SehatSphere ("we", "the platform") is the Data Fiduciary for the personal and health data you provide. This notice explains what we collect, why, who we share it with, how long we keep it, and the rights you have as a Data Principal.
| Category | Examples | Purpose |
|---|---|---|
| Identity & contact | Name, email, phone, age, gender | Account creation, authentication |
| Health data (sensitive) | Medical conditions, vitals, prescriptions, lab reports, uploaded files | Storing and presenting your health records |
| Wellbeing data | Mood entries, emotion/EQ surveys | Wellbeing tracking features you opt into |
| Technical | IP address, device/user-agent, access logs | Security, audit, fraud prevention |
We process your data on the basis of the consent you give at registration and can update at any time. Consent is specific, informed, and freely given. You may withdraw consent at any time; withdrawal is as easy as giving it and does not affect processing already carried out lawfully.
| Processor | Purpose |
|---|---|
| Google Gemini AI | AI health assistance and summaries — your query is processed by Google Gemini when you use AI-powered features |
| Cloudinary / Firebase / AWS | Encrypted storage of uploaded medical files |
| Gmail / Twilio | Sending OTP and notifications |
| Doctors / family you share with | Only via time-limited links you explicitly create and can revoke |
Health files and structured medical data are encrypted at rest (AES-256). Access to your data by clinicians or mentors requires your active consent and is logged in an audit trail.
We keep your data only as long as needed for the purposes above or as required by law. When you delete your account, your access is disabled immediately and your account is flagged for erasure; your personal data is then removed in line with our retention schedule, except records we are legally required to retain (e.g. security and audit logs).
You can exercise all of these in the app under Privacy & Security:
Questions or complaints about your data? Contact our Grievance Officer:
Email: krishna.sehatsphere@gmail.com
We aim to acknowledge grievances promptly and respond within the timelines required under the DPDP Act.
We may update this notice from time to time. Material changes will be notified in the app, and the version and effective date at the top will be updated.