Check Eligibility

Privacy Policy

For more information, please contact hello@aamya.com

Last updated: August 11, 2026

Healthpresso Private Limited, operating as Aamya (“Aamya”, “we”, “us”, “our”), respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data — including sensitive health information — when you use aamya.com, our WhatsApp channels, and related services (the “Platform“).

This Policy is framed with reference to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Telemedicine Practice Guidelines, 2020.

By using the Platform, you consent to the practices described here, and — where relevant to specific data processing, such as recorded consultations or facilitation of lab/pharmacy orders — to the terms of our separate Telehealth & Data Processing Consent Notice.

1. Definitions

  • Personal Data: Information relating to an identified or identifiable individual.
  • Sensitive Personal Data or Information (SPDI): As defined under the SPDI Rules — includes health data, medical records, and biometric information.
  • Processing: Any operation performed on Personal Data — collection, storage, use, disclosure, or erasure.
  • Data Fiduciary: Aamya, in its capacity as the entity determining the purpose and means of processing your Personal Data.

2. Information We Collect

2.1 Provided directly by you:

  • Identity and contact details: name, phone number, email, gender, age, city/address
  • Health information: height, weight, BMI, medical history, existing conditions, allergies, current medications, pregnancy/breastfeeding status, contraindication screening responses
  • Payment information (processed via third-party payment gateways; we do not store full card numbers)
  • Communications you send via WhatsApp, email, chat, or forms

2.2 Provided orally: Information you share during phone or video calls with our team or Care Team, which may not always be recorded. See Section 9 below.

2.3 Generated by your Care Team: Consultation notes, clinical assessments, diet/exercise plans, and prescriptions created by your doctor, nutritionist, or health coach in the course of your care.

2.4 From laboratory partners: Diagnostic test results shared with us by NABL-accredited (or equivalent) laboratory partners after you undergo testing.

2.5 Collected automatically:

  • Device and usage data: IP address, browser type, pages visited, referral source
  • Cookies and pixels, including advertising pixels used for marketing (e.g., LinkedIn Insight Tag) — see Section 8

2.6 Recorded consultations (if applicable): If Aamya records any audio/video consultation, this will only occur with your explicit, separately obtained consent before the session begins. You may decline recording; where medically feasible, an unrecorded alternative will be offered.

3. Purpose of Processing

We process your Personal Data to:

  • Assess your eligibility and facilitate medical consultations and diagnosis;
  • Enable your Care Team to provide personalized, safe care and manage your treatment plan;
  • Coordinate diagnostics and facilitate medication ordering with third-party labs and pharmacies (see our Terms, Section 6);
  • Process payments and issue invoices;
  • Send appointment reminders, care instructions, and support communications;
  • Improve our Platform and clinical program design;
  • Send promotional communications, only where you have opted in and not opted out;
  • Comply with legal, regulatory, and medical record-keeping obligations;
  • Investigate and prevent fraud, misuse, or safety incidents; and
  • Respond to grievances and exercise-of-rights requests.

Each category of data is processed only to the extent necessary for the purpose it was collected for.

4. Legal Basis and Consent

We rely on your explicit, informed consent to process health-related data, obtained at the time of onboarding and reflected in our Telehealth & Data Processing Consent Notice. You may withdraw consent at any time by contacting us at hello@aamya.com; this will not affect processing carried out before withdrawal, and withdrawal may mean we can no longer continue providing you clinical care. We may continue limited processing after withdrawal where required by law (e.g., medical record retention, fraud prevention).

5. How We Share Your Information

We do not sell your Personal Data. We share it only as necessary, with:

  • Your Care Team — doctors, nutritionists, and health coaches involved in your care;
  • Diagnostic laboratory partners — to conduct tests you’ve been referred for;
  • Pharmacies — to facilitate delivery of medication prescribed to you, at your direction;
  • Payment gateway providers (e.g., Razorpay or similar) — to process transactions;
  • Cloud hosting and IT service providers — under contractual confidentiality and data-processing obligations;
  • WhatsApp/communication platform providers — to enable messaging;
  • Regulators, courts, or law enforcement — where required by law;
  • Professional advisors — auditors, lawyers, under confidentiality obligations; and
  • In a business transfer — such as a merger or acquisition, with continuity of protection for your data.

We do not share identifiable health information with employers, insurers, or family members without your explicit consent, except where required by law or in a genuine emergency to protect life or safety.

6. Data Security

We implement reasonable technical and organizational measures proportionate to the sensitivity of the data involved, in line with the SPDI Rules, including encryption in transit, access controls limiting Care Team and staff access on a need-to-know basis, and secure storage. No method of transmission or storage is 100% secure; while we take reasonable precautions, we cannot guarantee absolute security.

7. Data Retention

We retain your Personal Data for as long as necessary to provide services to you, comply with legal and medical record-keeping obligations (which may require retention for several years after your last consultation), and resolve disputes. You may request deletion subject to these legal retention obligations.

8. Cookies and Tracking

We use cookies and similar technologies (including analytics and advertising pixels such as LinkedIn’s Insight Tag) to operate the Platform, remember preferences, and measure marketing performance. You can control cookies via your browser settings; disabling them may affect Platform functionality.

9. Information Provided Orally

Where you share information over phone or WhatsApp calls that are not recorded, we rely on our team’s good-faith understanding of what was communicated to update your record and provide services. You are responsible for the accuracy of information you share orally, and we encourage you to review any written summary we provide (e.g., in-app message or email) and flag corrections promptly.

10. Your Rights Under the DPDP Act

Subject to applicable law, you have the right to:

  • Access the Personal Data we hold about you;
  • Correct, update, or complete inaccurate or incomplete data;
  • Erase your data, subject to our legal retention obligations;
  • Withdraw consent at any time, with an ease comparable to how you gave it;
  • Nominate another individual to exercise your rights in the event of your death or incapacity;
  • Manage your consent through a Consent Manager, where applicable, once such infrastructure is available; and
  • Raise a grievance with our Grievance Officer (Section 12) and, if unresolved, escalate to the Data Protection Board of India.

To exercise these rights, contact us at hello@aamya.com.

11. Disclosures Required or Permitted by Law

We may disclose Personal Data where necessary for: government functions relating to sovereignty, security, or public order; compliance with a legal obligation, court order, or judgment; responding to a genuine medical emergency threatening life or health; public health measures during an epidemic or comparable event; or other circumstances where disclosure is legally required or protects safety.

12. Grievance Officer

Grievance Officer: Paras Garg, Founder & CEO Email: hello@aamya.com Address: B3/71, Rajasthali Apartments, Pitampura, Saraswati Vihar, North West Delhi – 110034, Delhi, India

We aim to acknowledge grievances within a reasonable time and resolve them within the timelines required under applicable law.

Note: Aamya is not currently a “Significant Data Fiduciary” under the DPDP Act and is therefore not presently required to appoint a dedicated Data Protection Officer based in India; the Grievance Officer above serves this function. This should be revisited as Aamya scales.

13. Data Breach Notification

In the event of a personal data breach, we will notify affected users and the relevant regulatory authorities in the form and manner, and within the timelines, required under applicable law.

14. Data Storage and Transfer

Your data is primarily stored on servers located in India. Where any data is processed or stored outside India (for example, via cloud infrastructure or a third-party tool with servers abroad), we take reasonable steps to ensure equivalent safeguards, and any transfer of identifiable Personal Data outside India will occur only with adequate safeguards, in compliance with the SPDI Rules and the DPDP Act as its provisions become operative.

15. Children's Privacy

The Platform is intended for individuals aged 18 and above. We do not knowingly collect Personal Data from minors. If we become aware that we have inadvertently done so, we will delete it promptly.

16. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via the Platform, email, or WhatsApp, along with the “Last updated” date above.

17. Contact Us

hello@aamya.com | WhatsApp: +91 8090809086