Privacy Policy

Mayura Medical Care LLP (“we”, “us”, “our”, or “NadiIQ”) is committed to protecting the privacy and security of your personal and health information. This Privacy Policy explains how we collect, use, store, and protect information when you use the NadiIQ Smart Ring, the NadiIQ mobile application, the NadiIQ web platform (collectively, the “Services”), and any related health monitoring tools.

By using our Services, you consent to the collection, use, and processing of your information as described in this Privacy Policy, in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian laws.

The NadiIQ Smart Ring is a health monitoring tool designed to track and record various physiological parameters for preventive wellness purposes. It is intended for personal health awareness and wellness monitoring.

2.1 Personal Information

When you create an account or use our Services, we may collect:

• Name (first name and last name)
• Email address
• Phone number
• Date of birth
• Gender
• Height, weight, and other body metrics
• Emergency contact details
• Account credentials (encrypted)

2.2 Health & Wellness Data

The NadiIQ Smart Ring and connected devices continuously monitor and collect the following physiological data:

• Heart Rate: Continuous heart rate monitoring including resting, active, and peak heart rate
• Blood Oxygen Saturation (SpO2): Peripheral oxygen saturation levels
• Blood Pressure: Systolic and diastolic blood pressure readings
• Body Temperature: Continuous skin temperature monitoring
• Physical Activity: Step count, distance travelled, calories burned, and activity duration
• Sleep Data: Total sleep duration, deep sleep, light sleep, REM sleep stages, and sleep quality scores
• Heart Rate Variability (HRV): Beat-to-beat heart rate variation for stress and recovery analysis

2.3 Device & Technical Information

• Device identifiers (MAC address, serial number)
• Firmware version
• Connectivity status and battery information
• Mobile device type, operating system, and app version
• IP address and browser information (for web platform access)

2.4 Health Records & Reports

• Lab test results and reports uploaded by you
• Medication records
• Doctor consultation notes
• Care plans and wellness program participation data
• Genetic analysis reports (if opted in)
• Nutrition and fitness plan data

We use the collected information strictly for the following purposes:

• Health Monitoring & Insights: To process your physiological data and provide personalised health insights, trends, risk scores, and early warning alerts
• Preventive Care: To enable your assigned physicians and care managers to monitor your health parameters and provide timely interventions
• Emergency Alerts: To generate critical alerts when vital signs fall outside safe thresholds and notify your emergency contacts and healthcare providers
• Account Management: To create and manage your NadiIQ account, authenticate your identity, and provide customer support
• Service Improvement: To improve the accuracy of our monitoring algorithms, enhance user experience, and develop new wellness features
• Communication: To send you important health alerts, service updates, and care plan reminders
• Compliance: To comply with applicable legal and regulatory requirements

Your health data is strictly internal to NadiIQ. We do not sell, rent, trade, or share your personal or health information with any third parties, including but not limited to insurance companies, employers, advertisers, or data brokers.

Your data may only be accessed by:

• Your Assigned Healthcare Team: Physicians and care managers assigned to your care within the NadiIQ platform, solely for the purpose of monitoring and managing your wellness
• Authorised NadiIQ Personnel: Our technical and support staff who require access to maintain the platform, strictly under confidentiality obligations

We may disclose your information only if required by:

• A valid court order or legal process under Indian law
• A medical emergency where disclosure is necessary to protect your life or health
• Regulatory requirements under the DPDPA, 2023 or other applicable Indian legislation

5.1 Storage Location

All personal and health data collected through NadiIQ is stored on secure servers located in India, in compliance with data localisation requirements under Indian law.

5.2 Security Measures

We implement robust technical and organisational measures to protect your data, including:

• End-to-end encryption of health data during transmission (TLS/SSL)
• Encryption of sensitive data at rest using industry-standard encryption protocols
• Secure authentication with hashed and salted passwords (bcrypt)
• Role-based access control (RBAC) ensuring only authorised personnel can access your data
• API key authentication with scoped permissions for device communication
• Rate limiting and automated threat detection on all endpoints
• Regular security audits and vulnerability assessments
• Audit logging of all data access events

5.3 Data Retention

We retain your personal and health data for the duration of your active membership and treatment period with NadiIQ. Upon termination of your membership or upon your written request for data deletion, we will securely delete or anonymise your data within a reasonable period, except where retention is required by applicable law.

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to Access: You may request a summary of your personal data being processed and the processing activities undertaken
• Right to Correction & Erasure: You may request correction of inaccurate or misleading data, completion of incomplete data, or erasure of data that is no longer necessary for the purpose it was collected
• Right to Grievance Redressal: You have the right to have your grievances addressed by our designated Grievance Officer
• Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity
• Right to Withdraw Consent: You may withdraw your consent for data processing at any time. Please note that withdrawal of consent may affect your ability to use certain features of our Services

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

By registering on the NadiIQ platform and using the NadiIQ Smart Ring, you provide your informed consent for the collection, processing, and storage of your personal and health data as described in this Privacy Policy.

For sensitive personal data (including health data), we obtain explicit consent at the time of data collection. You may withdraw your consent at any time by contacting us at [email protected], subject to any legal obligations requiring continued processing.

NadiIQ Services are intended for individuals aged 18 years and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete such data.

Our web platform may use essential cookies and similar technologies to maintain your session, authenticate your identity, and ensure the security of your account. These are strictly necessary cookies required for the functioning of the platform.

We do not use cookies for advertising, third-party tracking, or behavioural profiling purposes.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any material changes will be communicated to you via email or through a prominent notice on our platform. The revised policy will be effective from the date of publication. We encourage you to review this page periodically.

For any questions, concerns, or grievances regarding this Privacy Policy or the handling of your data, please contact:

If you are unsatisfied with our response, you may file a complaint with the Data Protection Board of India as constituted under the DPDPA, 2023.