Privacy notice
Last updated: 11 October 2026
This notice is from Zypa Tech Limited, a company registered in Nigeria (RC 8918370). We make IfeOS Health, clinic software for small private practices.
It covers two things: this website and email you send us, and the clinic records we hold for the clinics that use IfeOS Health.
Questions about anything here: privacy@ifeoshealth.com.
This website
This website sets no cookies, runs no analytics, and loads no third-party scripts or fonts. It has no forms.
Cloudflare hosts it. To deliver each page and protect the site from abuse, Cloudflare processes technical details of every request: your IP address, your browser's description of itself, the page requested and the time. Cloudflare runs a global network, so your request may be handled in a data centre outside your country. We have not turned on Cloudflare's analytics, and we do not use these details to identify visitors. Cloudflare explains its own handling in its privacy policy at cloudflare.com/privacypolicy.
Email you send us
If you write to hello@ifeoshealth.com or privacy@ifeoshealth.com, we receive your email address, your name if you give it, and whatever you write. We use it only to reply to you and to deal with what you asked. We do not add you to a mailing list.
Our mailboxes are hosted by Google (Gmail). We keep correspondence for as long as we need it to deal with your message, and delete it when we no longer do.
We rely on our legitimate interest in running a secure website and in answering the people who write to us.
Clinic records: the clinic decides, we process
When a clinic uses IfeOS Health, the clinic is the data controller for its patients' and staff's records: it decides what is collected and why. Zypa Tech Limited is the data processor: we store and protect those records on the clinic's instructions and do not use them for our own purposes. This is the standard division under the Nigeria Data Protection Act 2023 and comparable data protection laws.
If you are a patient, your clinic's own privacy policy covers your records, and requests about them go to your clinic. If you write to privacy@ifeoshealth.com about a clinic's records, we will ask which clinic it is and put you in touch with it. The clinic decides on your request, and we carry it out on its instructions.
Our own access
Zypa Tech staff can open clinic records when that is needed to run, support or repair the system, for example to set up a new clinic or to carry out a request a clinic has passed to us. This is done through an administrative tool reached only over an encrypted connection. Today only the founder has this access.
Where the records are and who else handles them
Clinic records are stored in Amsterdam, in the Netherlands. Our hosting provider has no region in Africa, so we chose Amsterdam.
| Company | What it does | What it holds | Where |
|---|---|---|---|
| Railway | Hosts the system and its database | All clinic records | Amsterdam, Netherlands |
| Backblaze (B2) | Stores the nightly backup copy of the database | An encrypted copy of the database | Amsterdam, Netherlands |
| GitHub | Runs the nightly job that makes that backup | A copy of the database passes through it for a few minutes each night, then is deleted | Not fixed: GitHub chooses the location, often the United States |
| Sentry | Tells us when the system has an error | Technical details of the error only. Names, phone numbers, notes and other record contents are removed before anything is sent | European Union |
| Resend | Sends emails to clinic staff (invitations, password resets) and to patients who gave an email address (appointment booked, moved or cancelled) | Email addresses and names of staff; a patient's email address and first name, the clinic, branch, date and time, and for a video appointment the link to join. Never who the patient is seeing or why | Ireland |
How the records are protected
- Data is encrypted when it travels between the clinic and the system, and on its way to the backup store.
- The backup copies are encrypted where they are stored.
- Each staff member has their own account, and sees only what their role needs.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to give you a copy of the information we hold about you, to correct it, to delete it, or to stop using it. For website and email information, write to privacy@ifeoshealth.com. For clinic records, see above: the request goes to your clinic.
If you are unhappy with how we handle your information, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Changes to this notice
If we change this notice, we will update it here and change the date at the top.