Legal

Privacy Policy

Last updated: 24 October 2026

1. Information We Collect

ArogyaSync processes clinical telemetry data (vital signs captured by edge devices) and administrative data (hospital staff credentials, device metadata). Application data is processed by ArogyaSync services and the documented cloud providers, not solely within hospital infrastructure. Separately authorised capture campaigns can collect monitor images; see the data protection explanation for capture and public-proof distinctions.

2. How We Use Your Data

Clinical data supports monitoring, alert generation, historical trends and evidence verification. Administrative data supports authentication, audit logging and system operations. Any monitor-image collection or subsequent training use needs its own consent and review process; agree the permitted uses and access with the hospital before enabling them.

3. Data Storage and Security

The documented application uses TLS connections, Google Cloud database and file storage in Mumbai, and cloud-provider encryption at rest. Confirm the configuration for your deployment. Public ledger proofs are different: the anchoring service submits a CSV batch hash and timestamp to Polygon Amoy, a public test network; the signing wallet and proof are publicly visible. Raw readings and patient identifiers are not contract fields. A hash is not encryption or a guarantee of anonymity, accuracy or complete capture; underlying clinical records remain separate.

4. Data Retention

Retention and deletion must be confirmed for clinical records, evidence files, monitor images, backups and account data with the hospital and ArogyaSync. This page does not establish a universal retention period or immediate erasure guarantee. Direct data export or deletion requests through the hospital administration or the contact below. Public ledger proofs are permanent and are not erased by account deletion or removal of their source file.

5. Third-Party Sharing

We do not sell or share personal data with third parties for marketing. Data may be shared with insurance verification partners only when the hospital has an active integration and patient consent is on record.

6. Contact

For privacy inquiries, contact our Data Protection Officer at privacy@arogyasync.com.

7. Account and Data Deletion

ArogyaSync users can request account deletion from the mobile app under Profile → Delete Account. If you cannot access the app, use our account deletion request page. Personal account data is handled through the account deletion process. Clinical, evidence and audit records may have separate retention requirements. Confirm the applicable deletion or anonymisation process with the hospital and ArogyaSync; account deletion does not erase public ledger proofs.