SMARTnCODE Technologies, Jain Sadguru Capital Park, Hyderabad, Telangana, India, is the Data Fiduciary/Controller responsible for your personal data. For questions regarding this Privacy Policy, the processing of your personal data, or to exercise your applicable privacy and data protection rights, you may contact our Privacy & Grievance Support Team at support@smartncode.com. Our Support Team will receive and route privacy-related requests to the appropriate personnel within SMARTnCODE Technologies for review and resolution.

We encrypt personal data in transit and at rest and maintain session management controls that allow you to view and control your active sessions yourself through Profile → Linked Accounts and Devices → Active Sessions.

We may share your personal data with service providers, including cloud, AI/ML, calendar/health-platform, payment, and communications providers, as necessary to provide the Service, or with authorities where legally required or permitted. We require appropriate contractual, confidentiality, and security safeguards for providers processing data on our behalf. We do not sell your personal data or permit third parties to use your health data for their own advertising. We will provide applicable information about material sub-processors, their purposes, processing locations, and any AI model-training use, including required choices or opt-outs.

If we experience a data breach affecting your personal data, we will notify you and the relevant regulator within the timeline required by the law applicable to you.

We do not sell your personal data. We do not use health data collected through the Service for third-party advertising.

We will notify you in-app of changes to this Policy. Where a change materially affects a purpose you previously consented to, we will seek your renewed, affirmative consent before relying on the new purpose.

When you create your account, you separately confirm: Health Data Processing (required for core functionality), AI Analysis of Uploaded Reports (required for report insights), Anonymized Research and Product Improvement (optional, off by default), and Health Tips & Updates (optional, off by default). You can change any optional preference at any time in Account Settings.

If you add a family member to your account, we collect the information you provide about them (name, mobile number, relationship, date of birth, gender, blood group, and any health records you upload on their behalf). Health-data processing for that profile does not begin until either (a) the added person accepts an invitation and confirms their own consent, or (b) where the profile belongs to a minor, we have verified your identity and your relationship or guardianship status.

Subject to the law applicable to you, you may have the right to: access a copy of your data; correct inaccurate data; request deletion or erasure; withdraw consent at any time (without affecting the lawfulness of past processing); object to certain processing; and request data portability. Most of these rights can be exercised directly in-app (Profile → Account Information, Health Preferences, Linked Accounts, Delete Account) or by contacting us at support@smartncode.com.

"Health Tips & Updates" is opt-in, off by default, and can be withdrawn at any time without affecting your access to core Service features.

If we identify that a profile belongs to a minor without completed guardian verification, we will suspend processing of that profile's health data (rather than delete it outright) until verification is completed or the profile is removed by the account holder.

Account operation relies on the necessity of processing to perform our contract with you. AI health analysis relies on your explicit consent. Anonymized research and marketing communications each rely on separate opt-in consent. No purpose involving your health data relies on a general "legitimate interest" basis.

Your data may be processed in India. Where data is transferred outside India, we rely on the framework in Section 16 of the DPDP Act, 2023, which permits transfers to any country by default unless the Central Government has specifically restricted that country by notification (no such restriction is currently in force). Where other jurisdictions' residents' data is transferred internationally, we apply the safeguard appropriate to that jurisdiction — for example, a documented privacy-impact assessment for Quebec residents under Law 25, or an approved safeguard/adequacy finding for Saudi residents under the PDPL.

We retain your personal data while your account remains active. When you delete your account, your personal data is permanently deleted from our systems within seconds and cannot be retrieved or recovered. We do not retain your data after account deletion.

Our enterprise AI processing models include Google Cloud Gemini, OpenAI, and Anthropic. We use these providers to generate the Health Score, 'Needs Attention' flags, and report summaries you see in the app. We do NOT use your uploaded medical reports, documents, or data to train these providers' general-purpose foundation models.

Health Scores, 'Needs Attention' flags, and AI summaries are generated by automated analysis of the data you upload. These outputs are informational only and are not a medical diagnosis. You have the right to request a human-reviewed explanation of, and to contest, any such output by contacting us at no cost, and you are never required to treat an automated output as final.

Health data, biometric App-Lock data, and any family member's health data receive access controls and encryption beyond the baseline applied to account and identity data, and are never used for behavioural advertising. Face ID/fingerprint data used for App Lock is processed and stored only locally on your device via your device manufacturer's secure hardware enclave and is never transmitted to or stored on our servers.

We use your location only to power the Nearby hospitals/pharmacies search and the SOS emergency-call feature. We do not retain your location beyond the session unless you save a location, and we do not share it with advertisers.

When you use the SOS feature, we use your device's location, where available, to attempt to display or dial a locally-appropriate emergency number. The SOS feature is not a monitored emergency-response service and does not transmit your location to any emergency dispatcher on our behalf. You remain responsible for contacting your local emergency services directly in a genuine emergency.

The AI models underlying your Health Score and report summaries are trained on datasets that may not equally represent all demographic groups, geographies, or rare medical conditions. We encourage you to interpret AI outputs with this limitation in mind and to treat them as a starting point for a conversation with your healthcare provider, not a final assessment.

The AI-generated Health Score and summary for any given report are derived only from the specific report(s) you upload for that analysis. They are not cross-referenced against other users' data to produce your score.