PRIVACY POLICY

Our website address is: https://ivc.health

Last updated: 06 October 2025

INDEX                                                                                                                    

1.      Introduction……………………………………………………………………………………………….2

2.     What Information We Collect……………………………………………………………………………………..3

3.     Children’s Privacy……………………………4

4.     How We Use Your Information……………………………………………………………………………………….5

5.     Facial Scan and Camera Data…………………………………………………5

6.    Legal Basis for Processing………………………………………………………………………………7

7.     Data Retention…………………………………………………………………7

8.     Sharing of information…………………………………………………………..6

9.     Your rights…………………………………………………………………………………………………7

10.    Cookies and Tracking………………………………………………………………………………………………7

11.     Third-Party Websites…………………………7

12.    App Store and Platform Compliance……………………………………………………..8

13.    Security………………………..8

14.   Amendments………………………………………………………………………………………….9

15.    Contact Us…………………………………………………………………………………..9

1. Introduction

IVC Health (Pty) Ltd (“IVC Health”, “we”, “us”, “our”) values your privacy and is committed to protecting your personal and health information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our website, mobile apps, or any related digital services (“Service”).

By using the Service, you agree to this Policy and the IVC Health Terms and Conditions.

Wellness Disclaimer: The IVC Health Digital Solution is a technology platform, not a healthcare provider or medical device. The information generated is for general wellness and informational purposes only and should not be used for diagnosis or treatment. Always consult a qualified health professional for medical concerns.

We comply with the Protection of Personal Information Act 4 of 2013 (POPIA), the General Data Protection Regulation (EU/UK GDPR/AVG), and other applicable data protection laws.

2. What Information We Collect

We may collect:

  • Personal identifiers (name, ID/passport number, date of birth, contact details, employment information);
  • Health information (medical history, symptoms, medication records, and wellness metrics generated via the app);
  • Financial and benefit data (Health Wallet balances or related loan information);
  • Device and technical data (device type, operating system, IP address, browser settings, geolocation, cookies);
  • Usage data (interaction logs, survey responses, marketing preferences).

We may also receive data from affiliated employers, financial partners, or health practitioners where necessary to provide the Service.

3. Children’s Privacy

We do not knowingly collect data from children under 13.
Users aged 13 to 17 may use the Service only with parental or guardian consent, and the parent or guardian accepts these Terms on their behalf.

4. How We Use Your Information

We use Personal and Health Information to:

  • Provide and maintain our services;
  • Enable virtual and in-person healthcare connections;
  • Deliver wellness insights, notifications, and goal reminders;
  • Customise financial products or employer benefits;
  • Conduct analytics, research, and service improvements;
  • Comply with legal and regulatory obligations.

If you withdraw consent, certain features or services may no longer function.

5. Facial Scan and Camera Data

The IVC Health app uses remote photoplethysmography (rPPG) technology, provided by our contracted analytics vendor (NuraLogix or successor vendor), to estimate wellness-related signals from a standard camera.

  • rPPG is not a medical device and is not approved for diagnosis or treatment.
  • No facial images or videos are stored or transmitted. Only derived, de-identified wellness metrics are processed and encrypted.
  • Data is not used for biometric identification or facial recognition.
  • Processing occurs in secure cloud infrastructure within approved regions (Azure South Africa North / EU).

6. Legal Basis for Processing

Processing is lawful as it is necessary for contract performance, legal compliance, legitimate business interests, and explicit consent for health or marketing data.

7. Data Retention

When you delete your account, personal and health data is removed from active systems unless the law requires otherwise. Certain information is retained for 12 months to comply with South African legislation and audit obligations. This retention period is strictly for legal compliance and not for commercial use.

8. Sharing of Information

We do not sell personal or health information. We share data only with:

  • Contracted Third Parties that process data under confidentiality and data-processing agreements;
  • Health and financial service partners are necessary to deliver the requested services;
  • Regulators or law enforcement, when required by law.

All processors are bound by agreements aligned with POPIA and GDPR.

9. Your rights

You may:
  • Request access to and a copy of your data;
  • Request correction or deletion;
  • Object to processing or marketing;
  • Withdraw consent at any time;
  • Lodge a complaint with the Information Regulator (South Africa) or your local authority.

10. Cookies and Tracking

We use cookies and analytics tools to improve usability and performance.
You may disable cookies in your browser, but some features may not work properly.

11. Third-Party Websites

Our Service may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their privacy policies before providing personal information.

12. App Store and Platform Compliance

When you download or use the IVC Health app through the Apple App Store or Google Play Store:

  • You are also subject to their privacy and usage policies.
  • Apple and Google are not responsible for IVC Health’s data handling.
  • IVC Health is solely responsible for the app’s content and data processing.

13. Security

We apply administrative, technical, and physical measures to protect your data against unauthorised access, loss, or destruction, including encryption and access controls.

14. Amendments

We may update this Policy from time to time. Material changes will be communicated via email or in-app notification.

15. Contact Us

If you have questions about this Privacy Policy, the Terms and Conditions, or your personal and health information, please contact us at:

Telephone No:                                   +27 (0) 12 051 3383

Email:                                                   support@ivc.health

Website:                                              https://ivc.health

Physical address:                             50 Betty Avenue, Riviera, Pretoria 0184, South Africa

If you are not satisfied after contacting us regarding a privacy complaint, you may contact the Information Regulator of South Africa at POPIAComplaints.IR@justice.gov.za.