Privacy Policy

01Who we are

CareIntell™ is a product of Ayurscan Technologies Private Limited (CIN: U62011TN2026PTC197177), a company incorporated in Tamil Nadu, India (“CareIntell”, “we”, “us”). For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for personal data processed through our website and services.

CareIntell™ is currently in early access. This policy covers our website, the early access programme and the CareIntell™ app as it is made available. We will update it as features are released.

02What we collect

Information you give us

• Contact and account details: name, email address, phone number, city and country, and your relationship to the people whose records you manage.
• Health records you upload: prescriptions, lab and diagnostic reports, discharge summaries, vaccination records and similar documents, and the information we extract from them.
• ABDM-linked data: if you choose to link an Ayushman Bharat Health Account (ABHA), records shared with us through the ABDM consent framework.
• Early access and survey responses: features you are interested in, readiness quiz answers and messages you send us.
• Comments: the name, optional email and text you submit on our Insights articles.

Information collected automatically

• Device and browser type, pages visited, approximate location derived from IP address, and basic usage events, used to keep the service secure and working.
• Browser local storage used to remember article view counts, comment drafts and your preferences. See Cookies and local storage.

03How we use it

• To build and maintain the longitudinal health record, summaries and trend views you ask for.
• To share records with the doctors and family members you authorise, for the time and scope you set.
• To manage your early access place, respond to enquiries and send service messages.
• To secure the service, prevent misuse and meet legal obligations.
• To improve extraction accuracy and product quality, using de-identified data only.

We do not sell personal data, and we do not use health data for advertising or share it with advertisers, insurers or employers.

04Consent and legal basis

We process personal data on the basis of your free, specific, informed and unambiguous consent, given through a clear affirmative action, or for legitimate uses permitted under the DPDP Act (for example, responding to a medical emergency or complying with law).

You may withdraw consent at any time from your account settings or by writing to us. Withdrawal does not affect processing already carried out, but we may no longer be able to provide some features.

Records of other people

When you upload records for a parent, child or other family member, you confirm that you have their consent or are legally entitled to act on their behalf. For children under 18 and persons with a lawful guardian, we require verifiable consent of the parent or lawful guardian, and we do not track, behaviourally monitor or target advertising at children.

05Who we share it with

• People you authorise: doctors, caregivers and family members you grant access to. Access can be time-bound and scoped, and you can revoke it at any time.
• Data Processors: cloud hosting, email and support providers that process data on our instructions under written contracts with confidentiality and security obligations.
• ABDM: when you use ABHA features, data is exchanged through ABDM’s consent manager on the terms you approve.
• Authorities: where required by law, court order or a lawful request from a government agency.

06Where it is stored and how it is protected

Health records, databases and backups are hosted in data centres located in India. Our security measures include:

• Encryption at rest (AES-256) and in transit (TLS 1.3).
• Strict access controls: no staff member, doctor or family member can view a record without authorisation.
• Tokenisation of personal identifiers in analytical processing.
• Access logging, regular security reviews and a documented incident response process.

If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.

07How long we keep it

We keep your data while your account is active and for as long as needed for the purpose it was collected. When you close your account or withdraw consent, we delete or anonymise your personal data within a reasonable period, unless we are required by law to retain it. Early access data that does not convert to an account is deleted within 12 months of the programme ending.

08Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we process and the processing activities.
• Correct, complete or update inaccurate or incomplete data.
• Erase personal data that is no longer needed or for which you withdraw consent.
• Nominate another person to exercise your rights in the event of death or incapacity.
• Grievance redressal through our Grievance Officer, and to escalate to the Data Protection Board of India.

You can export your records at any time from the app. To make a request, contact us using the details below. We may need to verify your identity before acting on it.

09Cookies and local storage

Our website uses a small amount of browser local storage for functions such as counting article views, remembering comment details and saving preferences. We do not use third-party advertising cookies. You can clear local storage from your browser settings at any time.

10Changes to this policy

We will post any changes on this page and update the “Last updated” date. If a change materially affects how we use your data, we will notify you and, where required, ask for fresh consent.

11Contact and grievances

For privacy questions, requests or complaints, write to our Grievance Officer: