Privacy Policy

01 Introduction

This Policy applies to all users of the Platform and is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, as applicable. By using the Platform, you consent to the practices described here.

02 Information we collect

Information you provide

• Identity & contact data — name, email address, phone number, and city/location.
• Account data — login credentials and preferences.
• Enquiry data — treatment interests, goals, and messages you share with Aadhya or with Providers.
• Transaction data — records of bookings and payments (processed via our payment gateway).

Information collected automatically

• Device & usage data — IP address, browser type, device identifiers, pages viewed, and interaction data.
• Cookies & similar technologies — as described in the Cookies section below.

03 How we use information

We use your information to:

• Provide, operate, and improve the Platform and its features.
• Match you with relevant treatment categories and verified Providers.
• Enable Aadhya to respond to your questions and guide your journey.
• Process bookings and payments, and send related confirmations.
• Communicate with you about your account, updates, and support requests.
• Maintain security, prevent fraud, and comply with legal obligations.
• Send you marketing communications where you have opted in (you can opt out anytime).

04 Legal basis & consent

We process your personal data on the basis of your consent, for the performance of a contract with you, to comply with legal obligations, and for our legitimate interests in operating and improving the Platform. You may withdraw your consent at any time by contacting us, though this may limit your ability to use certain features.

05 How we share information

We do not sell your personal data. We may share information with:

• Providers — when you choose to enquire about or book a consultation, we share the details necessary to facilitate it.
• Service providers — payment gateways, cloud hosting, analytics, and communication partners who process data on our behalf under appropriate safeguards.
• Legal & regulatory authorities — where required by law, regulation, or valid legal process.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

06 Payments & PayU

Payments on the Platform are processed by third-party payment gateways, including PayU. When you make a payment, your payment details (such as card or bank information) are collected and processed directly by the payment gateway under its own privacy policy and security standards.

07 Aadhya AI & sensitive information

When you interact with Aadhya, the information you share is used to provide relevant guidance and improve the assistant. Please avoid sharing more sensitive health information than necessary. Any health-related information you choose to provide is treated as sensitive personal data and handled with additional care, in line with applicable law.

Aadhya provides general information only and does not constitute medical advice, diagnosis, or treatment.

08 Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Platform is used, and improve performance. You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

09 Data security

We implement reasonable technical and organisational security measures — including encryption in transit, access controls, and secure infrastructure — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10 Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal, accounting, or reporting obligations. When data is no longer required, we securely delete or anonymise it.

11 Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent or object to certain processing.
• Opt out of marketing communications at any time.

To exercise any of these rights, please contact us using the details below.

12 Children's privacy

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13 Changes to this Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last updated" date. We encourage you to review this Policy periodically.

14 Grievance officer

In accordance with the Information Technology Act, 2000 and rules thereunder, the contact details of the Grievance Officer are provided below. We will acknowledge and address grievances within the timelines prescribed under applicable law.

15 Contact us

For any questions or requests regarding this Privacy Policy or your personal data: