Privacy Policy
A legal disclaimer
Effective Date: [DD/MM/YYYY]
Last Updated: [DD/MM/YYYY]
ImmunyFit HealthTech Private Limited ("ImmunyFit", "Company", "we", "our", or "us") is committed to protecting the privacy and security of your personal information.
This Privacy Policy explains how we collect, use, store, process, disclose, and protect personal information when you access or use our website, mobile applications, patient portal, digital health platform, healthcare services, and related offerings (collectively, the "Platform").
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your information in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act").
Definitions
Personal Data: Any data that identifies an individual.
Sensitive Personal Data: Health information, medical records, biomarker data, genetic/omic data, and children’s data.
Processing: Collection, use, storage, sharing, or deletion of data.
1. INFORMATION WE COLLECT
1.1 Personal Information
We may collect:
• Full Name
• Date of Birth
• Gender
• Email Address
• Mobile Number
• Address
• Emergency Contact Details
• Account Credentials
​
1.2 Health Information
We may collect:
• Symptoms and Medical History
• Autoimmune and Gut Health Information
• Clinical Assessments
• Laboratory Results
• Diagnostic Reports
• Medication Information
• Lifestyle and Wellness Information
• Nutrition Information
• Microbiome Data
• Genetic Information (where applicable)
• Health Questionnaires and Assessments
​
1.3 Technical Information
We may collect:
• Device Information
• Browser Information
• IP Address
• Login Information
• Usage Analytics
• Platform Interaction Data
• Cookies and Tracking Technologies
2. PURPOSE OF PROCESSING
We process information for:
• Providing Healthcare Services
• Patient Onboarding and Care Coordination
• Clinical Assessments and Consultations
• Generating Reports and Health Insights
• Operating Digital Twin and AI-Assisted Systems
• Monitoring Patient Progress
• Improving Platform Functionality
• Customer Support
• Billing and Payment Processing
• Regulatory Compliance
• Fraud Prevention and Security
• Research and Product Improvement (where legally permitted)
• Service Communications and Updates
Certain services may require collection and processing of health-related information. Health information may be reviewed by authorized healthcare professionals, care coordinators, laboratory partners, and authorized service providers on a need-to-know basis.
ImmunyFit implements access controls and security safeguards to protect such information.
ImmunyFit may use artificial intelligence, machine learning, predictive analytics, systems biology models, and digital twin technologies to generate assessments, insights, risk scores, simulations, and recommendations. These outputs are intended solely for informational and decision-support purposes and do not constitute medical advice.
We process personal information based on:
• User Consent
• Performance of Requested Services
• Compliance with Legal Obligations
• Legitimate Business Purposes
• Protection of Vital Interests
• Regulatory and Healthcare Requirements
We may share information with:
• Healthcare Professionals
• Care Coordinators
• Diagnostic Laboratories
• Healthcare Institutions
• Technology Service Providers
• Cloud Hosting Providers
• Payment Processors
• Legal and Regulatory Authorities
• Professional Advisors
Information is disclosed only to the extent reasonably necessary for service delivery, compliance, security, or legal obligations.
ImmunyFit does not sell personal information.
ImmunyFit may use anonymized, aggregated, or de-identified information for:
• Scientific Research
• Clinical Studies
• Product Improvement
• Healthcare Analytics
• Population Health Analysis
• Academic Collaborations
Personally identifiable information shall not be disclosed without an appropriate legal basis or consent where required.
Personal information shall be retained only for as long as necessary to:
• Provide Services
• Meet Regulatory Obligations
• Resolve Disputes
• Enforce Agreements
• Support Legitimate Business Operations
Retention periods may vary depending on applicable laws and healthcare requirements.
ImmunyFit implements reasonable technical, organizational, and administrative safeguards including:
• Encryption of Data in Transit and at Rest
• Access Controls
• Authentication Mechanisms
• Audit Logging
• Secure Cloud Infrastructure
• Regular Security Reviews
While we strive to protect information, no system can guarantee absolute security.
The Platform may use cookies and similar technologies to:
• Maintain User Sessions
• Improve User Experience
• Analyze Platform Usage
• Enhance Security
• Support Platform Functionality
Users may manage cookie preferences through browser settings where applicable.
Subject to applicable laws, users may have the right to:
• Access Their Information
• Correct Inaccurate Information
• Withdraw Consent
• Request Deletion Where Legally Permissible
• Request Information Regarding Processing Activities
• Lodge Complaints Regarding Privacy Concerns
Requests may be submitted using the contact details provided below.
​
11.1 DATA PRINCIPAL RIGHTS UNDER DPDP ACT, 2023
Users may exercise the following rights:
• Right to Access Information Regarding Processing of Personal Data
• Right to Correction, Completion, and Updating of Personal Data
• Right to Erasure of Personal Data Where Permitted by Law
• Right to Withdraw Consent
• Right to Grievance Redressal
• Right to Nominate Another Individual to Exercise Rights on Their Behalf
11.2 WITHDRAWAL OF CONSENT
Users may withdraw consent previously provided for personal data processing by contacting ImmunyFit.
Withdrawal of consent shall not affect the legality of processing undertaken before such withdrawal.
Users acknowledge that withdrawal of consent may affect ImmunyFit's ability to provide certain services.
​
11.3 GRIEVANCE REDRESSAL
Users may submit complaints or requests relating to privacy and personal data processing.
Grievance Officer:
Name: To Be Appointed
Email: grievance@immunyfit.com
ImmunyFit shall endeavor to address grievances within timelines prescribed under applicable law.
​
11.4 DATA BREACH RESPONSE
In the event of a personal data breach, ImmunyFit shall take reasonable
measures to assess, contain, investigate, mitigate, and respond to the incident.
Where required under applicable law, ImmunyFit shall notify affected individuals and relevant authorities.
​
11.5 CONSENT NOTICE
By registering, accessing, using, or continuing to use the Platform, users consent to the collection, storage, processing, disclosure, transfer, and use of personal information for the purposes described in this Privacy Policy.
​
11.6 ELECTRONIC RECORDS AND COMMUNICATIONS
Users acknowledge and agree that notices, consent requests, acknowledgements, reports, updates, and communications may be provided electronically through email, SMS, WhatsApp, patient portals, in-app notifications, or other digital channels.
Electronic communications shall satisfy any legal requirement that such communications be in writing.
The Platform is not intended for independent use by children under 18 years of age. Where services are provided to minors, information must be submitted by a parent, legal guardian, or authorized caregiver.
Where necessary, information may be processed using service providers located outside India.
Appropriate safeguards shall be implemented in accordance with applicable laws.
​
13.1 CROSS-BORDER DATA PROCESSING
Where ImmunyFit utilizes cloud infrastructure providers, technology vendors, analytics platforms, research partners, or service providers located outside India, personal information may be processed in accordance with applicable laws and appropriate safeguards.
​
13.2 HEALTHCARE RESEARCH AND DE-IDENTIFIED DATA
ImmunyFit may utilize anonymized, aggregated, pseudonymized, or de-identified information for:
• Scientific Research
• Healthcare Analytics
• Product Validation
• Platform Improvement
• Academic Collaborations
• Population Health Studies
Such activities shall be undertaken in accordance with applicable laws, ethical requirements, and consent obligations where required.
3. CLINICAL AND HEALTH DATA PROCESSING
4. AI AND DIGITAL TWIN PROCESSING
5. LEGAL BASIS FOR PROCESSING
6. DISCLOSURE OF INFORMATION
7. RESEARCH AND ANALYTICS
8. DATA RETENTION
9. DATA SECURITY
10. COOKIES AND ANALYTICS
11. USER RIGHTS
12. CHILDREN'S PRIVACY
13. INTERNATIONAL DATA TRANSFERS
14. THIRD-PARTY SERVICES
The Platform may integrate with laboratories, hospitals, pharmacies, payment gateways, communication providers, wearable devices, and other third-party services.
Such third parties may operate under their own privacy policies and terms.
15. CHANGES TO THIS PRIVACY POLICY
ImmunyFit may modify this Privacy Policy from time to time.
Updated versions shall become effective upon publication on the Platform unless otherwise specified.
16. CONTACT INFORMATION
ImmunyFit HealthTech Private Limited
Email: hello@immunyfit.com
Grievance Officer Email: grievance@immunyfit.com
Website: www.immunyfit.com
Registered Office:
Plot No. 48-B, 8-3-677/24/5,
Navodaya Colony, Yellareddyguda, Srinagar Colony, Khairatabad,
Hyderabad, Telangana 500073, India
Users may submit requests relating to:
• Access to Personal Data
• Correction of Personal Data
• Erasure of Personal Data
• Withdrawal of Consent
• Nomination Rights
• Privacy Complaints
• Data Processing Concerns
For any questions, requests, complaints, or concerns regarding this Privacy Policy, please contact ImmunyFit using the details above.