Privacy Policy

1. Who we are

Swift Health Limited ("Swift", "we", "us", "our") operates Kin by Swift, the diaspora health-insurance site at getswift.health/kin. Swift is a Health Maintenance Organisation accredited by Nigeria's National Health Insurance Authority (NHIA). Kin itself is still pre-launch: no cover is on sale yet.

No health insurance policies are sold or activated through Kin until enrolment opens publicly. What you can do today is create an account and save the family you want to cover, or join a waitlist for countries we haven't launched in. Data collected on this site is used only to run your account, keep you informed about the launch, and pre-populate enrolment if you later choose to activate cover.

2. What data we collect

When you create an account (the front door for cover in Nigeria) we capture:

• Sign-in credentials: your email address and a password. The password is stored only in hashed form by our authentication provider; we never see or keep it in plain text.
• Your profile: full name, date of birth, gender, the country you live in, and your preferred billing currency.
• Who you'd cover: for each family member you save to your dashboard: their name, relationship to you, and the contact and location details you provide.

When you join a waitlist (for countries where Kin hasn't launched) we capture:

• Your contact details: full name, email address, phone number (optional).
• Your location: country of residence and city.
• Who you'd cover: for each family member you list: name, relationship to you, age range, and the city and state they live in.
• Optional notes: anything you write in the "What matters most to you" box, and how you heard about Swift.

In both cases we also capture technical metadata: the IP address your request came from and your browser's user-agent string, recorded automatically as a basic spam-prevention and security measure.

We do not collect any health data on this site. No medical history, no NIN, no payment card details. Those are only relevant at the point you decide to activate cover, and you'd see a separate consent flow then.

3. How we use it

• To operate your account: keep you signed in, show the family you've saved on your dashboard, and have everything ready so you can activate cover the moment enrolment opens.
• To send the account emails you'd expect, such as the verification email when you sign up.
• To email you when Kin opens for enrolment in your family's country.
• To pre-populate the enrolment form so you don't have to re-enter family details if you choose to activate cover.
• To understand which markets have the strongest diaspora demand, so we know where to launch first.
• To occasionally write to you about progress on Kin (provider partnerships, regulatory milestones). You can unsubscribe from any update email.

We will never sell your data, and we will never share it with advertising networks. Aggregate signup counts by country may appear in pitches or investor materials, but never with identifying detail.

4. Legal basis

If you're in the UK or EU, we process your data under UK GDPR and EU GDPR. The legal basis is your consent, given when you submit the form. You can withdraw consent any time (see section 6).

If you're in Nigeria, the Nigeria Data Protection Act 2023 (NDPA) and the NDPR apply, on the same consent basis.

For all other jurisdictions we apply the strictest of the three regimes that could plausibly apply.

5. Who else sees your data

Only the following parties have any access:

• Supabase, our database host. Data is stored in their EU region, encrypted at rest.
• Resend, our transactional email provider. Used only to deliver your account-verification or waitlist-confirmation email and (later) launch notifications.
• Vercel, our application host. Sees request metadata (IP, user-agent) but not the form contents.
• Swift Health Limited staff, internal team members involved in launch operations, on a strict need-to-know basis.

No advertising networks. No data brokers. No other third parties.

6. Your rights

You can at any time:

• Access a copy of everything we hold about you.
• Correct anything wrong (e.g. a typo in a family member's name).
• Delete your waitlist record, or close your account and have its data deleted. We'll do this within 30 days and confirm by email.
• Withdraw consent for launch emails. Just reply to any email asking to be removed.

To exercise any of these, email hello@getswift.health with the request. We aim to respond within seven days, and will always respond within thirty.

You can also lodge a complaint with the relevant regulator: the UK ICO, your EU country's data protection authority, or the Nigeria Data Protection Commission (NDPC), though we'd ask you to come to us first.

7. Data retention

Waitlist signup records are held until either: (a) Kin launches in your family's country and you activate cover, in which case your record moves into the live member system under its own retention policy; or (b) you ask us to delete it; or (c) three years from your signup date, after which we purge any signup that never converted, on the basis that the product's clearly not for you and we shouldn't be holding the data indefinitely.

Account records are kept for as long as your account exists. Ask us to close your account and we delete its data on the same 30-day basis, unless you have activated cover by then, in which case the live member retention policy applies.

8. Cookies

We use only the cookies the site needs to work: a session cookie that keeps you signed in to your account and dashboard, and the cookie required for forms (including the waitlist form) to submit securely. No tracking cookies, no third-party advertising cookies, no fingerprinting.

9. Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256 via Supabase). Passwords are stored only as hashes. Access to the production database is restricted to named Swift staff with two-factor authentication. We never store payment card details on this site, and no payment is taken while Kin is pre-launch.

10. Contact

Data protection queries: hello@getswift.health

Our registered postal address will be published here once Swift Health Limited's incorporation completes.

See also our Terms of Service.