Privacy policy
Duro handles health information, so we collect as little as we can, keep it secure, and never sell it.
1. Who we are
Duro App Ltd. (“Duro”, “we”) is a technology company that connects patients in Accra with licensed partner pharmacies for medication ordering and delivery. For the purposes of the Data Protection Act, 2012 (Act 843), Duro is the data controller for the information described here. Partner pharmacies are separately responsible for the dispensing records they are required by law to keep.
2. What we collect
If you join the waitlist: your name, mobile number and city, and your email address if you choose to give it.
If you request a pharmacy partnership: the pharmacy’s name and a contact phone number.
When you use the Duro app (after launch):
- Account details: name, phone number, email, delivery addresses.
- Health information: medications you search for and order, and dose or refill schedules you set. If Duro later offers prescription medicines, this will include prescriptions you upload.
- Order and payment records: what you bought, from which pharmacy, and payment status. Mobile money and card details are processed by our payment provider; we do not store full card numbers or PINs.
- Delivery information: your delivery location, and the rider’s location while your order is on its way.
- Basic technical data: device type, app version and error logs, used to keep the service working.
3. How we use it
- To tell waitlist members when Duro launches in their area.
- To show you medication availability and prices, process your order, and deliver it.
- To let a licensed pharmacist review your order before it is dispensed.
- To send the dose reminders and refill alerts you turn on.
- To provide customer support, prevent fraud, and meet our legal obligations.
We do not use your health information for advertising, and we do not sell, rent or trade personal data to anyone.
4. Who we share it with
- Partner pharmacies receive the order details needed to dispense your medication.
- Delivery riders receive your name, phone number and delivery address for the order they carry, and nothing about what is inside.
- Service providers who host our systems, process payments or send messages, under contracts that limit their use of your data to providing that service.
- Authorities such as the Food and Drugs Authority or the Pharmacy Council, when the law requires it.
Some of our service providers may store data outside Ghana. Where that happens we require protection at least equivalent to Act 843.
5. How long we keep it
Waitlist details are deleted 12 months after launch, or earlier if you ask. Account and order records are kept while your account is open and for as long as Ghanaian health, tax and pharmacy record-keeping rules require after that, then deleted or anonymised.
6. How we protect it
Data is encrypted in transit and at rest. Access to health information is limited to staff and pharmacists who need it to fulfil your order, and is logged.
7. Your rights
Under Act 843 you can ask us to show you the personal data we hold about you, correct it, delete it, or stop using it for a particular purpose. You can leave the waitlist or turn off reminders at any time. Email hello@myduroapp.com and we will respond within 21 days. If you are not satisfied with our response, you can complain to the Data Protection Commission of Ghana.
8. Children
Duro accounts are for people aged 18 and over. A parent or guardian may order medication for a child under their care through their own account.
9. Changes
If we change this policy in a way that affects you, we will tell you by email or in the app before the change takes effect.
10. Contact
Duro App Ltd., #3 Apricot Crescent, East Airport, Accra, Ghana · hello@myduroapp.com