AYKA Care | 24/7 Online Doctor Consultation & Health Plans India

Privacy Policy

AYKA CLYVORA PRIVATE LIMITED

PRIVACY POLICY

Effective Date: 11th May 2025

Last Updated: 11th May 2025

Governed by: Laws of India

Contact: support@aykacare.in

1. Introduction

AYKA CLYVORA PRIVATE LIMITED ("AYKA", "Company", "We", "Us", or "Our"), operating the AYKA Care platform at www.aykacare.in, is committed to protecting the privacy, confidentiality, and security of all personal data collected through its platforms, services, and establishments. This Privacy Policy is formulated in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and all other applicable Indian laws and regulations.

This Privacy Policy governs the collection, processing, storage, use, disclosure, and protection of personal data of all users of the AYKA platform, including Experts, Establishments, Patients, Alliance Partners, Third-Party Partners, and Visitors.

By accessing or using any AYKA platform or service, you consent to the collection and use of your information as described in this Privacy Policy.

2. Scope of Application

This Privacy Policy applies to all AYKA platforms and services, including:

AYKA Website: www.aykacare.in

AYKA Mobile Applications (Android and iOS)

AYKA CRM and Administrative Systems

AYKA Establishments: AYKA Life (Alliance Offices), AYKA Clinic, AYKA Hospital

All third-party integrations and tools used by AYKA

3. Categories of Data Collected

3.1 Personal and Professional Information

Full name, date of birth, gender, nationality

Contact details: mobile number, email address, residential/business address

Government-issued identity documents (Aadhaar, PAN, Passport, etc.) where required

Professional credentials, medical registration numbers, and certifications (for Experts and Establishments)

Business registration details, GST number (for Establishments and Alliance Partners)

Profile photographs and identity verification documents

3.2 Health and Medical Information (Sensitive Personal Data)

Medical history, current health conditions, prescriptions

Consultation notes, diagnostic reports, lab test results

Health insurance details and claims information

Appointment records and treatment history

Health and medical information is classified as Sensitive Personal Data under Indian law and is collected only with your explicit informed consent and processed with the highest standards of security and confidentiality.

3.3 Financial Information

Payment method details (processed through secure, PCI-DSS compliant gateways)

Transaction history, subscription details, invoice records

Bank account details for expert/establishment payouts (encrypted storage)

3.4 Technical and Usage Data

IP address, device ID, operating system, browser type

Location data (only when explicitly permitted by the user)

Platform usage patterns, session data, interaction logs

Cookies and tracking technologies data

4. Purpose of Data Collection and Use

AYKA processes personal data strictly for the following lawful purposes:

Facilitating healthcare service connections between Users and Service Providers

Account registration, identity verification, and profile management

Processing payments, managing subscriptions, and administering payouts

Sending appointment confirmations, reminders, and service notifications

Improving platform functionality, user experience, and technical performance

Conducting fraud prevention, security monitoring, and compliance checks

Fulfilling legal and regulatory obligations under applicable Indian law

Sending marketing communications and promotional offers (with explicit consent; opt-out available at any time)

Career and job placement services for registered Experts

Generating aggregated, anonymized analytical reports for platform improvement

5. Legal Basis for Processing

AYKA processes personal data on the following legal bases under the DPDP Act, 2023:

Consent: Where you have provided explicit, informed, and free consent

Contract: Where processing is necessary to provide services you have requested

Legal Obligation: Where processing is required by applicable Indian law or court order

Legitimate Interest: Where processing serves a legitimate business interest that does not override your rights

6. Sharing of Personal Data

AYKA does not sell, rent, or trade your personal data. Personal data may be shared in the following limited circumstances:

6.1 With Service Providers on the Platform

Healthcare professionals, clinics, hospitals, labs, pharmacies, and other registered Service Providers receive only the data necessary to render the specific service requested by the User.

6.2 With Authorized Third-Party Technology Partners

Payment gateways, cloud hosting providers, analytics platforms, and communication service providers — all bound by strict data processing agreements ensuring compliance with applicable law.

6.3 With Legal and Regulatory Authorities

Disclosure may be made to government bodies, law enforcement agencies, courts, or regulatory authorities when required by applicable law, court order, or to protect AYKA's legal rights.

6.4 Business Transfers

In the event of a merger, acquisition, or restructuring of AYKA, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

7. Data Security

AYKA implements industry-standard technical and organizational security measures, including:

End-to-end encryption of sensitive personal and medical data

Role-based access control limiting data access to authorized personnel only

Regular security audits, vulnerability assessments, and penetration testing

Secure, encrypted cloud storage with data backup protocols

Multi-factor authentication for platform access

Despite these measures, no digital platform can guarantee absolute security. Users are advised to maintain strong passwords, not share login credentials, and report any suspicious activity to support@aykacare.in immediately.

8. Data Retention

AYKA retains personal data for the duration necessary to fulfil the purposes outlined in this Policy and as required under applicable Indian law, including:

Medical records: As mandated by applicable Indian healthcare regulations

Financial and transaction records: As required under the Income Tax Act and GST laws

Account data: For the duration of active account and a reasonable period thereafter for legal compliance

Legal hold data: For the duration of any pending legal proceedings or regulatory investigations

Upon expiry of the applicable retention period, data will be securely deleted or irreversibly anonymized.

9. Your Rights Under the DPDP Act, 2023

As a Data Principal under the DPDP Act, 2023, you have the following rights:

Right to Access: Request information about what personal data we hold about you

Right to Correction: Request correction of inaccurate or incomplete data

Right to Erasure: Request deletion of your personal data, subject to legal retention obligations

Right to Grievance Redressal: Raise complaints regarding data processing with our Grievance Officer

Right to Nominate: Nominate another individual to exercise your rights in case of your incapacity or death

Right to Withdraw Consent: Withdraw consent for data processing at any time (subject to impact on service availability)

To exercise any of the above rights, contact our Grievance Officer at: support@aykacare.in

10. Grievance Officer

In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023, AYKA has appointed a Grievance Officer for data protection matters:

Organization: AYKA CLYVORA PRIVATE LIMITED

Email: support@aykacare.in

Website: www.aykacare.in

Jurisdiction: Saharanpur, Uttar Pradesh, India

All grievances will be acknowledged within 48 hours and resolved within 30 days of receipt.

11. Cookies and Tracking Technologies

AYKA uses cookies and similar tracking technologies to enhance user experience. Types of cookies used:

Essential Cookies: Required for core platform functionality — cannot be disabled

Analytical Cookies: Used to understand usage patterns and improve performance

Marketing Cookies: Used for personalized communication (with consent; can be opted out)

Users may manage cookie preferences through their browser settings. Disabling certain cookies may affect platform functionality.

12. Data of Minors

The AYKA platform is intended for users aged 18 years and above. AYKA does not knowingly collect personal data of individuals below 18 years of age without verified parental or guardian consent. If AYKA discovers that data of a minor has been collected without such consent, it will be promptly deleted.

13. Changes to This Privacy Policy

AYKA reserves the right to update this Privacy Policy at any time. Material changes will be communicated via email notification or a prominent notice on the platform. Continued use of the platform after the effective date of any update constitutes acceptance of the revised policy. Users are advised to periodically review this Policy.

14. Governing Law

This Privacy Policy is governed by the laws of India, including the DPDP Act, 2023, and the Information Technology Act, 2000. Disputes shall be subject to the exclusive jurisdiction of the courts of Saharanpur, Uttar Pradesh, India.

For privacy-related inquiries: support@aykacare.in