix problems and keep the App reliable (our legitimate interest): crash and error reports.
-
To meet legal and accounting obligations: keeping payment records for as long as the law requires.
-
With your consent: sharing your care plan with your sponsor, and, where the law requires it, biometric unlock or camera use. You can withdraw consent at any time: turn off care plan sharing in the App, or biometric unlock and camera access in your device settings.
We do not use your information, including any information about your health or your membership plan, for advertising, marketing profiles or data mining, and we do not share it with data brokers.
4. Who we share it with
We share personal information only with:
-
Staff at Innovarx who need it to manage your membership and care.
-
Payment providers: Wave (mobile money) and Stripe (cards). Each processes your payment under its own privacy policy. When you pay by card, Stripe may collect information about your device to prevent fraud.
-
Service providers acting on our instructions under contract: the SMS provider that sends your one-time codes, the providers that host our systems, and the system we use for crash reporting.
-
Sponsors: if someone else pays for your plan, they can see your name, plan, plan period and payment status, but not clinical information.
-
Authorities, regulators or courts where the law requires it, or to protect the rights and safety of members, staff or the public.
We require every service provider that receives personal information from the App to protect it to the same standard, or a standard at least as protective, as this policy, and to use it only to provide its service to us.
We do not sell personal information, we do not share it with advertisers or data brokers, and we do not track you across other companies' apps or websites.
5. Where your information is stored
We and some of our service providers may store or process information outside The Gambia, including in the European Union and the United States. When we do, we use providers that commit to appropriate safeguards, and we transfer only what the service needs.
6. How we protect it
All traffic between the App and our servers is encrypted (HTTPS).
-
All traffic between the App and our servers is encrypted (HTTPS).
-
Session tokens are kept in your device's secure storage. If you turn on biometric or passcode unlock, they are also tied to it.
-
The App locks after a period of inactivity. If you have turned on biometric or passcode unlock, you use it to open the App again; otherwise, or if unlocking fails, you sign in again with an SMS code and your PIN.
-
Inside Innovarx, access to member information is limited to staff who need it to manage your membership or care.
No system is completely secure. Keep your device updated, protect your PIN, and tell us immediately if you suspect someone has accessed your account.
7. How long we keep it
-
Membership and identity information: for as long as you are a member, and as long as health records law requires it.
-
Payment records: for as long as tax and accounting law requires.
-
Crash reports: up to 90 days, then deleted or anonymised.
-
Session tokens on your device: until you sign out, delete your account, or are signed out for security reasons.
8. Your rights and choices
Subject to applicable law, you can:
-
ask for a copy of the personal information we hold about you;
-
ask us to correct information that is wrong or incomplete;
-
ask us to delete your information, or object to or restrict certain processing;
-
withdraw consent where we rely on it, for example by turning off care plan sharing in the App, or biometric unlock or camera access in your device settings;
-
complain to the data protection authority in your country, where one exists.
To use any of these rights, email info@innovarxglobal.com or speak to your care team. We may first confirm your identity, for example with a code sent to your registered mobile number. We will respond within 30 days.
Deleting your account
You can start deleting your App account at any time in the App: go to Profile > Delete Account (in the sponsor view, More > Delete Account). You can also email info@innovarxglobal.com or ask your care team.
-
Because the App is used for health care services, we will confirm your identity with a code sent to your registered mobile number before we delete anything.
-
We then close your App account, sign you out on all devices, and delete the App-related information we no longer need, within 30 days of your request. We will tell you when this is done.
-
We keep only what the law requires us to keep, such as payment records and health records, for the periods in section 7, and then delete it.
-
Deleting your App account does not end your membership or your care agreement. To end those, speak to your care team.
-
If you are a sponsor, deleting your account stops your access to the App. It does not cancel plans you have already paid for.
9. Children
The App is for adults. If a member is under 18, Innovarx enrols them through their parent or legal guardian, and that adult uses the App for them and can exercise the rights in section 8 on the child's behalf.
10. Changes to this policy
We may update this policy. The version and effective date appear at the top of this page. We will notify you in the App before any material change takes effect.