Privacy Policy

1. Introduction

Naya (“Naya,” “we,” “us,” or “our”) is a maternal care application built to support Filipino mothers through pregnancy, childbirth preparation, and the postpartum period, and to connect them with healthcare providers (doctors, midwives, and nurses). Naya consists of a mobile app used by mothers and a web-based dashboard used by healthcare providers.

Naya is currently in closed testing as part of an undergraduate thesis feasibility study. This policy explains what information we collect through the app and dashboard, how we use and share it, and the choices available to you. It applies regardless of whether you are also participating in the related research study, which has its own separate informed-consent process (see Section 10).

2. Information We Collect

2.1 Account information

When you register, we collect information needed to create and secure your account, such as your name, email address or contact number, password (stored in hashed form), and your role (mother or provider).

2.2 Pregnancy and health information (mothers)

To provide the app’s core features, we collect information you choose to log, including:

• Pregnancy stage / gestational age, gravidity and parity, and related maternal history
• Vital signs and health measurements you record (e.g., blood pressure, weight)
• Symptoms and wellbeing check-ins you log
• Messages you send to Naya’s in-app assistant (“MamaBot”), including any health information, symptoms, or concerns you describe in that chat
• Danger signs you report to MamaBot, which may be routed to your connected healthcare provider (see Section 4.1)

This information is used to personalize the content you see, support your connected provider’s care of you, and — where you have logged the required vitals — to generate a decision-support risk indicator for content prioritization. This risk indicator is not a medical diagnosis and does not replace clinical judgment.

2.3 Provider and clinical information

If you register as a healthcare provider, we collect professional information such as your name, professional license or registration details, and clinic affiliation, so mothers and administrators can verify and connect with you. Providers may also enter clinical notes, danger-sign acknowledgments, and prescriptions for their connected patients through the dashboard.

2.4 Information about minors

Naya’s mother cohort may include adolescents under 18. Where a user is a minor, we require verifiable guardian consent in addition to the minor’s own assent before health information is collected, consistent with our study protocol. See Section 9 for more detail.

2.5 Device and technical information

We use Sentry for error and crash monitoring, and a separate uptime monitoring service to detect service outages. Through these tools we may automatically collect limited technical information needed to operate Naya reliably and securely, such as app version, device model and operating system version, crash and error logs, and service availability/performance data. These tools do not collect the content of your health information or MamaBot conversations — only technical diagnostics.

2.6 Research data

If you are enrolled in the associated thesis feasibility study, you will separately be asked for informed consent (and, for minors, guardian consent plus assent) covering additional study instruments — for example, usability questionnaires and interviews. Data collected for the study is handled under that consent process and is reported at the group level; it is not used to make decisions about your individual care.

3. How We Use Your Information

• To create and maintain your account and authenticate you
• To operate the app’s core features: content recommendations, symptom and vitals tracking, the Learn library, and the MamaBot assistant
• To connect mothers with their chosen healthcare provider and support that provider’s care, including surfacing reported danger signs to the connected provider
• To generate the decision-support risk indicator described in Section 2.2
• To conduct the associated feasibility study, where you have separately consented to participate
• To maintain the security, integrity, and reliability of the service, including diagnosing technical issues
• To communicate with you about your account or the beta test (e.g., onboarding instructions, study updates)

4. How Information Is Shared

4.1 With your connected healthcare provider

If you connect with a provider through Naya, that provider can see the health information relevant to your care in the dashboard. Obstetric danger signs you report to MamaBot are surfaced to your connected provider along with your own wording. Mental-health and wellbeing check-ins are kept private and are never surfaced to your provider — this is a deliberate design choice to protect your privacy around mood and mental-health content. If you are not connected to a provider, your information is not shared with any provider.

4.2 With service providers who process data on our behalf

We use a small number of third-party services to operate Naya. They process data only to provide their service to us, under confidentiality obligations, and not for their own independent purposes:

These providers may process and store data outside the Philippines (see Section 8).

4.3 Legal disclosures

We may disclose information if required to do so by law, or in a good-faith belief that disclosure is reasonably necessary to comply with a legal process, protect the safety of any person, or address fraud or security issues.

4.4 No sale of data

We do not sell or rent your personal information to third parties.

5. Data Retention

We retain your account and health information for as long as your account remains active. If you request deletion under Section 6, we delete your personal data within 30 days, except where a limited, de-identified subset has already been incorporated into the aggregated results of the associated thesis study, or where retention is required for security or legal reasons — in which case we retain only what is necessary and do not use it for any other purpose.

6. Account and Data Deletion

You can request deletion of your account and associated personal data at any time by:

• Emailing naya.official.ph@gmail.com from the address on your account; or
• Submitting our account deletion request form

Upon a verified request, we will delete your account and associated data, except where we are permitted or required to retain certain information for security, fraud-prevention, legal, or research-integrity reasons (for example, de-identified data already included in aggregated study results). Where any such data is retained, we will only retain what is necessary and will not use it for any other purpose.

7. Data Security

We apply reasonable technical and organizational measures to protect your information, including encrypting data in transit between the app, our backend, and our database, and restricting access to authorized personnel involved in operating Naya or the associated study. No system is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Some of the service providers listed in Section 4.2 may process or store data outside the Philippines. Where this occurs, we take steps to ensure the data continues to be protected consistently with this policy and applicable law.

9. Children and Adolescents

Naya is not directed at young children. Where the mother cohort includes adolescents under 18 as part of the feasibility study, participation requires verifiable guardian consent in addition to the minor’s own assent, obtained before any health information is collected. Parents/guardians of a minor participant may contact us at naya.official.ph@gmail.com to review, correct, or request deletion of their child’s information.

10. Relationship to the Research Study

This Privacy Policy governs how Naya, the application, handles your data. If you separately agree to take part in the associated undergraduate thesis feasibility study, a distinct informed-consent process (and, for minors, guardian consent and assent) applies to the additional research instruments used in that study (for example, usability surveys and interviews). You may use the Naya app without participating in the study, and withdrawing from the study does not require you to delete your Naya account, or vice versa, unless you choose to.

11. Your Rights

Consistent with the Philippine Data Privacy Act of 2012 and its implementing rules, you have the right to:

• Be informed that your personal data is being processed
• Access your personal data
• Correct inaccurate or outdated data
• Object to processing, and withdraw consent where processing is based on consent
• Request erasure or blocking of your data, subject to Section 6
• Data portability, where applicable
• File a complaint with the National Privacy Commission (privacy.gov.ph)

To exercise any of these rights, contact us using the details in Section 13.

12. Changes to This Policy

We may update this Privacy Policy as Naya develops, particularly as it moves from closed testing toward broader release. We will update the effective date above when we do, and where changes are material, we will make reasonable efforts to notify users in the app.

13. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact: