Privacy notice

We hold the phone number a conversation arrives on, the gestational age used to schedule reminders, the language preference, and the message content needed to answer and to audit the answer. We do not sell data, we do not run advertising, and this website sets no cookies and runs no analytics. A mother can end reminders by replying STOP and have her record erased by replying DELETE.

TrimesterCare Health Technologies is the data controller for the messaging service and this website, under the Nigeria Data Protection Act 2023. Our data protection contact is privacy@trimestercare.com. Where the service is operated jointly with a state primary healthcare board during a supervised pilot, that board is a joint controller for the enrolment record, and the arrangement will be published here before the pilot begins.

• Phone number. The identifier the conversation arrives on. It is the only identifier we need and we do not ask for a name.
• Message content. What was asked, and what was replied, including the retrieved passages and the rules that fired.
• Gestational age and expected delivery date. As stated by the mother or corrected by a health worker.
• Reminder schedule. Derived from the gestational age, and rebased when it is corrected.
• Language preference. Detected from the first messages, and changeable at any time.
• Delivery metadata. Whether a message was delivered, retried over SMS, or failed.

We do not collect location, contacts, device identifiers, photographs or payment details, and we do not ask for a National Identification Number.

• To answer the question asked — performance of the service the mother initiated by messaging us.
• To schedule and send reminders — consent, given when she opts in and withdrawable by replying STOP.
• To audit safety — our legitimate interest, and a public-interest health purpose: we must be able to reconstruct any reply, years later, to show which passages and which rules produced it.
• To improve the rule set and the lexicon — using aggregated and de-identified records only.

We never use message content for advertising, for credit scoring, or for any purpose unrelated to maternal and child health.

Pregnancy-related messages are sensitive personal data. We hold them only where necessary for the health purposes above, restrict access to the smallest team that can operate the service, log every access to identifiable records, and de-identify records used for evaluation or model work. We do not use identifiable message content to train general-purpose models.

• Messaging providers. WhatsApp (Meta Platforms) and licensed SMS aggregators and mobile network operators, to the extent needed to deliver a message. They see the number and the message in transit under their own terms.
• Hosting and infrastructure providers under written processing agreements.
• A health facility or health worker, only where a mother has asked us to hand over to one, or where a supervised pilot enrols her with a named facility and she has been told so.
• Clinical adjudicators reviewing safety incidents, on de-identified records.
• A regulator or court, where we are legally required to disclose.

We do not sell personal data, and we never will.

Message content is retained for 24 months for clinical audit, then deleted. Gestational age and the derived schedule are retained until 12 months after the expected delivery date, which is the end of the national immunisation schedule we send reminders against. The phone number is retained while enrolled. All of it is deleted sooner on request, except where a specific record is under active safety investigation, in which case we retain it until the investigation closes and tell the mother that we have.

Data is encrypted in transit and at rest. Access to identifiable records is role-based, individually authenticated, and logged. Guideline indexes and rule sets are versioned and immutable once published, so an audit reconstructs the original reply rather than a re-run of it. We will notify affected people and the Nigeria Data Protection Commission of a breach involving personal data within the statutory period.

Under the Nigeria Data Protection Act 2023 a data subject has the right to be informed, to access their data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out.

We answer requests within 30 days, at no charge. We verify a request by requiring it from the number the record belongs to — we do not require identity documents, because demanding paperwork from a woman in a village is a way of denying her the right while appearing to offer it.

Every right above can be exercised from the phone, in any supported language:

• STOP — end all reminders immediately.
• LATER — defer the next reminder by one visit.
• DELETE — erase the record, confirmed by reply.
• MY DATA — receive a summary of what is held.
• LANGUAGE — change the reply language.

The service is designed for pregnant and postpartum women, some of whom are adolescents. Where a user identifies as under 18 we do not refuse care information — refusing it would cause the harm the service exists to prevent — but we do not profile them, we minimise retention, and we encourage involvement of a parent, guardian or health worker.

Some infrastructure and messaging providers process data outside Nigeria. Where that happens we rely on the adequacy and contractual mechanisms permitted by the Nigeria Data Protection Act 2023, and we keep the primary datastore for identifiable records within Nigeria wherever the pilot agreement requires it.

This site sets no cookies, runs no analytics, embeds no third-party scripts, and loads no third-party images or trackers. Fonts are self-hosted at build time rather than fetched from a font CDN.

The demonstration console on the home page runs entirely in your browser. Nothing you type into it is transmitted to us or to anyone else, and nothing is stored — reload the page and it is gone.

The version date at the top of this page reflects the current version. Where a change materially affects a mother already enrolled, we tell her on her own channel before it takes effect rather than relying on her to re-read this page.

Data protection: privacy@trimestercare.com
Clinical governance: clinical@trimestercare.com

If we do not resolve a complaint to your satisfaction, you may complain to the Nigeria Data Protection Commission, which regulates data protection in Nigeria.