End User Terms and Conditions and Health Information Consent

1. Acceptance

By creating an account or using the App, you agree to these Terms and acknowledge the Privacy Notice.

2. Purpose of the App

The App enables your healthcare professional, dietician, personal trainer, coach or other authorised professional to provide and monitor meal plans and nutritional programmes.

3. Professional relationship

• Your healthcare or other professional relationship remains with the professional who provides your meal plan.
• The App is a technology platform and does not independently provide medical, nutritional or healthcare advice.

4. Health information

• You acknowledge that use of the App may involve the processing of information concerning your health, nutritional status, dietary habits, weight, allergies, medical history and related information.
• Such information may constitute special personal information under POPIA.

5. Consent to processing

Where consent is required as the lawful basis for processing:

• I voluntarily, specifically and knowingly consent to the processing of my personal information, including information concerning my health, for the purposes described in the Privacy Notice and for providing the services requested through the App.
• I understand that I may withdraw consent where consent is the applicable lawful basis, subject to legal, professional and contractual consequences and requirements.

6. Professional access

I acknowledge that my authorised healthcare professional or other professional may access the information necessary to provide and monitor the services for which I have engaged that professional.

7. Subscription

• I agree to pay the subscription fee specified in the subscription plan.
• Payments may be processed through PayFast.

8. Accuracy

I agree to provide information that is accurate and to notify my healthcare- or other professional where material information changes.

9. Security

• I understand that no electronic system can guarantee absolute security and agree to keep my login credentials confidential and secure.
• The Company shall implement appropriate technical and organisational safeguards, including: encryption; access control; role-based permissions; authentication; audit logging; backups; vulnerability management; incident-response procedures; and appropriate security monitoring.

10. Sub-processors

• I authorise the use of the following service providers: Supabase; Vercel; PayFast, to the extent necessary for payment processing; and other sub-processors notified to me from time to time (listed in the Privacy Notice).
• The Company shall ensure that relevant sub-processors are contractually bound by appropriate confidentiality, security and data-protection obligations.

11. Security incidents

• The Company shall notify me without undue delay after becoming aware of a security incident affecting patient information.
• The Company shall provide reasonable assistance in investigating, containing and responding to the incident.

12. Prohibited use

I will not:

• Permit another person to use my account;
• Attempt to access another user's information;
• Interfere with the security or operation of the App;
• Copy or misuse the App; or
• Use the App for an unlawful purpose.

13. Account termination

• I may request closure of my account (from my Account page).
• I acknowledge, however, that closure of an account does not necessarily result in immediate deletion of health information where the information is required to be retained by law or applicable professional requirements.

14. Emergency disclaimer

• The App is not an emergency medical service.
• In an emergency, contact the appropriate emergency medical service or healthcare provider.

15. Technical availability

The Company will use reasonable efforts to maintain availability of the App but does not guarantee uninterrupted or error-free operation.

16. Privacy

Our processing of personal information is governed by our Privacy Notice.

17. Complaints and requests

Requests concerning personal information may be directed to: Information Officer: Melissa Nel, email melissa@orivaos.com.

18. Governing law

These Terms are governed by the laws of the Republic of South Africa.

19. User acknowledgements

When you create your account, you give each of these acknowledgements by ticking its own box in the App:

• I have read and understood the Privacy Notice.
• I agree to the End User Terms and Conditions.
• Where consent is required, I consent to the processing of my health and other personal information as described in the Privacy Notice.
• I understand that my authorised healthcare professional/professional will have access to information necessary to provide the services. This includes my menstrual cycle data unless I switch sharing off in Account.
• I understand that health records may be retained after cancellation or termination where required by law or professional rules.

The App records your name, the date and the device used as your electronic acknowledgement.

20. Ori and allergy matching

• Ori, the App's AI coach, and automatically generated meal plans are produced by software and can be wrong. Ori is designed to refer clinical topics (such as eating disorders, medication and pregnancy) to your professional, but it is not a substitute for professional care.
• Matching recipes against your stated allergies and exclusions is a convenience based on ingredient names, not a medical safety system. Always check that a recipe is safe for a serious allergy or medical dietary requirement before eating it.