How ZiBuntu handles personal information

ZiBuntu is a technology and facilitation platform for diaspora healthcare coordination. We help users manage beneficiary profiles, plan applications, payments, pharmacy access, logistics coordination, and general support workflows.

ZiBuntu is not an insurer, underwriter, pharmacy, doctor, clinic, hospital, emergency medical provider, or logistics carrier.

We may collect the following categories of information:

• Account information such as name, email address, phone number, and login identifiers.
• Beneficiary information such as name, date of birth, relationship, phone number, identification reference, and basic coordination notes.
• Application information such as selected plan, age-band pricing result, billing frequency, application status, payment status, and policy status.
• Payment information such as transaction status, invoice records, subscription identifiers, Stripe checkout session identifiers, and payment references.
• Pharmacy order information such as selected products, quantity, beneficiary link, delivery choice, order status, and fulfilment status.
• Logistics information such as delivery address, recipient contact details, delivery notes, logistics reference, and delivery status.
• Technical information such as device type, browser data, IP-related security logs, session information, and platform activity records.

ZiBuntu is designed to avoid unnecessary storage of private medical records. Users should not enter diagnosis information, clinical notes, hospital records, laboratory results, or detailed medical history into general forms unless ZiBuntu specifically provides a secure process for that purpose.

Basic beneficiary information may be used to calculate age-band pricing, support plan application workflows, coordinate pharmacy orders, and manage delivery or fulfilment.

We use information to:

• Create and manage user accounts.
• Create and manage beneficiary profiles.
• Process plan applications and support underwriter review.
• Calculate pricing, billing schedules, invoices, receipts, and payment records.
• Process payments and subscriptions through payment partners such as Stripe.
• Coordinate pharmacy orders with pharmacy partners.
• Coordinate logistics with Gowaya or other logistics partners.
• Provide customer support and operational communication.
• Detect fraud, abuse, payment failure, duplicate transactions, and unauthorised access.
• Comply with legal, regulatory, tax, accounting, audit, and contractual obligations.

If a user applies for a plan, ZiBuntu may share necessary application and beneficiary information with the appointed underwriter or insurance administrator. This is required so that the underwriter can assess the application, apply policy rules, determine approval, manage policy activation, administer benefits, and handle claims.

ZiBuntu does not control the underwriter’s final insurance decisions. The underwriter remains responsible for underwriting, policy terms, claims handling, waiting periods, exclusions, and benefit rules.

When users place pharmacy orders, ZiBuntu may share necessary order, beneficiary, payer, prescription, and fulfilment information with pharmacy partners so that they can review, approve, prepare, reject, or fulfil the order.

Pharmacy partners are responsible for dispensing decisions, professional pharmacy review, stock availability, prescription requirements, and applicable pharmacy obligations.

When delivery is selected, ZiBuntu may share delivery information with Gowaya or other logistics partners, including recipient name, phone number, address, delivery notes, order reference, and delivery status information.

ZiBuntu coordinates logistics requests but does not itself transport goods. Logistics partners may process information under their own operational rules, delivery conditions, and legal obligations.

ZiBuntu may provide an AI health assistant for general health education and basic wellness information. Conversations with the AI assistant may be processed to generate responses, improve safety, and monitor abuse or misuse.

Users should not submit emergency information, highly sensitive medical records, or confidential clinical documents into the AI assistant unless ZiBuntu provides a secure and clearly labelled process for that purpose.

The AI assistant does not diagnose, prescribe, replace a doctor, verify symptoms, or provide emergency advice.

Payments may be processed by Stripe or other payment service providers. ZiBuntu does not store full card details. Payment processors may process card, billing, fraud prevention, and transaction information according to their own terms and privacy notices.

ZiBuntu may store payment references, invoice records, subscription identifiers, payment status, and reconciliation records.

Where applicable, ZiBuntu processes personal information based on one or more lawful grounds, including contract performance, user consent, legitimate interests, legal obligations, fraud prevention, platform security, and operational necessity.

If you provide information about a beneficiary, you confirm that you have authority or a lawful basis to provide that information for the relevant platform purpose.

ZiBuntu keeps information for as long as needed to provide the platform, maintain payment and subscription records, support underwriter and pharmacy workflows, comply with legal obligations, resolve disputes, prevent fraud, and maintain audit records.

Some information may be retained after account closure where required for legal, accounting, regulatory, fraud prevention, or dispute resolution reasons.

ZiBuntu uses technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. No digital platform can guarantee absolute security, but ZiBuntu aims to apply security controls appropriate to the nature of the data and service.

ZiBuntu may involve users, beneficiaries, underwriters, pharmacies, logistics partners, payment processors, infrastructure providers, and support teams in different countries. This may require information to be processed or accessed across borders.

Where required, ZiBuntu aims to apply appropriate safeguards for international transfers.

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to withdraw consent where processing is based on consent.

Some requests may be limited where ZiBuntu must retain information for legal, regulatory, fraud prevention, accounting, underwriter, or dispute resolution reasons.

For privacy questions, correction requests, or data protection requests, contact ZiBuntu through the contact page.