Privacy Policy
Last Updated: 24/08/2026
PRIVACY POLICY
OLDFUL HEALTH CARE PLATFORMS LLP (operating under the brand name AYUXA) values your privacy and is committed to protecting your personal and health information. This Privacy Policy details how we collect, use, store, share, and protect your data when you visit our website (www.ayuxacare.com) or use our AYUXA mobile application (collectively, the "Platform").
This policy is published in compliance with the provisions of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act.
By accessing the Platform, creating an account, or utilizing our elder care and healthcare services, you expressly consent to the practices described in this Privacy Policy.
1. Information We Collect & Proxy Consent
To provide comprehensive healthcare and concierge services, we collect various categories of data. Proxy Consent: If you are registering or uploading health data on behalf of an elderly parent or relative, you legally warrant that you possess their express consent to share their Personally Identifiable Information (PII) and Sensitive Personal Data and Information (SPDI) with AYUXA.
- Personally Identifiable Information (PII) Name, age, gender, date of birth, residential address, email address, emergency contacts, and phone number.
-
Sensitive Personal Data and Information (SPDI)
- Medical history, physical/physiological/mental health conditions, and allergy records.
- Prescriptions uploaded for medicine delivery.
- Diagnostic reports, imaging, and blood test results generated through our partners.
- Financial Information Billing address and transaction history. Note: We do not store your credit card, debit card, or UPI PINs on our servers. All processing is securely tokenized by Razorpay.
- Technical & Device Information IP address, device type, operating system, browser type, cookies, and app usage telemetry.
- Location Data Precise or approximate GPS location data (via Google Maps API) required strictly to ensure accurate dispatch of phlebotomists, caregivers, and local medicine deliveries.
2. How We Use & Anonymize Your Information
We process your data for service execution and platform improvement:
- Service Fulfillment: Scheduling blood tests, coordinating elder care visits, and routing medicine orders.
- Communication: Triggering transaction alerts, OTPs, and health reports via SMS/WhatsApp.
- Data Anonymization & Research: AYUXA reserves the right to aggregate and fully anonymize your health data (stripping it of all identifying markers) to use for statistical research, operational analytics, and artificial intelligence (AI) model training to improve elder care outcomes.
- Compliance: To enforce our Terms and Conditions, investigate fraud, and prevent platform abuse.
3. Sharing Data & Third-Party Exemption
As an aggregator, sharing specific data points with partners is mandatory. Exemption of Liability: While we mandate strict data confidentiality agreements with our partners, AYUXA is not liable for independent data breaches, leaks, or privacy violations originating directly from the servers or physical premises of these third-party entities.
- Diagnostic Partners: Name, age, and test requirements are shared with Labs for clinical reporting.
- Local Pharmacies: Prescriptions and addresses are shared with independent local stores to fulfill medicine orders.
- Technology Providers: APIs (fast2sms, Google, Razorpay) process restricted data points strictly to execute their specific technical functions.
- Legal/Statutory Authorities: We will disclose data unconditionally if mandated by a court order, government agency, or cyber-crime division.
4. Data Security & Assumption of Cyber Risk
We deploy robust, industry-standard security protocols, including server encryption and strict internal access controls. However, the internet is inherently vulnerable. By using our Platform, you acknowledge that no digital transmission is 100% secure. You assume the risk of unauthorized access resulting from highly sophisticated cyber-attacks, zero-day exploits, or your own failure to secure your account credentials. AYUXA shall not be liable for damages stemming from unpreventable data breaches.
5. Data Retention & Statutory Overrides
We retain your data as long as your account is active or as needed to provide services. Important: Even if you request account deletion, Indian laws governing medical establishments, financial accounting, and cyber-security mandates require us to securely retain certain prescriptions, clinical reports, and transaction logs for up to seven (7) years. We will delete data only when all statutory retention periods have expired.
6. Your Rights Regarding Your Data
Under the Digital Personal Data Protection (DPDP) Act, you possess the following rights:
- Right to Access & Rectify: You can view and correct inaccuracies in your basic profile data via the mobile app.
- Right to Erasure (Limited): You may request account deletion, subject to the statutory retention overrides mentioned in Section 5.
- Right to Withdraw Consent: You may withdraw consent for data processing at any time. However, this will result in the immediate termination of your ability to use AYUXA's core services, as healthcare cannot be facilitated without processing health data.
To exercise these rights, email compliance@ayuxa.co.in.
7. Cookies and Tracking Technologies
Our website uses first-party and third-party cookies to remember your preferences, track platform performance, and facilitate targeted local routing. By continuing to use the site, you consent to our use of tracking pixels and analytics tools. You may disable cookies via your browser, but this will break certain functionalities of the AYUXA platform.
8. Changes to this Privacy Policy
AYUXA reserves the absolute right to update, modify, or amend this Privacy Policy at any time without individual prior notice, to reflect changes in the law, our data collection practices, or platform features. The revised policy is effective immediately upon being published on this page. Your continued use of the Platform constitutes your binding acceptance of the updated policy.
9. Grievance Officer & Contact Details
In accordance with the Information Technology Act, 2000, and the DPDP Act, the name and contact details of the Grievance Officer are provided below. Any privacy-related concerns will be acknowledged within 48 hours and resolved within 30 days.
No. 39-7-1, 3rd Floor, 7th Main,
Appareddy palya, Indiranagar,
Bangalore 560038