1. Information We Collect

For Patients (Exelth Care App)

• Personal information (name, phone number, email address)
• Health data (medical records, prescriptions, lab reports, visit history)
• Location — used to help you find nearby hospitals and clinics
• Device information (for app performance and analytics)

For Clinics & Hospitals (Exelth Platform)

• Facility information (clinic/hospital name, address, registration details, services offered)
• Staff account data (name, role, email, login activity)
• Patient visit records created or managed through the platform
• Subscription and billing records (plan details, payment transaction history — no card or banking credentials)
• Usage data and activity logs within the platform

2. How We Use Your Information

For patients, we use your data to:

• Book appointments and manage your care schedule
• Provide real-time updates about appointments, prescriptions, and lab results
• Allow your doctors and care providers to access relevant health data during treatment
• Show you nearby clinics and hospitals within the Exelth network

For clinics and hospitals, we use your data to:

• Power your clinic's operations — visit management, billing, prescriptions, and clinical records
• Provide operational analytics and performance dashboards for your facility
• Send notifications and updates related to your account and subscription

For all users:

• Improve the platform's features, reliability, and user experience
• Comply with legal obligations under applicable Indian law

3. Sharing Your Information

We share data only when necessary to deliver our services:

• With clinics, hospitals, doctors, and authorized staff as part of patient care — only the data relevant to the visit or treatment
• With payment processors to handle subscription billing and patient payment transactions securely
• With cloud infrastructure providers that host and store our platform data
• With analytics service providers to help us understand platform usage and improve our product
• With legal or regulatory authorities if required by law or a valid government order
• We never sell your personal or health information to advertisers or any third party for commercial purposes

4. Data Security

We take the security of your data seriously. Our safeguards include:

• Encryption in transit — all data is transmitted over secure HTTPS/TLS connections
• End-to-end encryption for sensitive medical records and health data stored in the platform
• Role-based access control — clinic staff can only access data relevant to their assigned role
• Secure authentication for all platform accounts
• Regular security reviews and infrastructure monitoring

Despite these measures, no system is completely immune to risk. We will notify affected users promptly in the event of a data breach that may affect their personal or health information.

5. Data Retention

• Patient health data is retained for as long as the patient account is active and for a reasonable period thereafter to support continuity of care.
• Clinic and hospital operational data is retained for the duration of the active subscription and a grace period following expiry or account closure.
• When you request deletion of your account, we will remove your personal data within a reasonable time, subject to any legal or regulatory obligations that require us to retain certain records.

6. Your Rights

You have the right to:

• Access your personal data held by Exelth
• Correct or update inaccurate personal information in your account
• Delete your account and associated personal data
• Request data portability — receive a copy of your data in a structured format
• Limit data sharing where possible, without affecting core service delivery
• Withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at support@exelth.com.

7. Cookies & Analytics

The Exelth website and platform may use cookies and similar tracking technologies to:

• Keep you logged in and remember your preferences
• Understand how users navigate the platform so we can improve it
• Measure the performance and reliability of our services

You can manage or disable cookies through your browser settings. Disabling cookies may affect some features of the platform.

8. Children's Privacy

Users under the age of 18 may use the Exelth Care App only with the consent and supervision of a parent or legal guardian. The parent or guardian is responsible for overseeing their child's use and consents to this Privacy Policy on their behalf.

We encourage parents and guardians to monitor their children's online activities. If we discover that personal data has been collected from a minor without proper parental consent, we will delete it promptly.

9. Compliance with the Digital Personal Data Protection Act, 2023

Exelth is committed to complying with India's Digital Personal Data Protection (DPDP) Act, 2023. Under this Act:

• We collect and process personal data only for specified, legitimate purposes with your consent.
• We take reasonable security safeguards to prevent personal data breaches.
• In the event of a data breach that is likely to affect you, we will notify you and the Data Protection Board of India as required.
• You have the right to access, correct, and erase your personal data as outlined in Section 6 of this policy.
• If you have a grievance related to your personal data, you may contact our support team. If unresolved, you may approach the Data Protection Board of India.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make significant changes, we will notify you through the app, the platform, or by email. The effective date at the top of this policy will always reflect the most recent version.

11. Contact Us

If you have questions, concerns, or requests related to your privacy or personal data, please reach us at:

• Email: support@exelth.com
• Website: https://www.exelth.com
• Company: Egostix Engineering Private Limited