Privacy Policy

In the course of providing the Platform and Services, the Company may collect, receive, record, organize, store, process, retrieve, use, disclose, transmit, and otherwise handle certain categories of personal data and health-related information pertaining to Users. The information collected by the Company may include the following categories of information:

2.1 Personal Identification Information: The Company may collect personal information voluntarily provided by the User during registration, onboarding, inquiry submission, service utilization, or other interactions with the Platform. Such information may include the User’s full name, mobile number, email address, date of birth, gender, residential address, profile information, and any other information submitted in connection with the Services.

2.2 Health and Medical Information: In connection with healthcare and wellness-related Services, the Company may collect, process, and maintain medical history, prescriptions, laboratory and diagnostic reports, consultation records, treatment details, health conditions, wellness information, insurance-related information, electronic medical records, biometric information, wearable-device information, lifestyle-related information, mental wellness inputs, vaccination records, insurance identifiers, dependent or family member health records, and other healthcare information voluntarily submitted or generated through the Platform.

2.3 Account Registration and Verification Information:The Company may collect information necessary for creating, administering, authenticating, and securing User accounts, including mobile number verification records, OTP authentication details, account credentials, login activity, consent records, communication preferences, and other verification information.

2.4 Payment and Transaction Information: Where applicable, the Company may collect billing details, subscription information, transaction references, payment status, and purchase history. Complete payment card or banking credentials are not stored unless expressly stated otherwise. Payment processing may be undertaken by authorized third-party payment gateway providers.

2.5 Device, Technical, and Usage Information:The Company may automatically collect technical information such as IP address, browser type, device identifiers, operating system, application version, network information, access timestamps, approximate geolocation, referral URLs, clickstream data, and usage analytics for security, fraud prevention, troubleshooting, analytics, and service improvement.

2.6 Communication and Customer Support Information:The Company may maintain records of customer support requests, feedback, grievances, email correspondence, chat interactions, call recordings, SMS communications, and other communications exchanged during the provision of Services.

2.7 Cookies and Similar Technologies: The Platform may use cookies, SDKs, pixels, web beacons, and similar technologies to improve functionality, remember User preferences, analyze usage, maintain security, and enhance the overall quality and efficiency of the Services.

3.1 By accessing or using the Platform, registering an account, verifying identity through OTP, or availing Services, the User consents to the collection, storage, processing, and sharing of personal data and health-related information in accordance with this Privacy Policy.

3.2 The User further consents to the processing of health-related information for providing healthcare and wellness-related services through the Platform. Users may withdraw consent by contacting the Company through the support or grievance channels provided on the Platform. However, withdrawal of consent may affect the availability of certain Services. The User acknowledges and agrees that certain categories of personal data and health-related information may require explicit, specific, or purpose-based consent under applicable law. The Company may therefore obtain separate consents, notices, declarations, acknowledgements, or permissions from the User in relation to specific healthcare services, diagnostics, consultations, wellness programs, insurance-linked services, marketing communications, teleconsultations, data sharing arrangements, or technology-enabled healthcare features.

3.3 The Company may retain certain information where required under applicable law or for legitimate business, regulatory, or record-keeping purposes.

The Company may disclose, share, transfer, or otherwise make available personal data and health-related information to third parties strictly on a need-to-know basis and only for lawful purposes connected with the operation of the Platform, provision of Services, compliance with legal obligations, or legitimate business and operational requirements. Such disclosure or sharing may include the following categories of recipients:

4.1 Healthcare Professionals and Service Providers: The Company may share User information, including health-related information, with doctors, medical practitioners, diagnostic laboratories, pharmacies, wellness providers, hospitals, clinics, healthcare professionals, and other authorized healthcare service providers for consultations, diagnosis, treatment, prescription fulfilment, laboratory testing, healthcare coordination, and provision of Services requested by the User.

4.2 Diagnostic Laboratories and Collection Partners: The Company may disclose relevant information to laboratories, home sample collection agencies, radiology centers, pathology service providers, and related healthcare partners in connection with diagnostic testing, report generation, appointment scheduling, and healthcare service facilitation.

4.3 Third-Party Service Providers: The Company may engage third-party vendors, consultants, contractors, technology providers, analytics providers, cloud infrastructure providers, payment gateway operators, customer support agencies, communication service providers, and other authorized service providers to assist in operating the Platform and delivering Services. Such third parties shall be permitted to access information only to the extent necessary for the performance of their authorized functions and shall be obligated to maintain appropriate confidentiality and security measures in accordance with applicable law and contractual obligations.

4.4 Payment Processing and Financial Institutions: Transaction-related information may be shared with banks, payment gateway service providers, payment processors, financial institutions, and authorized payment partners for payment processing, fraud prevention, refunds, reconciliations, and financial compliance requirements.

4.5 Corporate Partners and Wellness Programs: Where Services are provided in connection with corporate wellness programs, insurance arrangements, employer-sponsored healthcare initiatives, or institutional partnerships, the Company may share limited information with such authorized partners strictly to the extent necessary for administration, coordination, reporting, or provision of Services, subject to applicable confidentiality obligations and lawful processing requirements.

4.6 Legal and Regulatory Authorities: The Company may disclose personal data or health-related information where such disclosure is required under applicable law or is reasonably necessary for compliance with legal obligations, court orders, governmental directions, regulatory requirements, law enforcement requests, judicial proceedings, or investigations conducted by competent authorities.

4.7 Protection of Rights and Prevention of Misconduct: The Company may disclose information where necessary to enforce its legal rights, investigate security incidents, detect or prevent fraud, respond to claims, protect the safety and security of Users or the public, or prevent unauthorized, unlawful, fraudulent, or malicious activities relating to the Platform or Services.

4.8 Business Transfers and Corporate Restructuring: In the event of any merger, acquisition, amalgamation, restructuring, sale of assets, financing transaction, transfer of business, or similar corporate transaction involving the Company, User information may be disclosed or transferred as part of such transaction, subject to applicable confidentiality and data protection obligations. The Company does not sell or rent personal data or health-related information of Users to third parties for monetary consideration. The Company shall take reasonable measures to ensure that any disclosure or sharing of information is carried out in accordance with applicable law and subject to appropriate confidentiality and security safeguards.

5.1 The Company shall retain personal data, health-related information, medical records, consultation records, prescriptions, diagnostic reports, transaction records, communication records, consent records, account information, technical logs, and other information collected through the Platform only for such period as may be reasonably necessary to fulfill the purposes for which such information was collected, processed, or retained, including for the provision of Services, continuity of healthcare operations, maintenance of medical and operational records, compliance with applicable laws, regulatory obligations, healthcare practices, contractual obligations, audit requirements, dispute resolution, fraud prevention, security monitoring, enforcement of legal rights, archival purposes, business continuity requirements, and other lawful or legitimate business purposes.

5.2 The duration for which personal data and health-related information may be retained shall vary depending upon the nature, sensitivity, category, purpose, operational relevance, and legal significance of the information concerned, including applicable healthcare record retention practices, medical documentation requirements, insurance-related obligations, taxation and accounting requirements, cybersecurity considerations, ongoing investigations, litigation holds, statutory retention obligations, regulatory expectations, internal compliance requirements, technological dependencies, backup protocols, and other operational or legal considerations applicable to the Company or the Services.

5.3 The Company reserves the right to retain certain categories of personal data or health-related information for longer durations where such retention is necessary or advisable for compliance with applicable law, protection of legitimate business interests, establishment or defense of legal claims, healthcare continuity purposes, fraud detection and prevention, enforcement of contractual rights, maintenance of audit trails, preservation of evidentiary records, or protection of the safety, integrity, security, and reliability of the Platform or Services.

5.4 Upon expiry of the applicable retention period or where retention is no longer reasonably necessary for the purposes identified herein, the Company may delete, erase, anonymize, aggregate, archive, isolate, or otherwise render such information non-identifiable, subject to applicable legal, regulatory, operational, healthcare, technical, or archival requirements.

5.5 Notwithstanding anything contained herein, the Company may retain anonymized, aggregated, de-identified, statistical, or non-identifiable information for analytics, research, service improvement, operational intelligence, cybersecurity, business reporting, product development, healthcare insights, and other lawful business purposes, to the extent permitted under applicable law.

5.6 Personal data and health-related information collected by the Company may be stored, processed, backed up, transferred, or maintained on servers, cloud infrastructure, databases, software systems, technology platforms, or systems owned or managed by the Company or its authorized third-party service providers, which may be located within or outside India, subject to applicable legal and contractual safeguards.

6.1 The Company recognizes the importance of maintaining the security, integrity, confidentiality, and protection of personal data and health-related information entrusted to it by Users and undertakes to implement reasonable security practices and procedures in accordance with applicable law.

6.2 The Company adopts appropriate administrative, technical, operational, and organizational safeguards designed to protect personal data and health-related information against unauthorized access, disclosure, misuse, alteration, destruction, accidental loss, unlawful processing, or other security incidents. Such safeguards may include, without limitation, access controls, authentication mechanisms, encryption protocols, secure storage practices, firewalls, monitoring systems, restricted data access policies, internal confidentiality obligations, periodic security assessments, backup procedures, and other reasonable security measures considered appropriate by the Company. However, the User acknowledges that no electronic transmission, storage system, or digital infrastructure can be guaranteed to be completely secure or immune from unauthorized access, cyberattacks, system failures, or technological vulnerabilities.

6.3 Access to personal data and health-related information shall be restricted to authorized personnel, employees, service providers, consultants, healthcare partners, and representatives of the Company who require such access for lawful business, operational, healthcare, technical, or compliance-related purposes and who are bound by appropriate confidentiality obligations.

6.4 The Company may engage authorized third-party technology infrastructure providers, cloud service providers, analytics providers, communication partners, and data processing entities for the operation and maintenance of the Platform and Services. The Company shall take reasonable steps to ensure that such third parties maintain appropriate security standards and confidentiality obligations in relation to the information processed on behalf of the Company.

6.5 In the event of any actual or suspected security incident, unauthorized access, or data breach affecting personal data or health-related information, the Company may take such measures as it deems necessary or appropriate under applicable law, including investigation, mitigation, notification, system protection, and cooperation with regulatory or law enforcement authorities.

7.1 Subject to applicable law, the User may have certain rights in relation to the personal data and health-related information processed by the Company through the Platform.

7.2 The User may request access to, review of, correction of, updating of, or rectification of personal data or health-related information that is inaccurate, incomplete, misleading, or outdated, by contacting the Company through the designated support or grievance channels made available on the Platform.

7.3 The User may also request withdrawal of consent previously provided for the processing of personal data, subject to applicable legal, contractual, regulatory, operational, and healthcare-related requirements. Subject to applicable law, Users may also have the right to nominate another individual to exercise certain rights in relation to their personal data in the event of death or incapacity of the User, in accordance with the provisions of applicable law.

7.4 The User may opt out of receiving promotional, marketing, or non-essential communications from the Company by following the unsubscribe instructions provided in such communications or by contacting the Company through the designated support channels. Notwithstanding the foregoing, the Company may continue to send transactional, administrative, security-related, healthcare-related, or service-related communications that are necessary for the operation of the Platform or provision of Services.

7.5 The User acknowledges that certain requests relating to deletion, restriction, withdrawal of consent, or cessation of processing may affect the Company’s ability to provide Services, maintain healthcare records, facilitate consultations, process transactions, comply with legal obligations, or continue the User’s access to the Platform, either wholly or partially.

7.6 The Company reserves the right to refuse, limit, defer, or reject any request relating to access, correction, deletion, withdrawal, or restriction of processing where such refusal is permitted or required under applicable law, regulatory requirements, contractual obligations, healthcare record retention requirements, fraud prevention considerations, ongoing investigations, dispute resolution requirements, or protection of legal rights and interests.

7.7 Any requests relating to personal data or health-related information may be submitted to the Company through the grievance or contact details specified in this Privacy Policy. The Company shall endeavour to respond to such requests within such timelines as may be prescribed under applicable law or within a reasonable period.

8.2 The information collected through cookies and similar technologies may include Internet Protocol (IP) address, browser type, operating system information, device identifiers, session activity, access times, referral URLs, browsing behaviour, clickstream data, and interactions with features or content available on the Platform.

8.3 Users may choose to disable, reject, block, delete, or restrict cookies through their browser or device settings. However, the User acknowledges and agrees that disabling or restricting certain Tracking Technologies may affect the availability, personalization, security, efficiency, functionality, performance, or accessibility of certain features or Services available on the Platform. Certain Tracking Technologies may continue to operate where strictly necessary for Platform security, authentication, fraud prevention, network management, compliance purposes, session continuity, or other essential operational functions necessary for the lawful operation of the Platform or provision of Services.

8.4 The Company may also use third-party analytics or technology service providers that utilize Tracking Technologies to collect information relating to usage of the Platform, subject to applicable confidentiality and data protection obligations.

8.5 The Company may also maintain logs, records, and analytics relating to User interactions with the Platform for cybersecurity purposes, healthcare operations, troubleshooting, audit requirements, fraud prevention, dispute resolution, service optimization, operational monitoring, and compliance with applicable legal or regulatory obligations. Users are encouraged to review any separate Cookie Policy, consent management interface, browser guidance, or device settings made available by the Company from time to time for additional information regarding the use of Tracking Technologies on the Platform. The Company does not knowingly engage in cross-context behavioural advertising, profiling for advertising purposes, or sale of health-related information for targeted advertising in a manner prohibited under applicable law.

8.6 Separate Cookie Policy: The Company may maintain a separate Cookie Policy, consent management interface, or tracking technology notice describing in greater detail the categories, purposes, operation, management, and control mechanisms relating to cookies, SDKs, pixels, analytics technologies, device identifiers, and similar tracking technologies used in connection with the Platform and Services. Users are encouraged to review such Cookie Policy periodically for additional information regarding the Company's use of Tracking Technologies.

9.1 The Platform may contain links to or integrations with third-party websites, applications, healthcare providers, laboratories, pharmacies, payment gateway providers, and other external service providers. Where reasonably appropriate, the Company may enter into contractual arrangements, confidentiality obligations, data processing terms, or security-related agreements with authorized third-party service providers processing personal data on behalf of the Company.

9.2 The Company does not control and is not responsible for the privacy practices, content, security standards, availability, or policies of such third-party services. Any interaction or sharing of information with such third parties shall be governed by their respective terms and privacy policies.

9.3 Users are advised to review the applicable policies of third-party service providers before accessing or using their services.

9.4 The inclusion of third-party services or links on the Platform shall not be construed as an endorsement or recommendation by the Company. Where third-party service providers are engaged by the Company for operating the Platform or facilitating Services, the Company shall take reasonable steps to ensure that such providers are subject to appropriate confidentiality and security obligations.

10.1 The Platform and Services are not intended for use by individuals who are not competent to contract under applicable law, except where access or use is under the supervision, control, involvement, or authorization of a parent, lawful guardian, or authorized representative, or legally competent individual acting on behalf of a minor, dependent, patient, or other individual.

10.2 The Company does not knowingly collect, process, store, disclose, share, or otherwise handle personal data or health-related information directly from minors without appropriate authorization or consent from a parent, lawful guardian, or authorized representative, where such consent is required under applicable law.

10.4 Where the Company becomes aware, receives notice, or reasonably believes that personal data or health-related information relating to a minor has been collected, processed, or disclosed without appropriate authorization or lawful basis, the Company may take such measures as it deems necessary or appropriate, including restricting access, suspending accounts, deleting information, seeking additional verification, or limiting processing activities. The Company reserves the right to request additional documentation, declarations, consent confirmations, guardian authorizations, age verification records, or supporting information where reasonably required for compliance with applicable law, healthcare obligations, security requirements, or protection of minors.

11.1 The Platform may utilize automated systems, artificial intelligence-enabled tools, machine learning technologies, predictive models, algorithmic processing systems, analytics engines, software-based recommendation systems, workflow automation tools, natural language processing technologies, data analysis tools, digital assistance technologies, and other technology-enabled or automated processing mechanisms (collectively referred to as "Automated Technologies") in connection with the operation, management, enhancement, security, optimization, and delivery of the Platform and Services.

11.3 The User acknowledges and agrees that certain features, functionalities, communications, outputs, summaries, analytics, wellness insights, recommendations, reminders, reports, or responses made available through the Platform may be generated, assisted, filtered, prioritized, processed, or supported through Automated Technologies and may involve automated processing of personal data or health-related information.

11.4 Any automated outputs, summaries, wellness insights, health-related information, analytics, scores, recommendations, notifications, reminders, reports, informational prompts, or technology-generated content made available through the Platform are intended solely for informational, facilitation, operational, administrative, engagement, coordination, or wellness-support purposes and shall not independently constitute medical advice, clinical advice, diagnosis, treatment recommendations, emergency healthcare services, prescription authority, or professional medical opinion unless expressly stated otherwise by the Company or the relevant healthcare professional.

11.5 The Platform and Automated Technologies are not intended to replace independent medical judgment, clinical evaluation, emergency healthcare services, or consultation with qualified healthcare professionals. Users are strongly advised to seek appropriate professional medical advice and independently verify healthcare-related information before making medical, health-related, treatment-related, or emergency-related decisions based upon any information, output, or feature available through the Platform.

11.6 The Company does not warrant or guarantee that any Automated Technologies, automated outputs, predictive systems, recommendations, wellness insights, analytics, reminders, or technology-enabled features shall be error-free, complete, accurate, uninterrupted, clinically appropriate, suitable for any specific purpose, or free from technological limitations, biases, delays, inaccuracies, or system errors.

11.7 The Company may engage authorized third-party technology providers, analytics providers, cloud infrastructure providers, artificial intelligence service providers, communication partners, automation vendors, or other technology partners in connection with the operation, maintenance, improvement, or support of Automated Technologies used on the Platform, subject to applicable confidentiality, security, and data protection obligations.

11.8 The Company reserves the right, at its sole discretion and subject to applicable law, to introduce, modify, suspend, restrict, discontinue, upgrade, replace, or remove any Automated Technologies, AI-enabled features, analytics systems, recommendation engines, automation functionalities, or technology-enabled services available through the Platform at any time without prior notice.

11.9 Nothing contained in this Privacy Policy shall be construed as creating any obligation on the part of the Company to provide fully automated healthcare services, automated medical diagnosis, automated treatment recommendations, or autonomous clinical decision-making services unless expressly stated otherwise in writing by the Company and permitted under applicable law.

12.1 While the Company endeavours to implement reasonable security and operational safeguards, the User acknowledges that the use of digital platforms and transmission of information over the internet may involve risks beyond the reasonable control of the Company.

13.1 The Company may update or revise this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, business practices, technology standards, security measures, or the Services offered through the Platform. Any revised version of this Privacy Policy shall become effective upon its publication on the Platform unless otherwise specified by the Company.

13.2 Where considered appropriate, the Company may notify Users of material changes through the Platform, email communications, SMS, application notifications, or other reasonable means of communication. Users are encouraged to periodically review this Privacy Policy to remain informed about the manner in which their information is collected, used, and protected.

13.3 Continued access to or use of the Platform following the publication of an updated Privacy Policy shall constitute the User’s acknowledgment and acceptance of the revised Privacy Policy, to the extent permitted under applicable law.

14.1 The Company is committed to addressing concerns, complaints, grievances, and requests relating to privacy, data protection, processing of personal data, health-related information, and use of the Platform in a fair, timely, and reasonable manner.

15.1 By registering on or using the Platform, the User consents to receiving communications from the Company through phone calls, SMS, WhatsApp, email, push notifications, and other electronic communication channels.

15.2 Such communications may include appointment confirmations, consultation updates, prescription notifications, payment alerts, service-related updates, customer support communications, wellness information, promotional messages, and other communications relating to the Platform or Services.

15.3 Users may opt out of receiving promotional or marketing communications by following the unsubscribe instructions provided in such communications or by contacting the Company through the support channels available on the Platform. However, the Company may continue to send transactional, operational, healthcare-related, security-related, or legally required communications necessary for providing Services and operating the Platform. Users also acknowledge that communications may be sent notwithstanding registration under Do Not Disturb (DND) preferences where such communications are transactional, healthcare-related, service-related, security-related, or otherwise permitted under applicable law.

15.4 The Company shall not be responsible for delays or failures in communication caused by third-party service providers, technical failures, network issues, or circumstances beyond the reasonable control of the Company.

16.1 The Platform is a technology-enabled healthcare facilitation platform that enables Users to access healthcare and wellness-related services offered by independent healthcare professionals and third-party service providers. The Company does not independently provide medical advice, diagnosis, treatment, emergency care, or clinical services unless expressly stated otherwise. Any wellness insights, health summaries, recommendations, analytics, reminders, automated outputs, or technology-enabled informational features made available through the Platform are intended solely for informational, facilitation, or wellness-support purposes and shall not be construed as medical advice, diagnosis, or treatment recommendations.

16.2 Medical consultations, prescriptions, diagnostic services, laboratory reports, treatment recommendations, and other healthcare services made available through the Platform are provided by independent healthcare professionals or third-party healthcare service providers, who shall remain solely responsible for such services.

16.3 The information available on the Platform is intended for general informational and service facilitation purposes and should not be treated as a substitute for professional medical advice, diagnosis, or treatment. The Platform is not intended for medical emergencies. Users should seek immediate assistance from qualified healthcare professionals or emergency medical services in the event of a medical emergency.

16.4 The Company shall not be responsible for any medical decisions, treatment outcomes, or healthcare services provided by independent healthcare professionals or third-party healthcare service providers through the Platform.

17.1 The Company reserves the right to suspend, restrict, or terminate access to the Platform or Services in the event of any violation of applicable law, this Privacy Policy, the Terms & Conditions, misuse of the Platform, fraudulent activity, security concerns, or submission of false information.

17.2 Users may request deactivation or deletion of their account through the support or grievance channels made available on the Platform.

17.3 Once your request is processed, your account will be deactivated immediately and deleted within 15 days

17.4 The Company may retain certain personal data, health-related information, transaction records, consultation records, prescriptions, diagnostic reports, or other information where required under applicable law or for legitimate business, regulatory, security, fraud prevention, dispute resolution, or record-keeping purposes.

17.5 Deletion or deactivation of an account may result in restricted access to certain Services, records, or functionalities available through the Platform. The Company may retain anonymized or de-identified information for analytics, research, operational improvement, and lawful business purposes. Deletion requests shall be processed subject to reasonable verification requirements, technical feasibility, legal obligations, healthcare record retention requirements, and operational dependencies.

18.1 This Privacy Policy shall be governed by and construed in accordance with the laws of India.

18.2 Any dispute arising out of or relating to this Privacy Policy, the Platform, or the Services shall be subject to the exclusive jurisdiction of the competent courts located in Mumbai, Maharashtra.

18.3 Nothing contained herein shall restrict the Company from seeking appropriate interim or injunctive relief before any court or competent authority having jurisdiction.