Last updated: 28 September 2026
Aarogyam Plus Healthcare Private Limited (“Aarogyam+”, “we”) runs the Aarogyam+ app and website. This policy explains what personal data we process, why, where it is stored and your rights under the Digital Personal Data Protection Act, 2023. You can withdraw your consent at any time in Settings.
Your name, date of birth, gender, blood group and mobile number; health information you add or upload (records, reports, prescriptions, medicines, allergies, conditions, readings, family history); appointments, messages and notes with doctors you choose; your location only when you use SOS or nearby care; and basic device and security data. Face ID or fingerprint data never leaves your device.
All your data is stored in India, in Amazon Web Services data centres in Mumbai, with encrypted backups kept in India. It is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256). Access is limited to authorised systems and is logged.
You. A doctor sees your records only after you share them — by showing a share code, booking an appointment or starting a chat — and only until the access expires or you revoke it in Settings. Our staff do not view your health records unless you ask for help or the law requires it. We never sell your data or share it with advertisers, insurers or employers.
Amazon Web Services hosts the service and reads uploaded documents (Amazon Textract and Amazon Bedrock) in the Mumbai region. AWS End User Messaging and WhatsApp deliver login codes. Razorpay processes payments; we never see your card details or UPI PIN. Your documents are not used to train AI models.
We keep your data while your account is active. You can delete your account and all your data at any time in Settings → Delete account. It is removed from our live systems immediately and from encrypted backups within 35 days. Payment records may be kept where tax law requires.
You can see your data, correct it, delete it, withdraw your consent, nominate a person to act for you if you die or cannot act, and raise a grievance. We respond within 30 days.
Accounts are for people aged 18 or over. A child's health records should be managed by a parent or legal guardian.
Data Protection Officer and Grievance Officer Aarogyam Plus Healthcare Private Limited Email: dpo@aarogyamplus.in If you are not satisfied with our response, you can complain to the Data Protection Board of India.