This Privacy Policy explains how Enbod Technologies Private Limited (“Aushvar”, “we”, “us”, “our”), the operator of the Aushvar platform (website, mobile and web apps, collectively the “Platform”), collects, uses, stores, shares and protects your personal data when you use the Platform to order medicines and healthcare products, book lab tests, or consult doctors. We act as the Data Fiduciary for the personal data for which we determine the purpose and means of processing. This Policy is published in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made thereunder, and forms part of our Terms of Service.
This Policy applies to everyone who uses the Platform — customers, caregivers ordering for dependants, and visitors to our website. By creating an account, uploading a prescription, or placing an order, you consent to the collection and processing of your personal data as described here. Where we process sensitive health data, we ask for your specific, informed consent at the point of collection. You may withdraw consent at any time (see Section 9), though some features may not function without the related data.
We collect only what we need to operate the Platform and serve you. This includes:
We collect data directly from you (when you register, build your profile, upload a prescription, or place an order), automatically (through your use of the Platform and its features), and from the partners who help fulfil your order (for example, delivery confirmation from a delivery partner, or a result from a partner lab). We do not buy personal data from data brokers.
Our lawful basis is your consent and, where applicable under the DPDP Act, “legitimate uses” such as fulfilling a purpose for which you voluntarily provided data, and compliance with law.
We share only the minimum data necessary, and only with:
We do not sell your personal data, and we do not share your health data for third-party advertising.
Our website and apps use cookies and similar technologies to keep you signed in, remember preferences, secure sessions, and understand usage. You can control cookies through your browser or device settings; disabling some may affect how the Platform works.
Your data is stored on secured, access-controlled cloud infrastructure. Some of our service providers may process data on servers located outside India; where this happens, we do so in accordance with the DPDP Act and applicable transfer restrictions, and we require appropriate safeguards to protect your data.
We retain personal and order data for as long as your account is active and as needed to provide the service. Records relating to the dispensing of medicines, transactions, invoices and tax are retained for the periods required by applicable drug, accounting and tax laws even after account closure. When data is no longer required for any lawful purpose, we delete or irreversibly anonymise it.
Subject to the DPDP Act, you have the right to:
You can exercise most rights directly in the app (Account → Terms & policies / privacy controls) or by writing to our Grievance Officer (Section 11). We may need to verify your identity before acting on a request, and we will respond within the timelines required by law.
We apply technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit, access controls and least-privilege access, audit logging of sensitive actions, and private storage for prescription files reachable only by you and the pharmacy serving your order. No method of transmission or storage is completely secure; we work continuously to protect your data and will notify you and the Data Protection Board of a personal-data breach as required by law.
If you have any concern, complaint or request regarding your personal data or this Policy, please contact our Grievance Officer:
Grievance Officer: Vishnu Surendranath, Director
Aushvar — Enbod Technologies Private Limited (CIN: U63122KA2024PTC183450)
No. 467/468, Krishna Temple Road, Indiranagar 1st Stage, Indiranagar, Bengaluru, Karnataka 560038
Email: [email protected]
We will acknowledge your grievance promptly and resolve it within the period prescribed by law. If you are not satisfied with our response, you may escalate to the Data Protection Board of India under the DPDP Act.
The Platform is intended for adults aged 18 and over. We do not knowingly create accounts for, or process the data of, children except where a parent or lawful guardian places an order for a dependant and provides verifiable consent. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
We may update this Policy from time to time to reflect changes in our services or the law. We will post the revised version here with a new “Last updated” date and, where the change is significant, notify you in the app. Your continued use of the Platform after an update constitutes acceptance of the revised Policy.
For any privacy question, email [email protected] or [email protected], or see our Contact page.