Privacy Policy

01Introduction & Who We Are

Welcome to Zuvi Care, a digital women’s healthcare platform operated by ZUVI-CARE SOLUTIONS PRIVATE LIMITED (“we”, “us”, “our”, or the “Company”). We are incorporated under the Companies Act, 2013 (CIN: U62011KA2026PTC217514) and registered in Karnataka, India.

Zuvi Care provides women with access to teleconsultation with registered medical practitioners, health tracking tools (including period tracking, pregnancy tracking, and kick counter), a peer community, and health content.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, your rights as a Data Principal under the Digital Personal Data Protection Act, 2023 (DPDP Act), and how to contact us.

By using the Zuvi Care platform, website (zuvicare.com), or mobile application, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the Platform.

02What Personal Data We Collect

2.1 — Data You Provide Directly

We collect the following categories of personal data that you voluntarily provide when registering or using Zuvi Care:

Identity Data: Full name, date of birth, age, gender identity.
Contact Data: Email address, mobile phone number, location (city/state).
Health and Medical Data (Sensitive Personal Data under DPDP Act): Menstrual cycle dates and patterns; pregnancy status, gestational age, and pregnancy-related data; kick counter records; symptoms, conditions, allergies, and medical history you enter into the Platform.
Consultation Data: Records of teleconsultations including date, time, consulting doctor, consultation notes, and prescriptions. These records are maintained for a minimum of 7 years as required under Telemedicine Guidelines, 2020.
Community Data: Posts, comments, messages, and interactions in the Zuvi Care community forums. Community posts may be visible to other community members.
Account Data: Username, password (stored in hashed form, never in plain text), account preferences and settings.
Payment Data: Payment instrument details are processed by our third-party payment gateway (e.g., Razorpay). We do not store your full card number or CVV. We store only transaction references and payment status.

2.2 — Data We Collect Automatically

When you use the Platform, we automatically collect:

Usage Data: Pages visited, features used, time spent, search queries, click patterns, and navigation paths.
Device Data: Device type, operating system, browser type and version, IP address, and device identifiers.
Location Data: Country and city-level location inferred from IP address. We do not collect precise GPS location unless you expressly grant permission.
Cookie and Tracking Data: As described in our Cookie Policy.

2.3 — Data We Receive from Third Parties

From Doctors on the Platform: Consultation notes, prescriptions, and medical records created by doctors during your teleconsultations.
From Diagnostic Laboratories (if applicable): Lab test results shared through the Platform with your consent.
From Payment Gateways: Payment confirmation and transaction status.

03Why We Collect & Process Your Data

Under the DPDP Act, 2023, we process your personal data only on the basis of your free, specific, informed, unconditional, and unambiguous consent. For health data (which is sensitive personal data), we obtain explicit consent before collection.

We will never use your health data for advertising, profiling for commercial purposes, or selling to third parties. We will never process your data for any purpose other than those listed above without obtaining fresh, specific consent from you.

04Your Consent Rights

Under the DPDP Act, 2023, you have the following rights:

Right to give consent: Consent must be free, specific, informed, unconditional, and unambiguous. We obtain consent through clear opt-in toggles — never pre-ticked checkboxes.
Right to withdraw consent: You may withdraw your consent for any purpose at any time through your account settings (Settings > Privacy > Consent Management) or by emailing info@zuvicare.com.
Right of Access: You may request a copy of all personal data we hold about you.
Right of Correction: You may request correction of any inaccurate or incomplete personal data.
Right of Erasure: You may request deletion of your personal data. We will comply unless we are required to retain data by law (e.g., consultation records must be kept for 7 years).
Right of Grievance Redressal: You may file a complaint with our Grievance Officer. If unsatisfied, you may approach the Data Protection Board of India.

To exercise any of the above rights, email info@zuvicare.com. We will acknowledge your request within 72 hours and respond substantively within 30 days.

05How We Share Your Data

We do not sell your personal data. We may share your data only in the following limited circumstances:

With Doctors on the Platform: When you book a consultation, your health profile and consultation details are shared with the doctor you are consulting. This is done with your explicit consent.
With Diagnostic Laboratories (when applicable): If you order a lab test, your name, contact details, and test request are shared with the partnered laboratory with your explicit consent.
With Technology Service Providers (Data Processors): We use third-party service providers for cloud hosting (e.g., AWS/GCP), payment processing (e.g., Razorpay), email delivery, SMS notifications, and analytics. All are bound by Data Processing Agreements.
With Regulatory Authorities: We may disclose data to comply with applicable law, court order, or direction from a regulatory authority (including the Data Protection Board of India).
In Connection with a Business Transfer: If Zuvi-Care Solutions is acquired or merged, your data may be transferred to the acquiring entity, subject to the acquiring entity honouring this Privacy Policy.

We will not share your health data, personal data, or consultation records with any advertiser, data broker, insurance company, or employer without your explicit separate consent.

06Cross-Border Data Transfers

Your personal data is stored in India by default. If we use any service provider whose servers are located outside India, we ensure: (a) the transfer is to a country notified by the Government of India as providing adequate data protection; or (b) the service provider is bound by standard contractual clauses approved under the DPDP Act.

07Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Consultation records and prescriptions are retained for a minimum of 7 years as required by Telemedicine Guidelines, 2020. Account data is retained until you delete your account, after which it is purged within 30 days except where retention is legally required.

08Data Security

We implement the following security measures to protect your personal data:

Encryption at rest: All health data and personal data stored on our servers is encrypted using AES-256 encryption.
Encryption in transit: All data transmitted between your device and our servers uses TLS 1.3.
Access controls: Role-based access controls ensure that only authorised personnel can access health data, and only to the extent necessary for their role.
Audit logs: All access to health records is logged and regularly reviewed.
Vendor security: All data processors are assessed for security compliance and bound by Data Processing Agreements.
Breach response: In the event of a data breach, we will notify the Data Protection Board of India and affected users within 72 hours.

09Children’s Data

Zuvi Care is intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18 without verifiable parental or guardian consent. If you believe a minor has provided us with personal data without parental consent, please contact info@zuvicare.com immediately.

10Cookies & Tracking

Please see our separate Cookie Policy (available on the Platform) for full details of the cookies and tracking technologies we use, the categories of cookies (strictly necessary, functional, analytics), how to manage your cookie preferences, and the third-party analytics tools we use.

11Third-Party Links

The Platform may contain links to third-party websites or services. This Privacy Policy applies only to the Zuvi Care Platform. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party site you visit.

12Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or Platform features. When we make material changes, we will: (a) update the Last Updated date at the top of this Policy; (b) notify you by email if the change is material; and (c) where required by law, seek fresh consent.

13Grievance Officer & Contact

To exercise your rights, report a concern, or ask any question about this Privacy Policy, please email info@zuvicare.com. We take all privacy concerns seriously and will respond promptly.

Grievance Officer: ARUNDHATI ATUL DESHMUKH
Email: info@zuvicare.com
Response time: Acknowledgement within 72 hours, substantive response within 30 days.