Skip to main content

Legal

Privacy policy

What we collect, why we collect it, who can see it, and how you get it deleted.

Last updated: 19 August 2026

This is a draft, not a binding policy. The text below is placeholder copy written to show the structure of this document. It has not been reviewed by counsel and does not yet state ōmyā jīvātu's actual legal commitments. Final copy will replace it before launch.

1. Who we are

ōmyā jīvātu is operated by Transformatrix LLP, registered in India. For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described below.

2. What we collect

Identity and contact details (name, mobile number, email, addresses you save), and health data you choose to provide: age, blood group, existing conditions, allergies, current medication and emergency contacts. We also collect location data at the moment you raise an SOS and for the duration of that case.

3. Why we collect it

To dispatch an ambulance to you, to give the attending Emergency Healthcare Professional the clinical context needed to treat you, to notify the receiving hospital, and to keep a record of the case. We do not use your health data for advertising, profiling, or any purpose unrelated to responding to an emergency.

4. Who can see it

The EHP assigned to your active case, and the hospital we hand you over to. Access is role-based and every access is logged. Administrators of a society or corporate plan can see enrolment status and anonymised usage only — never an individual's health data or case detail.

5. How long we keep it

Your profile is retained while your account is active. Case records are retained for the period required by applicable medical-record and statutory obligations, which we will state specifically on request.

6. Your rights

Under the DPDP Act 2023 you have the right to access, correct and erase your personal data, to withdraw consent, and to nominate someone to exercise these rights on your behalf. Where a legal obligation requires us to retain a specific record, we will tell you which record and for how long rather than declining without explanation.

7. Security

Health data is encrypted at rest using AES-256 and in transit using TLS 1.3. Access is restricted by role and audit-logged.

8. Children

For members under 18, consent is provided by the parent or guardian holding the account, in line with the DPDP Act's requirements for the processing of children's data.

9. Contact

Our Data Protection Officer handles all requests relating to this policy, and our Grievance Officer handles complaints. Both are contactable at the addresses below.

Questions about this document? Write to dpo@omyajivatu.com or to our Grievance Officer at grievance@omyajivatu.com.