• Account/contact: name, phone/WhatsApp, email (some may be hashed or encrypted).
• Health inputs & service data: symptoms you type/select, triage results, consult notes, referral letters.
• Device/usage: identifiers, logs, events (e.g., lexy_start/complete, consult_booked/paid).
• Payments: amounts, status (no card numbers stored by us).

• Provide triage & telemedicine (contract); ensure safety/emergency guidance (vital interest).
• Messaging nudges & CSAT with your consent (you can opt out anytime).
• Security, fraud prevention, audits (legitimate interests).
• Legal compliance (regulatory, retention).

• Health information is sensitive. We apply strict access, encryption, and retention controls.
• Our services are intended for adults (18+). If we learn we collected a child’s data without guardian consent, we will take reasonable steps to delete it.

• Processors: hosting, WhatsApp BSP, analytics, email/SMS, payments—bound by Data Processing Agreements.
• Partners (WL/HMO/API) only per contract and purpose limitation.
• Legal requests, safety, or mergers per law.

Encryption at rest/in transit; role‑based access; logging and monitoring; incident response.

We use analytics/ads pixels and server‑side conversions. You can adjust preferences or opt out as available.