Privacy Policy
Everything below describes what the system actually does, checked against the database and the code rather than adapted from a template. That makes it a sound starting point and not a finished legal document. Nigerian data protection law - the NDPA 2023 - carries obligations this draft flags but does not discharge, including whether FreelanceMedic must register with the NDPC as a data controller of major importance. Put this in front of counsel before publishing it.
Last updated: 5 October 2026
FreelanceMedic connects healthcare professionals in Nigeria with facilities that need cover. This policy explains what we hold about you, why, who else sees it, and what you can make us do about it.
It is written to be read. If anything here is unclear, write to freelancemedicng@gmail.com and we will explain it.
Who we are
FreelanceMedic is operated by Freelancemedic Limited (RC 8425962), of 22 Road 7, Greenland Estate, Olokonla, Lagos State, Nigeria. We are the data controller for the information described here.
For data protection questions, contact the Data Protection Officer at freelancemedicng@gmail.com.
What we collect, and why
We collect only what is needed to let a facility trust a stranger with its patients, and to pay that person for the work.
If you are a healthcare professional
| What | Why |
|---|---|
| Name, email address, phone number | To create your account and contact you about your work |
| Date of birth | To confirm you are who your licence says you are |
| Your clinical division, state and city | To show you shifts you can actually take |
| Your practising licence: issuing body, number, expiry date, and the document | To verify your licence before any facility can see you |
| A government-issued ID, where we ask for one | To confirm the licence belongs to you |
| CV, qualifications and certificates | So facilities can judge who they are hiring |
| Profile photo, headline and a short description | Optional. Shown to facilities you apply to |
| Bank account name, number and bank | To pay you |
| Shifts applied for, worked and approved; ratings; complaints | To run the marketplace and settle disputes |
If you are a facility
| What | Why |
|---|---|
| Facility name, type, address, state and city | To show your jobs to professionals nearby |
| Your CAC registration number | To verify the facility is real before you can post work |
| Contact name, role and WhatsApp number | So a professional can reach somebody on the day |
| Email address and phone number | Account and billing |
| Jobs posted, hires made and payments | To run the marketplace |
| Logo and photographs of the facility | Optional. Shown on your job posts |
What we do not collect
We want to be specific, because these are the things people reasonably assume an app is doing:
- We do not collect your location. You choose a state and a city from a list. The app never asks your device where you are.
- We do not use analytics, crash reporting or advertising software. There is none in the app. We cannot see how you move around it.
- We do not track you across other apps or websites. Nothing we do feeds advertising or data brokerage.
- We never see your card details. A facility paying for a hire enters its card on Paystack's own page. The card number does not reach us and we do not store it.
- We hold no information about your own health. This is a tool for working clinicians, not a medical record.
Who else sees your information
Facilities and professionals see each other
A facility you apply to sees your name, division, licence status, rating, work history, and anything optional you chose to add. It does not see your government ID, your bank details, your date of birth or your contact details until you are hired.
A professional sees a facility's name, type, location, rating and contact person.
The companies that make the service work
| Who | What they get | Why |
|---|---|---|
| Paystack | A facility's card details, entered on their own page; a professional's bank account and name when a payout is sent | To take payments and send money |
| Supabase | Everything, as our database and file storage provider | This is where the service runs |
We do not sell your information to anybody, and we do not share it for advertising. Those are not current practices we might change quietly; the software contains nothing capable of either.
Each of these companies is required to protect your information to the same standard set out in this policy. We share only what the service they provide actually needs, we are bound by written terms with each of them, and we do not permit any of them to use your information for their own purposes.
The website
This policy covers freelancemedic.com as well as the app. The website is a shop window - it explains the service and sends people to the app - but it uses a few third-party tools that the app does not, and you should know what they are.
| Who | What they get | Why |
|---|---|---|
| Hotjar | How you move around the website, recorded as a session | To see where the site confuses people |
| Google Tag Manager | Which pages you visit | To measure how people find us |
| Tawk.to | Anything you type into the chat window, and your email if you give it | The live chat on the site |
These tools set cookies, and some of them send information outside Nigeria. Where the law requires your consent for that, the website asks for it before they load, and declining does not stop you using the site or the app.
None of this is in the app. The app contains no analytics, no crash reporting, no advertising and no session recording - the two are deliberately different, and the app is where your licence, your documents and your bank details live.
Where your information is held
Our database and files are stored in London, in the United Kingdom (AWS eu-west-2, through Supabase). This means your information leaves Nigeria.
We rely on section 41 of the Nigeria Data Protection Act 2023, which permits a transfer where the recipient is bound by contractual clauses affording an adequate level of protection. Supabase, Resend and Paystack are each engaged under a written data processing agreement incorporating standard contractual clauses, and each is bound to protect your information to the standard set out in this policy.
The United Kingdom, where the data is stored, has its own data protection law and an independent regulator with enforcement powers, which are among the matters section 42 of the Act asks to be weighed.
The Commission has not yet issued its regulatory instrument on cross-border transfer, so adequacy is assessed under Schedule 5 of the General Application and Implementation Directive 2025. If the Commission publishes a determination that changes this, we will say so here.
When the law requires it
We will disclose information where we are legally obliged to - a court order, a regulator's lawful request, or an investigation into fraud or harm. We will tell you when that happens unless we are forbidden from doing so.
How long we keep things
| What | How long |
|---|---|
| Your account and profile | Until you close it |
| Licences, IDs, CVs and certificates | Until you close your account, then deleted |
| Records of money: charges, payouts and the ledger | Kept after your account closes. See below. |
| The name on a payout record | Kept after your account closes. See below. |
| Complaint notes recorded against a professional | Until the date set when the complaint was decided |
| Signed-out session records | One day |
Closing your account
You can close your account from inside the app: Profile > Account > Close your account. There is no form to fill in and nobody to ask.
If you no longer have the app, write to freelancemedicng@gmail.com from the address on your account with the subject "Delete my account". We will confirm it is you, close the account on your behalf exactly as the app would, and tell you when it is done. This takes us at most 30 days and usually far less. You do not need to reinstall anything, and you do not need to give a reason.
What happens depends on whether money has moved.
If nothing financial ever happened on your account, it is deleted outright. Your profile, your documents, your licence and your files are removed, and you cannot sign in again.
If you have been paid, or have paid for a hire, we keep the record of the money itself - what was charged, what was paid out, and the ledger entries behind both. We are required to hold those.
Your profile is emptied: your photo, your documents, your licence, your saved bank account, your phone number and your email address are removed, and your profile name is removed with them. You cannot be found, contacted or signed in as.
Each payout record keeps a few things that identify you. Written down on the day the payment was made, and kept afterwards:
- the name of the person who was paid, and the facility that paid
- the bank, and the last four digits of the account it went to
- the name the bank held for that account
We hold these because a record of money leaving this business has to say who it went to and where - that is what makes it a financial record rather than a number - and we are required to keep financial records.
We do not keep the full account number. Four digits say which account was paid; the whole number would be enough to pay it again, and we have no reason to hold that about someone who has closed their account. Your saved payout account, which is the one we could actually transfer to, is deleted with the rest of your profile.
Nobody using the app can see it. It is visible only to the people here who handle money, and only on the payout screen.
If you believe we are holding this without good reason, write to freelancemedicng@gmail.com and we will explain what we hold and why, or remove it if we cannot justify keeping it.
Either way your sign-in is destroyed and you cannot get back in.
Why closing is sometimes refused
The app will not let you close your account while:
- a placement is still running
- money is held in escrow against your work
- a complaint about one of your placements has not been decided
- a payment to your bank account is still on its way
Each of these is money or an obligation involving somebody other than you. The last one matters most: closing your account removes the bank details a transfer needs, so a payment in flight would never arrive and there would be nobody left to tell. Each refusal says which it is and links to where it is settled.
What we remember after you leave
When an account closes we keep a short, one-way coded record derived from your email address, practising licence, CAC registration and bank account. It cannot be reversed into any of those values and tells us nothing about you. It exists for one purpose: our starter rewards and the first-hire credit are paid once, and without this somebody could close an account and sign up again to claim them repeatedly. It records only that an identity has been seen before and whether those one-off offers were taken.
Your rights
Under the NDPA 2023 you may:
- ask what we hold about you, and get a copy
- correct it if it is wrong
- delete it - in the app, as described above
- object to how we use it, or ask us to restrict it
- complain to the NDPC if you think we have handled it badly
Write to freelancemedicng@gmail.com. We will answer within 30 days, and usually much sooner.
The Act does not set a fixed period - section 34 requires us to answer without unreasonable delay - so 30 days is our own commitment rather than a limit we are working up to. If a request is genuinely complicated we will tell you inside those 30 days rather than go quiet.
Keeping it safe
- Everything travels over an encrypted connection.
- Your documents and photos are held in private storage. They are never reachable by a public address; the app fetches them through links that expire within minutes.
- Our database refuses every connection except from our own backend. There is no public database access to be found and misused.
- Passwords are never stored in a form anybody can read, including us.
- We ask for your password again before anything irreversible, because being signed in is not proof of identity - a phone left on a table is a session.
No system is perfect, and anybody who tells you otherwise is selling something. If information is exposed we will tell those affected and the NDPC as the law requires.
Children
FreelanceMedic is for licensed healthcare professionals and registered facilities. It is not for anybody under 18, and we do not knowingly hold information about children. If you believe we have, tell us and we will remove it.
Changes
If we change this policy we will post the new version here and change the date at the top. If a change materially affects how we use your information, we will tell you in the app before it takes effect rather than afterwards.
Contact
Freelancemedic Limited
RC 8425962
22 Road 7, Greenland Estate, Olokonla, Lagos State, Nigeria