Plain Language Summary

We collect only what's necessary to provide the service — your phone number, family member info, and health records you upload.
Your health records are encrypted and stored securely in Indian data centres.
We do NOT sell your data. Ever.
You decide who in your family can access your information and you can revoke such access at any time.
You can export or delete all your data at any time, and we will comply within 30 days.
If anything is unclear, email us at info@accusaga.com.

Introduction

This Privacy Policy ("Policy") describes how ACCUSAGA INFORMATION TECHNOLOGIES PRIVATE LIMITED ("Accusaga", "we", "our", or "us") collects, uses, stores, shares, and protects your information when you use the Vitalynx mobile application and related services (collectively, the "Service"). By using Vitalynx, you consent to the practices described in this Policy. If you do not agree, please do not use the Service.

You are requested to visit accusaga.com/terms to access our Terms of Service.

This Policy complies with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 ("DPDP Act"), the Information Technology Act, 2000 and IT (SPDI) Rules, 2011, general principles of U.S. HIPAA, and principles aligned with the EU GDPR.

About Us

Field	Details
Company name	ACCUSAGA INFORMATION TECHNOLOGIES PRIVATE LIMITED
Registered office	2nd Floor, Uptown Cyberabad Building, 100 ft Road, Madhapur, Hyderabad, Telangana, India
Jurisdiction	India (registered) with operations supporting users in India and abroad, including NRIs
Contact email	info@accusaga.com

Consent

General Consent

You agree to provide your express, free, specific, informed, unconditional, unambiguous consent for Accusaga to collect, process, store, share and purge the information submitted by you.

Consent by Minor

Accusaga does not knowingly collect personally identifiable information from minors. If you are under the age of 18 (eighteen), you must seek permission from a parent or guardian to use Vitalynx.

Information We Collect

Information you provide directly

Phone number — used for OTP authentication. We do not store passwords.
Display name — shown within the app and to family members you share records with.
Family member details — names, relationship, age, gender, location, and avatar colour.
Health records — lab reports, prescriptions, doctor visit notes, personal observations, and voice recordings.
Original documents — photographs or PDF files of lab reports and prescriptions.

Information generated by your use

Structured data extracted from uploaded lab reports (test values, dates, units, reference ranges) via OCR and AI parsing.
Sharing permission records — recipient, date, time, and level of access granted.
Synchronization and activity timestamps.

Technical information collected automatically

Device information — manufacturer, model, OS version, app version.
Anonymized crash and error reports via Sentry to diagnose and fix bugs.
Aggregated and anonymized usage data to understand feature usage and improve the Service.

What we do NOT collect

We do NOT collect precise location data (GPS).
We do NOT access your contacts, photos, or files beyond what you explicitly select for upload.
We do NOT use third-party advertising trackers.
We do NOT collect biometric data.
We do NOT scan your device for other apps or data.

How We Use Your Information

To provide the core Service — storing records, syncing across devices, displaying trends, and sharing with authorized family members.
To authenticate you securely via phone OTP.
To extract structured data from uploaded lab reports and prescriptions (OCR + AI parsing).
To enable family sharing features that you initiate.
To diagnose technical issues and improve app reliability via crash reporting.
To respond to your questions or grievances when you contact us.
To comply with applicable laws and respond to lawful requests from authorities.

We do NOT use your information to sell or rent your data, display advertisements, build behavioral profiles, or share with insurance companies or employers without your explicit authorization.

Sensitive Personal Data

Under the SPDI Rules, DPDP Act, and similar regulations, health and medical records are "sensitive personal data" requiring heightened protection. We treat all health-related information as sensitive personal data.

Health records are encrypted in transit (TLS) and at rest (database-level encryption).
Access is governed by strict Row-Level Security (RLS) rules — only you and explicitly authorized family members can access your records.
Voice notes are stored as encrypted audio files.
Original PDFs and images are stored in encrypted cloud storage.

Sharing Your Information

Sharing you initiate (with family members)

You control who receives access, what level of access they have (View, Edit, or Admin), and when access ends. You may revoke access at any time from within the app.

Sharing with service providers

Service Provider	Purpose	Data Shared
Supabase Inc.	Database hosting and authentication	Encrypted health records, account data, family relationships
Railway Corporation	Hosting AI/OCR backend	Lab report images during processing (deleted after extraction)
Twilio Inc.	SMS OTP delivery	Phone numbers and OTP codes (transient)
Sentry (Functional Software Inc.)	Crash and error reporting	Anonymized device info, error stack traces (no health data)
Expo / Anthropic	App development infrastructure	Build and deployment data only, no user data

We do NOT share with

Advertisers, marketing networks, or data brokers.
Insurance companies, unless you explicitly initiate such a share.
Government authorities, except where required by valid legal process.

Data Storage and Security

All Vitalynx data is stored on infrastructure provided by Supabase Inc., located in India (Mumbai region). We implement TLS 1.2+ encryption in transit, encryption at rest, phone OTP authentication, Row-Level Security at the database layer, signed URLs with 1-hour expiry for documents, and regular security reviews.

Breach notification

In the event of a personal data breach, we will notify the Data Protection Board of India within 72 hours and notify affected users without undue delay through the app and email.

Data Retention

Data type	Retention policy
Active account data (health records, family info)	Retained while your account is active
Account deleted by user	All personal data deleted within 30 days
Backup copies	Purged within 90 days of account deletion
Crash and error logs	30 days (anonymized, no health data)
Aggregated analytics	Indefinitely (fully anonymized)
Records required for legal compliance	As required by applicable law

Your Rights

Right to access — view all your data within the app. For machine-readable export, contact info@accusaga.com.
Right to correction — edit any record directly in the app.
Right to deletion — delete individual records or your entire account at any time.
Right to withdraw consent — withdraw consent for any specific data processing at any time.
Right to portability — request a portable copy of your data in JSON format within 30 days.
Right to grievance redressal — lodge a complaint with our Grievance Officer.
Right to nominate — under the DPDP Act, nominate another person to exercise these rights on your behalf.

Children and Minors

Account holders must be at least 18 years old. Parents or guardians may add minor children as family members within their own account. We do not knowingly collect personal data directly from children under 18 without parent/guardian consent.

Account Deletion

To delete your account and all associated data:

Open the Vitalynx app → Settings → Delete Account (with OTP confirmation), OR
Visit accusaga.com/delete-account (with OTP confirmation), OR
Email info@accusaga.com with subject "Account Deletion Request".

Note: If you have shared family members in your account, transfer ownership to another family member before deletion, otherwise their records will also be deleted.

Cookies and Similar Technologies

Vitalynx is a native mobile application and does not use traditional web cookies. We use AsyncStorage for local device storage, secure storage for authentication tokens, and cached signed URLs for temporary access to original documents. We do not use tracking pixels, third-party analytics SDKs, or advertising IDs.

Grievance Officer and Contact

In accordance with the DPDP Act and the SPDI Rules, we have designated a Grievance Officer to address any concerns regarding your personal data.

Field	Details
Name	Sai Durga
Designation	Manager
Company	ACCUSAGA INFORMATION TECHNOLOGIES PRIVATE LIMITED
Address	2nd Floor, Uptown Cyberabad Building, 100 ft Road, Madhapur, Hyderabad, Telangana, India
Email	info@accusaga.com
Response time	48 hours acknowledgement, 30 days resolution

You must exhaust this grievance redressal mechanism before approaching the Data Protection Board of India with a complaint.

For privacy-related questions, complaints, or data subject requests, please email info@accusaga.com with the subject line "Privacy Request".

Changes to This Policy

We may update this Policy from time to time. For material changes that affect your rights, we will notify you within the app and via your registered email at least 7 days before the changes take effect. Your continued use of Vitalynx after the effective date constitutes acceptance of the updated Policy.

Governing Law and Jurisdiction

This Policy is governed by the laws of India. Any disputes arising from or relating to this Policy shall be subject to the exclusive jurisdiction of the courts of Hyderabad, Telangana, India. For users outside India, applicable local data protection laws may grant additional rights.

Your privacy is not a feature. It is the foundation of everything we build.