Privacy Policy

1. Introduction

Rivia Technologies Inc. ("Rivia," "we," "us," or "our"), a corporation registered in Delaware, USA, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our technology platform (the "Platform"), which enables access to healthcare services provided by independent, licensed professionals and partner clinics in Ghana.

Please read this policy carefully. By accessing and using our Platform, you consent to the practices described in this policy.

2. Information We Collect

We collect several types of information to provide and improve our services:

• Personal Identification Information: Name, email address, phone number, date of birth, government-issued ID number (where required for verification).
• Health Information (Sensitive Personal Data): Medical history, symptoms, treatment plans, lab results, prescriptions, and any other health-related information you or your healthcare provider uploads to the Platform.
• Financial Information: Payment card details or mobile money information, which is processed directly by our secured third-party payment processors. We do not store full payment card details on our servers.
• Technical and Usage Data: IP address, browser type, device information, pages visited, access times, and other diagnostic data.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain our Platform: To create your account, facilitate your access to healthcare providers, and manage your health spend wallet.
• To Facilitate Healthcare Services: To enable healthcare providers to deliver services to you, including sharing your health information with the specific providers you choose to consult with.
• For Business Operations: To process payments, manage your employer-sponsored plan, and perform data analytics to improve our services (using anonymized or aggregated data where possible).
• For Communication: To send you service-related announcements, administrative messages, and responses to your inquiries.
• For Compliance and Safety: To comply with applicable laws and regulations in Delaware and Ghana, protect the rights and safety of our users and the public, and detect and prevent fraud.

4. Legal Basis for Processing (Ghana Compliance)

Under Ghana's Data Protection Act, we process your personal data based on the following legal grounds:

• Your explicit consent, which you provide by accepting this policy.
• Necessity for the performance of a contract to provide you with Platform services.
• Necessity for compliance with a legal obligation.
• Necessity for the provision of preventive or occupational medicine, medical diagnosis, or the management of healthcare services. This is the primary basis for processing your sensitive health data.

5. How We Share Your Information

We do not sell your personal data. We may share your information in the following limited circumstances:

• With Healthcare Providers: Your health information is shared with the specific, licensed healthcare providers and clinics you engage with on the Platform to facilitate your treatment.
• With Your Employer (Limited Information): If your access is employer-sponsored, we may share aggregated and anonymized usage data. We will not share your individual health information with your employer without your separate, explicit consent, unless required by law.
• With Service Providers: We engage trusted third-party vendors to perform functions like payment processing, data hosting, and customer support, under strict contractual obligations of confidentiality.
• For Legal Reasons: Where required by law, regulation, legal process, or governmental request in either the U.S. or Ghana.

6. International Data Transfers

Rivia Technologies Inc. is based in Delaware, USA. Your data will be transferred to and processed in the United States and Ghana. We ensure appropriate safeguards are in place for such transfers, including the use of standard contractual clauses approved by relevant authorities and requiring our partners to provide a comparable level of data protection.

7. Data Security

We implement robust administrative, technical, and physical security measures designed to protect your personal information, especially your sensitive health data, from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, and secure data storage.

8. Your Data Rights (Ghana Compliance)

Under Ghanaian law, you have the right to:

• Access and request a copy of your personal data.
• Correct inaccurate or incomplete data.
• Object to or restrict our processing of your data.
• Request the deletion of your personal data (subject to certain legal limitations, e.g., we may be required to retain medical records for a period defined by Ghanaian law).
• Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact us at [email protected].

9. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable laws in Ghana and the U.S. (e.g., medical data retention laws).

10. Changes to This Privacy Policy

We may update this policy from time to time. The updated version will be indicated by a new "Last Updated" date. We will notify you of any material changes by posting the new policy on the Platform.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: