Privacy

The short version

Lumevia is an offline-first records system: patient records are stored in an encrypted database on the hospital's own registered devices, and sync to Lumevia's servers over HTTPS when a connection exists.

All patient records belong to the hospital, not to Lumevia. A hospital can request a full export of its data during or after any engagement, in an agreed format.

What we collect from this website

The pilot request form collects your name, role, facility name, facility size, phone number, location, and email address. We use these details only to contact you about a pilot. We do not send newsletters and we do not sell or share these details.

Patient data in the product

Patient records created in Lumevia are stored encrypted on registered facility devices. Login tokens are held in the device's secure storage. Access is role-based: staff see only what their role requires. If a device is lost or a staff member leaves, that device's access can be deactivated from the admin panel.

Lumevia is designed around Nigeria Data Protection Act (NDPA) principles, including data minimisation and purpose limitation. Lumevia has not completed an external security audit or certification.

Questions

Write to admin@lumevia.health. We answer privacy questions directly, not with a form letter.