Privacy Policy

Dunu (“we”, “us”) is the data controller for the information you provide when you use the app. You can reach our data protection contact at privacy@medirevs.com.

• Account details: your email address, phone number, username, and password (stored only as a secure hash).
• Health profile: information you choose to add such as age, height, weight, goals, conditions, allergies, and medications.
• Meal and activity data: food photos you upload, meal logs, water intake, and metrics like weight, blood pressure, and blood sugar.
• Payment information: handled by our payment provider (Paystack). We receive a confirmation and reference, never your full card or Mobile Money details.
• Technical data: basic device and usage information needed to run the app securely.

We use your data only to provide and improve the service you asked for:

• To analyse food photos and estimate nutrition, and to show your history and progress.
• To personalise guidance to your goals, conditions, and allergies.
• To connect you with a dietitian and deliver your plan when you subscribe.
• To send notifications you have turned on, such as reminders.
• To keep the service secure, prevent misuse, and meet legal obligations.

Health information is sensitive personal data. We only collect and process it with your explicit consent, which you give when you create an account and add your health profile. You can withdraw consent at any time by deleting the relevant data or your account — this will not affect processing that already took place.

To estimate nutrition, food photos and related text are processed by trusted AI providers on our behalf. This is done to deliver the analysis you request. We do not sell your data, and we do not use your health information for advertising.

• Passwords are stored only as secure hashes, never in plain text.
• Access to your data is limited to what is needed to run the service.
• Your account identity is kept separate from your health records where practical.
• We apply reasonable technical and organisational safeguards to prevent loss or misuse.

We share data only in limited, necessary cases:

• With a dietitian you choose to work with, so they can prepare your plan.
• With service providers who help us run Dunu (such as payment and AI processing), under agreements that protect your data.
• Where the law requires it, or to protect the safety and rights of our users.

We never sell your personal or health data.

We keep your information for as long as your account is active or as needed to provide the service. When you delete your account, we delete or anonymise your personal data, except where we must keep certain records to meet legal or accounting obligations.

Under Act 843 you have the right to:

• Access the personal data we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your data and close your account.
• Withdraw consent to processing your health data.
• Object to, or ask us to limit, certain processing.

To exercise any of these rights, email privacy@medirevs.com. You also have the right to lodge a complaint with the Data Protection Commission of Ghana.

Dunu is intended for people aged 18 and over. We do not knowingly collect data from children without the consent of a parent or guardian.

We may update this policy from time to time. If we make significant changes we will notify you in the app or by email. Your continued use of Dunu means you accept the updated policy. See also our Terms of Service.