Privacy Policy

At Atulyam Health, discretion is the foundation of everything we do. This policy explains what we collect, why, and the choices you have.

Information we collect

• Account details: name, email, phone and the plan you choose.
• Health information: details you share with us or your clinicians to coordinate care. Your optional health profile can include date of birth, blood group, height and weight, conditions, allergies, medicines, past surgeries, family history, pregnancy and lifestyle, health insurance details and a copy of your insurance card, an emergency contact, care preferences, family members on a Family plan and your ABHA number. Every field is optional and you can clear the profile yourself at any time.
• Usage & payment: how you use the service and records of transactions and Atulyam Points.

How we use it

• To coordinate your care, appointments, medications and second opinions.
• To operate the Atulyam Points programme and your membership.
• To keep you informed and to improve our service.

How we protect it

Your information is treated as strictly confidential. Access is limited to your care team, records are encrypted, and we never sell your data. Deliveries of mental health and sexual health treatments arrive in plain, unbranded packaging with a neutral billing descriptor. Every other medicine is delivered in its usual packaging.

Consent and lawful basis

We process your personal and health information on the basis of the consent you give when you create your account, and only for the purposes set out above. You can withdraw that consent at any time by writing to us; we will then stop processing your information, except where the law requires us to keep a record. Health information is sensitive, so we ask for it only when it is needed to arrange your care, and we do not use it for marketing.

Where and how long we keep it

Your information is stored in Google Cloud's Mumbai region, encrypted at rest and in transit, with access limited by account-level rules to you, your care team and our administrators. Prescriptions and records you upload are kept for as long as your membership is active and for the period medical record-keeping rules require afterwards. Enquiries that do not become a membership are deleted within 12 months. Backups are taken daily and retained for 14 days.

Sharing

We share information only with the hospitals, clinicians and partners needed to deliver the care you request, and where required by law. We do not sell or rent your personal information to anyone.

Analytics & cookies

Our public pages use Google Analytics to understand how visitors find and move around the site, so we can improve it. Analytics sets cookies and records general information such as the pages viewed, approximate location (from a shortened, anonymised IP address), browser and device type. It does not receive your name, email, phone number or any health information.

We deliberately do not run analytics on your member dashboard, consultation pages or points statement, the areas where your health information appears. You can opt out of Google Analytics entirely using Google's browser opt-out add-on, or by blocking cookies in your browser settings; the site works normally either way.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us, at any time, to tell you what information we hold about you, to correct it, to erase it, to withdraw your consent, and to nominate a person who may exercise these rights for you if you are unable to. Write to care@atulyamhealth.com from your registered email, or ask your health manager. We respond within 7 working days. You can also opt out of non-essential communications at any time.

Children

Members under 18 are added to a family membership by a parent or guardian, who gives consent on their behalf and manages their information.

If something goes wrong

If we ever learn of a breach that affects your information, we will inform you and the Data Protection Board of India without undue delay, and tell you what happened and what we are doing about it.

Grievance officer

Daksh Dangi, Founder, Atulyam Health. Email care@atulyamhealth.com with "Privacy" in the subject line. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Contact

Questions about privacy? Email contact@atulyamhealth.com or get in touch.

Your account is secured by Firebase Authentication, and your data is stored privately in Firestore under rules that let only you access your own record.