Privacy Policy

Health FMS is a financial management system designed to support Primary Health Care facilities, LGAs, States, and National administrators in managing financial records, transactions, business plans, reports, approvals, audit trails, and related operational activities.

This Privacy Policy explains how we collect, use, store, and protect information when users access and use the Health FMS platform.

1. Information We Collect

We may collect the following types of information:

• User account information such as name, email address, phone number, role, and access level.
• Facility, LGA, State, and National administrative information.
• Financial transaction records including income, expenses, categories, subcategories, balances, and attachments.
• Business plan information, projected revenue, projected expenditure, approval status, and facility planning records.
• Audit trail data such as user actions, IP address, browser/device information, source, and timestamps.
• Reports, uploaded documents, images, and supporting files submitted through the platform.

2. How We Use Information

We use collected information to:

• Provide secure access to the platform.
• Manage users, roles, permissions, and hierarchy-based access.
• Process PHC, LGA, State, and National financial transactions.
• Generate dashboards, analytics, charts, reports, and summaries.
• Support business plan creation, review, approval, and monitoring.
• Maintain audit trails for accountability, security, and compliance.
• Detect, prevent, and investigate unauthorized activity or misuse.

3. Role-Based Access

Health FMS uses role-based and hierarchy-based permissions. Facility users may only access information related to their assigned facility. LGA users may access relevant facilities under their LGA. State users may access assigned LGA and facility records within their state. National users may access records across all levels where authorized.

4. Data Sharing

We do not sell user data. Information may only be shared with authorized administrators, approved government or institutional stakeholders, service providers supporting the platform, or where required by law, regulation, audit, or security review.

5. Data Security

We apply reasonable technical and organizational safeguards to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include authentication, access controls, encrypted connections, audit logs, and permission-based data restrictions.

6. Data Retention

We retain information for as long as necessary to provide the platform, comply with legal and reporting obligations, support audits, resolve disputes, and maintain accurate financial and operational records.

7. User Rights

Authorized users may request access, correction, update, or deletion of personal information where permitted by law and institutional policy. Some financial, audit, and compliance records may need to be retained even after a deletion request.

8. Data Deletion Requests

Users may submit a data deletion request through the Data Deletion page. Requests will be reviewed based on identity verification, authorization level, legal requirements, financial reporting obligations, and audit retention rules.

9. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

10. Contact

For privacy questions, support, or data-related requests, please contact the Health FMS support or administration team.