Privacy notice (DPDP Act 2023)

Account & contact: name, email, phone (E.164), city.

Health intake: quiz answers, body measurements you provide, photos you upload, prior history you disclose.

Doctor consult: video / audio recordings (telemedicine retention 3+ years per MoHFW), doctor SOAP-style notes, the patient summary the doctor writes for you.

Order: addresses, payment metadata (we never see full card numbers — Razorpay tokenises), order history.

Behavioural: pages visited, quiz progress, quiz abandonment, score history.

Inferred: composite Body Score and 5 sub-scores computed by our rule-engine.

To deliver the service: build your Body Intelligence Report, draft your protocol, route your consult, ship your products.

For doctor review: telemedicine delivery and prescribing decisions per MoHFW Telemedicine Practice Guidelines 2020.

For compliance: maintaining audit logs of every patient-data read for 3+ years.

For your safety: flagging adverse events, contraindications, blocking Schedule X / narcotic / psychotropic items at the platform level.

For analytics: understanding which protocols work — anonymised, aggregated.

For lifecycle communication: re-quiz reminders, protocol refills, doctor follow-ups.

With our doctors: only the doctors actively assigned to your case.

With Razorpay: payment processing only.

With Clerk: authentication only — Clerk receives email + phone for verification.

With Cloudflare R2 (Singapore region): encrypted storage of your photos and consult recordings.

With Neon (Singapore region): the database holding your account and health data.

We never sell your data. We never share for advertising. We never share with anyone outside the doctor-patient-platform triangle without your explicit consent.

Account data: while your account is active.

Telemedicine records: 3+ years from the last consult, per MoHFW.

Order records: 7 years per Indian tax law.

Quiz answers without an account: 90 days, then anonymised.

Access: download a copy of everything we have on you. Request via /contact.

Correction: update inaccurate data through your account or by request.

Erasure: deletion requests are honoured within 30 days. Telemedicine records cannot be hard-deleted (MoHFW retention) but are anonymised — your name, email, phone, photos are removed and the consult content remains under a synthetic id.

Withdraw consent: stop a specific category of processing at any time from Account settings.

Grievance: contact our Data Protection Officer at the address below for any DPDP-related concern.

Your data is stored in Singapore (Neon, Cloudflare R2) — the closest available APAC region. Singapore is on the DPDP Schedule of allowed transfer regions. Migration to Mumbai-region (when Neon adds it, or via Tembo/RDS) is on our roadmap pre-launch.

Atlas uses session cookies for authentication (set on .strongnation.in so the same login works across atlas.strongnation.in and strongnation.in). We use first-party analytics (PostHog) — never third-party advertising trackers.