Privacy Policy
This Privacy Policy ("Policy") has been drafted in accordance with (i) the Indian Contract Act, 1872, (ii) the (Indian) Information Technology Act, 2000, and the rules, regulations, guidelines, and clarifications framed thereunder, as well as (iii) the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the "SPI Rules"), Meta Platform Terms, and Google Platform Terms.
At Oleka Health Pvt. Ltd. (hereinafter "Company", "we", "our", or "us"), we appreciate the trust and information entrusted upon us by you, i.e. Registered User/Visitors (collectively referred to as "You"), and we seek to protect such information to the best extent possible, and only use the information in the manner provided in this Privacy Policy. “Device”, means any device including but not limited to computer, mobile device, tablet or any other device used to access our Services. "Platform" means [olekahealth.com] and related mobile applications. "Services" means all services provided through our Platform.
Interpretation
In this Privacy Policy:
- Words importing the singular shall include the plural and vice versa
- References to "including" shall be construed as "including without limitation"
- References to clauses are to clauses of this Privacy Policy
Scope and Application
This Privacy Policy applies to:
- All Users of our Platform
- All Services provided through our Platform
- All data collection and processing activities
- All interactions with Google platforms
- All interactions with Meta platforms
BY ACCESSING OR USING THE PLATFORM, AND/OR SERVICES PROVIDED THEREIN, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD AND AGREE TO BE BOUND BY THIS PRIVACY POLICY AND OUR TERMS. If you do not agree with any term of this Privacy Policy, you must immediately cease using our Platform. Your continued use of our Platform following any changes to this Privacy Policy constitutes your acceptance of those changes.
Privacy
We understand the significance of your personal privacy. Please read the Privacy Policy below to learn how your Personal Information will be processed while you use the Platform's Services. Except as stated in this Privacy Policy or as otherwise approved by you, we will not share your Personal Information with third parties for marketing purposes. Your trust and confidence are our top priorities.
Your Consent
By using our Services, you understand and agree to this Privacy Policy, as well as any changes made from time to time, and expressly consent to the collection, storage, processing, usage, disclosure, and transfer of Your Information (as defined below) in accordance with it. If you do not agree to this, do not use the Platform or Services. You acknowledge that you are submitting your information voluntarily.
You have the option to not offer us the data requested. If you refrain from providing us with Your Information or withdraw your consent at any time, we will be unable to deliver the Services provided on our Platform.
Data Collected for Our Services - Registered Users
We collect Personal details of our Registered Users so we can provide our Services effectively. For the provision of Our Services, we require access to any and all information we seek from the User.
When you create an account on the Platform, you will be required to provide certain information, such as your full name, address, email address, age, your child’s age & date of birth, your date of birth, gender, information about your medical history, mental health history, any problems or disorders you are experiencing, and so on. We will also collect information to assist establish your eligibility to use the Platform's Services, as well as information to help us process requests made by you for the use of the Company's Services, such as your age or proof of age.
In the event of payments made to Oleka Health Pvt Ltd, we will also collect financial information such as Bank Account details, payment information, transaction details, billing information. We will also collect technical information such as:
a) Device Information:
IP address
Device ID
Hardware model
Operating system
Browser type and version
Mobile network information
Device settings
b) Usage Information:
Pages visited
Features used
Time spent on Platform
Navigation patterns
Click patterns
Interaction data
We will also collect Platform-Specific Information including but not limited to:
a) Google Platform Data:
- Google Account information
- OAuth authentication data
- Google service interactions
- API usage data
- Calendar data (if applicable)
- Email data (if applicable)
b) Meta Platform Data:
- Meta Account information
- Device data from Meta platforms
- VR/AR usage data
- Movement data
- Interface interaction data
Methods of Collection
Direct Collection – We collect information directly when you:
- Register an account
- Complete forms
- Upload documents
- Communicate with us
- Use our Services
- Participate in surveys
- Provide feedback
Data Collected - Non-Registered Users
Automatically Collected Information: When you use the Platform as a Registered User or a mere Visitor, we automatically receive and record information on our server logs from your browser or mobile, including but not limited to your hardware model, browser type, IP address, operating system version, unique device identifiers, type of mobile you use, the mobile network information, your geographic location, the URL that you just came from, your We may also collect information about how your device interacted with the Platform, such as pages viewed and links visited. Unless otherwise required by law, we regard this data as Non-Personal Information.
Cookies: We use data collection devices such as "cookies" on certain pages of the Platform to help analyze our web page flow, measure promotional effectiveness, and promote trust and safety. "Cookies" are small files placed on the hard drive of your computer that assist us in providing the Services. We offer certain features that are only available through the use of a "cookie". We also use cookies to allow you to enter your password less frequently during a session. Cookies can also help us provide information that is targeted to your interests. Most cookies are "session cookies," meaning that they are automatically deleted from your hard drive at the end of a session. You are always free to decline our cookies if your browser permits, although in that case you may not be able to use certain features on the Platform.
Miscellaneous Information: There may exist user surveys and contests to facilitate better company-user interaction, and for that reason, a user may be invited to take part in contests, a survey, or other types of volunteer promotion. In association with one of these campaigns, we may gather contact and/or marketing information. There may exist user surveys and contests to facilitate better company-user interaction, and for that reason, a user may be invited to take part in contests, a survey, or other types of volunteer promotion. In association with one of these campaigns, we may gather contact and/or marketing information. The way we collect information in a given contest or survey may be subject to the nature of the promotion and will bear a disclaimer in the given situations if there may be any differences with regards to data collection from the contents of this privacy policy. In the event there is no change, then no disclaimer shall be provided and the privacy policy shall be applicable as-is. Additionally, we may collect publicly accessible information about our user bases, such as the full name, email address, phone number, or other demographic data, to assist during support, address fraud or security issues, or customize the user experience, including by displaying advertisements or offers. We may also request or collect other information, such as feedback, questions, comments, recommendations, or ideas, to provide enhanced and improved service.
To summarize, Automatic Collection encompasses the following
We automatically collect information through:
- Cookies
- Web beacons
- Log files
- Analytics tools
- Tracking technologies
Third-Party Collection
We may receive information from:
- Service providers
- Healthcare providers
- Payment processors
- Analytics providers
- Platform partners
COOKIES AND TRACKING
Cookie Types
- Essential cookies
- Functional cookies
- Analytics cookies
- Performance cookies
Cookie Controls
- Cookie settings
- Opt-out mechanisms
- Browser controls
- Tracking preferences
By using the Platform and/or Services, you acknowledge that you have read the Privacy Policy, understand the reasons for collecting your Personal or Non-Personal Information, and consent to its collection and use. If you decide to withdraw your consent in the future, please email us at product@olekahealth.com.
Use of Information
Use of personal Information
Service Provision
- Account creation and management
- Authentication and security
- Service delivery
- Customer support
- Transaction processing
- Communication delivery
Platform Operation
- Technical administration
- Platform maintenance
- Service optimization
- Bug fixing
- Performance monitoring
Legal Compliance
- Regulatory requirements
- Legal obligations
- Court orders
- Government requests
We will use and store Personal Information of Registered Users to:
deliver Services to you, including registering you for our Services, verifying your identity and authority to use our Services, and to otherwise enable you to use the Platform and our Services;
to maintain, and improve our Services, including, for example, to provide Services you request (and send related information), develop new features, provide customer support to You;
develop safety features, authenticate users;
send updates and administrative messages;
market and promote the Service and for the internal operational and administrative purposes of the Service,
if you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on Platform or Software we may collect such information into a file specific to you;
to analyze Platform usage and to improve the Platform content and Service offerings and / or to customize the Platform content, layout, and Services; to provide you with a smooth, efficient, safe and customized experience while using the Platform.
You agree that the information provided by you with respect to health conditions, medical records and history, or any other highly sensitive information through texts, images, videos on the Platform and/or communicated through other means provided by the Company may be collected by the Company to maintain records into a file specific to you.
you agree that we may use your Personal Information in the file we maintain about you, and other information we obtain from your current and past activities to: resolve disputes; troubleshoot problems; help promote safe interactions and correspondence; measure consumer interest in the Services provided by us; inform you about online and offline offers, services, and updates; customize your experience; detect and protect us against error, fraud and other criminal activity; enforce our Terms of Use; and as otherwise described to you at the time of collection.
Use of Non-Personal Information
We may use your information for:
Service Improvement
- Feature development
- User experience enhancement
- Service optimization
- Training and quality assurance
Analytics
- Usage patterns analysis
- Trend identification
- Performance measurement
- Research and development
Prohibited Uses
We explicitly DO NOT use your information for:
- Unauthorized advertising
- Data brokerage
- Credit assessment
- Unauthorized AI training
- Sale to third parties
- Spam or unsolicited communication
We also utilize Non-Personal Information (including data from third-party online and offline sources) to generate aggregated data for analysis and other purposes. This helps us conduct internal research on your demographics, interests, and behaviors, allowing us to better understand, protect, and serve you. The information is compiled and analyzed on a collective basis, and unless specified otherwise in this Privacy Policy, it is only used in aggregated form.
We may freely use Non-Personally Identifiable Information in connection with the Services provided through the Platform. This includes managing the Services, assessing their effectiveness, marketing the Services and other products, and generating aggregate statistics on Service usage. The information also helps us improve the Services, diagnose server issues, manage the Platform, understand visitor behavior and preferences, and optimize the design and layout of the Platform.
Use of Non-Personal Information
We may disclose other Non-Personally Identifiable Information to third party advertisers and advertising agencies, partners, and other parties in order for us and such third parties to analyze (a) the performance of, to operate and improve the Services offered through the Platform and (b) the behavior of Registered Users and to target offers and services to other users and depending upon their requirements. We may also disclose, use or publish this information for promoting the Services offered under the Platform. These third parties are subject to confidentiality agreements with us and other legal restrictions that prohibit their use of the information we provide them for any other purpose except to facilitate the specific outsourced operation, unless you have explicitly agreed or given your prior permission to them for additional uses.
THIRD-PARTY SHARING
Categories of Recipients we share information with:
Service Providers
- Cloud storage providers
- Payment processors
- Analytics providers
- Customer support services
- Healthcare providers
Platform Partners
- Google services
- Meta platforms
- Integration partners
- API service providers
Sharing Protocols
All third parties must:
- Sign confidentiality agreements
- Implement security measures
- Follow data protection policies
- Comply with platform requirements
USER RIGHTS AND CONTROLS
Access Rights
You have the right to:
- Access your information
- Request data copies
- Review processing activities
- Obtain processing details
Modification Rights
You can request:
- Data corrections
- Updates to information
- Profile modifications
- Preference changes
Deletion Rights
You may request:
- Account deletion
- Data removal
- Processing cessation
- Consent withdrawal
Information Storage & Processing
Processing Standards
We process data in accordance with:
- Information Technology Act, 2000
- SPI Rules, 2011
- Google API Services User Data Policy
- Meta Platform Terms
- Industry best practices
Our retention periods for personal data are based on business needs and legal requirements. We retain personal data for as long as is necessary for the processing purpose(s) for which the information was collected, and any other permissible, related purpose. For example, we may retain certain correspondence and transaction details until the time limit for claims arising from the transaction has expired, or to comply with regulatory requirements regarding the retention of such data. When personal data is no longer needed, we either irreversibly anonymize the data (and we may further retain and use the anonymized information) or securely destroy the data.
Storage Location
- Primary storage location: Asia South
- Backup storage location: Asia South
PLATFORM-SPECIFIC REQUIREMENTS
Google Platform Requirements
- OAuth compliance
- API services compliance
- Data handling restrictions
- User data protections
Meta Platform Requirements
- VR/AR data handling
- Device data protection
- Platform-specific controls
- Content requirements
Child Policy
We have a strict policy about the use of our service by children under 14 years of age. PoolPay is not designed for usage by minors or children under the age of fourteen. We do not collect personally identifying information from children under the age of thirteen. If a parent or guardian learns that their kid has given us Personal Information without their permission, they should notify us at product@olekahealth.com. If we learn that a child under the age of 13 has supplied us with Personal Information, we will promptly remove the information from our records.
Amendments
We reserve all rights to amend this policy from time to time. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is used. If we decide to change our Privacy Policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it. Registered Users are bound by any changes to the Privacy Policy when they continue to use the Platform after such changes have been first posted.
Data Retention and Security
We implement appropriate physical, technical, and administrative security measures, as required by applicable law, to protect Personal Information from loss, misuse, unauthorized access, disclosure, or modification. While we make reasonable efforts to safeguard your information, you acknowledge that no system or data transmission over the Internet or public networks can be completely secure. You are responsible for protecting your password, phone, and computer by, among other things, logging out after using shared devices, choosing strong, unique passwords, and keeping your login credentials confidential. We are not liable for unauthorized access to your information, compromised passwords, or any unauthorized account activity. You agree not to hold the Company responsible for such incidents. The use and storage of information, including passwords, account details, and transaction activity on your device, is at your own risk. Additionally, you acknowledge that not all content or communications on the Platform may be encrypted.
Technical Measures
- Encryption (in-transit and at-rest)
- Firewalls
- Access controls
- Authentication protocols
- Monitoring systems
Administrative Measures
- Security policies
- Employee training
- Access restrictions
- Regular audits
- Incident response plans
Physical Measures
- Secure data centers
- Access restrictions
- Surveillance systems
- Environmental controls
Governing Law and Jurisdiction
This Policy shall be governed by and construed in accordance with the laws of the Republic of India. The courts of law in Bengaluru, Karnataka, India shall have exclusive jurisdiction in relation to any disputes arising out of or in connection with this Policy.
Grievance Redressal
In accordance with Information Technology Act, 2000 and rules made thereunder, in case of grievances you can contact us at product@olekahealth.com.
Company Details
Oleka Health Pvt Ltd
A44 Bysani Skyway,
Jayanagar
Bengaluru, Karnataka - 560011
CIN U62013KA2023PTC178561
This policy was last updated on 10th October, 2024.