Privacy Policy

Effective Date: October 21, 2026
Last Updated: October 22, 2026
Applies To: VitalsMirror Mobile Application (Android via Google Play Store & iOS via Apple App Store) and Official Website (https://arogyaiq.com · https://vitalsmirror.com)
Official Support & Privacy Contact: [email protected] · [email protected]

⚠️ Wellness Disclaimer (Important — Not a Medical Device):
This application is intended for general fitness and personal wellness tracking only. This is NOT a medical device. The application and its wellness data (resting heart rate (BPM), guided breathing & relaxation check-ins, and daily wellness readiness scores) are for personal wellness insights only and should not be used for diagnosis, treatment, monitoring of medical conditions, or any medical decision-making. All readings are for general wellness reference only and are not clinically validated measurements. Always consult a licensed healthcare professional for any medical advice or concerns.

✓ On-Device Skin-Patch Processing & Zero Video Retention:
In order to provide contactless heart rate and personal wellness insights, VitalsMirror uses only a live optical reading of a small patch of skin from the user’s face, without any identifiable feature such as eyes. That information is processed in real time locally on your device, is not retained once the check-in ends, and is never transferred to our servers. For trends and history, the application saves numeric wellness results only, and you can delete your wellness history or account from the app at any time.

1. Introduction & Scope

Mayura Medical Care LLP ("Mayura Medical Care LLP", "VitalsMirror", "we", "our", or "us") is committed to protecting the privacy and security of your personal information and wellness data when you use the VitalsMirror mobile application on Android and iOS (the "Application") and our official website hosted at https://arogyaiq.com (and https://vitalsmirror.com, collectively the "Website", and together with the Application, the "Platform").

The VitalsMirror Application is a daily wellness companion that provides contactless optical heart rate (BPM) spot checks, guided breathing exercises, and personal wellness awareness trends. It is intended strictly for general personal wellness awareness only.

This Privacy Policy is designed to comply with:

1. India Digital Personal Data Protection Act, 2023 (DPDPA 2023) and rules framed thereunder;
2. Information Technology Act, 2000 and applicable Indian data protection rules;
3. Apple App Store Review Guidelines (including Guideline 1.4.1, Guideline 2.5.14, and Guideline 5.1.1(v));
4. Google Play Developer Program Policies (Wellness Apps & User Data Safety Policies); and
5. EU/UK General Data Protection Regulation (GDPR) principles where applicable.

By accessing or using the Platform, you consent to the collection, use, and processing of your personal information and wellness data as described in this Privacy Policy.

2. Information We Collect & Process

We practice strict data minimization and process only the information necessary to provide contactless heart rate wellness spot checks and personal wellness trend history.

2.1 Personal Information (Provided by You)

When you create an account or use our Platform to synchronize your numeric wellness history across devices, we may collect:

• Account Identifiers: Name, email address, phone number (if voluntarily provided), and encrypted authentication credentials;
• Optional Wellness Profile Details: Year of birth (age), gender, height, weight, and preferred voice-guidance language (English, Telugu — తెలుగు, or Hindi — हिन्दी) to personalize your general wellness reference ranges.

2.2 Wellness Data

When you perform a 60-second contactless wellness check-in or use our wellness tracking features, the Application processes and displays the following wellness metrics for general personal wellness reference only:

• Heart Rate (BPM): Resting and daily heart rate check-in readings and personal heart rate trends;
• Breathing & Relaxation Cadence: Guided breathing cadence (brpm) and calm relaxation check-in summaries;
• Daily Wellness & Activity Readiness: General daily wellness readiness scores (0–100), activity and rest balance, check-in timestamps, and optical signal quality scores (SQI) for personal lifestyle awareness.
• How Camera Input Is Processed (Small Skin Patch Only):
  • To estimate resting heart rate (BPM) and wellness metrics using Remote Photoplethysmography (rPPG), the Application analyzes only light reflected from small patches of skin on the face, without using any identifiable features such as eyes.
  • All optical signal extraction and calculations are performed locally in real time on your device's volatile memory (RAM).
  • The live camera feed is never recorded, is not retained once the 60-second check-in ends (0 seconds retention), and is never uploaded or transferred to our servers.
• What We Explicitly Do NOT Collect or Process:
  • We do not capture, store, or transmit facial photographs, video recordings, or raw video frames;
  • We do not generate, store, or process biometric templates, facial recognition embeddings, faceprints, or identity landmarks;
  • We do not use camera frames or wellness data for third-party advertising, behavioral profiling, or external AI model training.

2.3 Website & Support Inquiries

When you contact us via our Website (/contact) or by emailing [email protected], we collect your name, email address, and the contents of your inquiry solely to respond to your request and provide customer support.

2.4 Device & Technical Information

To maintain application stability and camera compatibility across Android and iOS devices, we collect minimal technical diagnostics, such as device model, operating system version, app version, frame-rate stability during check-ins, and crash logs stripped of personal or wellness identifiers.

3. Device Permissions & Scan-Time Voice Coaching

3.1 Mobile Operating System Permissions

3.2 Scan-Time Voice Guidance (Phone Speaker Only)

If you grant explicit speaker audio permission inside the Application, VitalsMirror plays spoken posture, lighting, and guided breathing prompts in English, Telugu (తెలుగు), or Hindi (हिन्दी) only during the 60-second camera scan. All visual screens remain in English, and the Application never records microphone audio.

4. How We Use Your Information

We use the collected information strictly for the following purposes:

1. Heart Rate & Wellness Insights: To compute and display your resting heart rate (BPM), breathing cadence, and daily wellness readiness insights on your device as personal reference data.
2. Personal Wellness Awareness & Trends: To help you stay informed about your 7-day, 14-day, and 30-day personal heart rate and daily wellness patterns over time.
3. Reference Insights Only: To display optical spot-check readings as personal wellness reference data. These are not medical alerts and must not be used for any medical decision.
4. Trilingual Voice Guidance: To deliver real-time spoken lighting, posture, and guided breathing prompts in English, Telugu, or Hindi during your check-in.
5. Account Management & Support: To create and manage your VitalsMirror account, authenticate your identity, and respond to support, data export, or account deletion requests sent to [email protected].
6. Service Improvement & Compliance: To improve optical check-in reliability, enhance user experience, and comply with applicable legal requirements under the Digital Personal Data Protection Act, 2023 (DPDPA).

✓ No Advertising Promise:
We do NOT use your personal or wellness data for advertising, marketing to third parties, credit scoring, insurance underwriting, or any purpose unrelated to your personal wellness.

5. Data Sharing & Disclosure

Your wellness data is strictly protected. We do NOT sell, rent, trade, or share your personal information or wellness data with any third parties, including insurance companies, employers, advertisers, or data brokers.

1. Zero Sales Policy: Your heart rate and wellness check-in history is never sold, rented, or traded to advertisers, data brokers, or commercial third parties.
2. User-Initiated Sharing Only: You may optionally export or share a summary of your personal wellness results using your device's native share sheet. Any such sharing is initiated and controlled entirely by you.
3. Authorised Support & Platform Infrastructure: Authorised technical and support staff at Mayura Medical Care LLP may maintain the platform strictly under confidentiality obligations. Encrypted numeric wellness history and account records are hosted on secure servers located in India.
4. Legal Disclosure: We may disclose limited account information only with your explicit consent or if required by a valid court order or legal obligation under the DPDPA, 2023 or applicable Indian law.

6. Data Storage, Security & Retention

6.1 India Data Storage & Security Measures

All account records and numeric wellness data collected through VitalsMirror are stored on secure servers located in India, in compliance with data localisation requirements under Indian law. We implement robust technical and organisational measures to protect your data:

• Encryption in Transit (TLS 1.3 / HTTPS): End-to-end encryption of wellness data during transmission between the Application/Website and our servers.
• Encryption at Rest (AES-256): Saved numeric wellness histories and account profiles are encrypted at rest both on your device and in our database.
• Secure Authentication & Access Control: Hashed and salted credentials, strict role-based access control (RBAC) restricted to authorised personnel only, API rate limiting, and audit logging.
• Volatile Memory Camera Processing: Live camera frames are processed exclusively in volatile device memory (RAM) and discarded immediately frame-by-frame.
• Secure Credential Storage: Session tokens are stored in iOS Keychain and Android Keystore.

6.2 Retention & Deletion Schedule

We retain your personal and wellness data only for the duration of your active account with VitalsMirror. Upon account deletion or written request, your data is permanently deleted:

7. Your Rights Under the DPDPA, 2023, Consent & 1-Tap Data Deletion

By registering on VitalsMirror and using the Application, you provide your informed consent for the collection, processing, and storage of your personal information and wellness data as described in this Privacy Policy. Under the Digital Personal Data Protection Act, 2023 (India), GDPR, and Apple App Store (Guideline 5.1.1(v)) / Google Play Store policies, you have the following rights as a Data Principal:

1. Right to Access: Request a summary of your personal and wellness data being processed and the processing activities undertaken, or view and export your wellness history anytime inside the Application.
2. Right to Correction & Erasure (1-Tap Deletion): Request correction of inaccurate or incomplete data in your profile, or complete erasure of your wellness history and account at any time:
   • In-App Deletion (1-Tap): Open the VitalsMirror app → go to Profile & Settings → tap "Delete My Account & Data" (or clear your wellness history). Your local data is erased immediately (0 ms) and your cloud records are permanently purged.
   • Web / Email Deletion: Visit https://arogyaiq.com/delete-account (or https://vitalsmirror.com/delete-account) or email [email protected] with the subject "Delete My VitalsMirror Account".
3. Right to Grievance Redressal: Have your privacy concerns addressed by our designated Grievance Officer within 30 days.
4. Right to Nominate (DPDPA 2023 Section 14): Nominate another individual to exercise your rights in the event of your death or incapacity.
5. Right to Withdraw Consent: Withdraw your consent for data processing at any time by revoking Camera or Notification permissions in your iOS or Android system settings, deleting your account in-app, or emailing [email protected] with the subject "Withdrawal of Consent".

8. Age Restriction & Children's Privacy (Adults 18+ Only)

VitalsMirror Services are intended strictly for individuals aged 18 years and above. We do not knowingly collect personal or wellness data from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor under 18, we will take immediate steps to delete such data. If you believe a minor has provided us with data, please contact us at [email protected].

9. Cookies & Tracking Technologies

Our Website (https://arogyaiq.com / https://vitalsmirror.com) does not use cookies for advertising, third-party tracking, cross-app tracking, or behavioural profiling purposes. We use strictly necessary local browser storage (localStorage) solely to remember your Light / Dark theme preference.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Updates will be posted on this page and within the Application with an updated "Last Updated" date. Continued use of VitalsMirror after an update constitutes acceptance of the revised policy.

11. Grievance Officer & Contact Information

For any questions, concerns, or grievances regarding this Privacy Policy or the handling of your personal and wellness data, please contact our designated Data Protection & Grievance Officer:

• Organisation: Mayura Medical Care LLP — Privacy & Data Protection Office (VitalsMirror)
• Designation: Grievance Officer & Privacy Lead — VitalsMirror
• Official Web Portal: https://arogyaiq.com (https://arogyaiq.com/privacy-policy)
• Official Support & Privacy Email: [email protected] · [email protected] (alias [email protected] is also monitored)
• Account & Data Deletion Page: https://arogyaiq.com/delete-account
• Response Time: Acknowledgement within 24–48 hours; full resolution within 30 days of receiving your request in accordance with the Digital Personal Data Protection Act, 2023 (India)
• Address: Mayura Medical Care LLP (VitalsMirror), HITEC City, Hyderabad, Telangana 500081, India

If you are unsatisfied with our response, you may file a complaint with the Data Protection Board of India as constituted under the DPDPA, 2023.

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of courts in Hyderabad, Telangana.

© 2026 Mayura Medical Care LLP. All rights reserved.
© 2026 VitalsMirror. All rights reserved.