Privacy Policy

Last updated: 7 June 2026

Introduction

Jiva Health (“Jiva”, “we”, “our”) values your privacy. This policy explains what information we collect when you use our services, how we use it, and the choices you have. This is a placeholder document — final legal copy will be provided by counsel before public launch.

Information we collect

We collect information you provide directly to us — such as your name, phone number, language preference, and any health-related details you share with our doctors or care coordinators. We also collect basic device and usage data to keep the service reliable.

How we use information

We use your information to deliver the care services you request, coordinate with doctors, labs, pharmacies, and hospitals on your behalf, and to follow up on your care.

Sharing

We share information only with the providers (doctors, labs, pharmacies, hospitals) needed to deliver your care, and with service providers who help us operate Jiva. We do not sell your data.

Data retention

We retain your personal and health information only for as long as needed to provide our services, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

Account information (name, phone number, language preference) — retained for the lifetime of your account, and deleted within 30 days of account closure unless we are legally required to keep it longer.

Health records, consultation notes, prescriptions, and lab reports — retained for up to 7 years from the date of creation, in line with medical record-keeping requirements under applicable Indian regulations (including the Clinical Establishments Act and guidance from the Medical Council of India / National Medical Commission). After this period, records are securely deleted or irreversibly anonymised.

Payment and billing records — retained for up to 8 years to comply with tax and accounting laws (Income Tax Act and GST regulations).

Device, log, and usage data — retained for up to 12 months for security, fraud prevention, and service-reliability purposes, after which it is deleted or aggregated into anonymous analytics.

Marketing and communication preferences — retained until you opt out or close your account.

When you request deletion of your account, we will delete or anonymise your personal data within 30 days, except for records we are required by law to retain (such as medical and financial records, which are held for the periods stated above and then deleted). Backups containing your data are overwritten on a rolling basis and fully purged within 90 days of deletion.

Your choices

You can request a copy of your data, request deletion, or withdraw consent at any time by contacting us at privacy@jivahealth.example. We will respond within 30 days, subject to the legal retention requirements described above.

Contact

Questions about this policy? Reach us at privacy@jivahealth.example.