1. Introduction

SWASTH BHARAT AI ("we," "our," or "us"), acting as the Data Fiduciary, is committed to protecting your personal data. This Privacy Policy is issued in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 of India. It explains how we collect, use, and protect the digital personal data of our users (the Data Principals).

2. Notice and Consent

By using this application, you provide your free, specific, informed, unconditional, and unambiguous consent to the processing of your personal data for the purposes outlined in this policy. You have the right to withdraw your consent at any time, though this will not affect the legality of processing performed prior to the withdrawal.

3. Digital Personal Data We Collect

We collect only the data necessary to provide our services:

• Identity Data: Name, age, and gender (used for personalized health analysis).
• Contact Data: Email address (for account management and notifications).
• Health Data: Symptoms and health history provided during AI analysis.
• Log Data: IP address and usage patterns for security and service improvement.

4. Purpose of Processing

Your personal data is processed for the following specified purposes:

• To provide AI-powered preliminary health assessments.
• To offer Ayurvedic care recommendations.
• To enable epidemic surveillance and public health reporting (in anonymized/aggregated form).
• To manage your user account and provide grievance redressal.

5. Rights of the Data Principal

Under the DPDP Act 2023, you have the following rights:

• Right to Access: You can request a summary of the personal data being processed and the processing activities.
• Right to Correction and Erasure: You can request the correction of inaccurate data or the erasure of data that is no longer necessary for the purpose it was collected.
• Right to Grievance Redressal: You can register a grievance with our Grievance Officer regarding any act or omission by us regarding your personal data.
• Right to Nominate: You have the right to nominate any other individual to exercise your rights in the event of death or incapacity.

6. Duties of the Data Fiduciary

We ensure the accuracy of your data, implement reasonable security safeguards to prevent personal data breaches, and notify the Data Protection Board of India and affected users in the event of a breach.

7. Processing Data of Children

As per Indian law, processing the personal data of a child (under 18 years) requires verifiable parental consent. We do not knowingly process child data without such consent and will not engage in tracking or behavioral monitoring of children.

8. Data Retention

We retain personal data only as long as necessary to fulfill the specified purpose or as required by applicable Indian laws.

9. Grievance Redressal Mechanism

If you have any questions or wish to exercise your rights, please contact our Grievance Officer: