Privacy Policy
How YouAyurveda protects, processes, and respects personal health data, clinical records, and professional practitioner identities.
1. Introduction & Regulatory Framework
Welcome to YouAyurveda ("we", "our", or "the Platform"), managed by the YouAyurveda Digital Health Ecosystem. We are committed to safeguarding the digital privacy and medical confidentiality of our patients, practitioners, clinic administrators, and wellness partners.
This Privacy Policy is formulated in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Telemedicine Practice Guidelines issued in India.
2. Information We Collect
We collect data to deliver personalized Ayurvedic insights, verified practitioner discovery, and secure clinical booking:
A. Patient Health Inquiries & Consultation Data
When you submit an inquiry to a doctor, book an appointment, or use our Prakriti / Dosha diagnostic quiz, we collect your primary health concerns, age, preferred consultation mode (online or clinic visit), and optional health symptoms. We treat all health symptom disclosures as sensitive personal health data.
B. Practitioner Professional Credentials
For Ayurvedic physicians (BAMS/MD) and clinic providers, we collect professional degrees, State Ayurvedic Council / NCISM registration numbers, clinic facility photos, consultation fees, and verifiable government identification for credential verification.
C. Financial & Billing Records
When doctors purchase lead credits or patients pay consultation booking fees, transactions are processed securely through RBI-licensed payment aggregators (e.g., Razorpay). We store statutory GST invoice numbers, business legal names, and GSTIN records for tax compliance. We never store full card numbers, CVV codes, or net banking passwords.
3. How We Use Your Data & Purpose of Processing
- Direct Doctor Routing: Routing patient consultation requests directly to verified Ayurvedic physicians without public exposure.
- Medical Peer Review: Enabling credentialed doctors to review and verify clinical community answers and editorial articles.
- Platform Integrity & Anti-Quackery: Verifying registration credentials against state medical registers to protect public health.
- Statutory Tax Compliance: Generating GST-compliant tax invoices under Section 31 of the CGST Act 2017.
🛡️ Strict Non-Sale of Medical Information Policy
We do not sell, rent, or trade your personal health data or patient inquiry submissions to third-party pharmaceutical advertisers, data brokers, or insurance companies. Patient data is solely used to deliver Ayurvedic healthcare discovery and facilitate direct doctor consultations.
4. Data Security & Storage Controls
YouAyurveda deploys defense-in-depth security architectures including:
5. Your Rights Under the DPDP Act, 2023
As a data principal, you hold the following rights regarding your personal information:
- Right to Access: You can view all profile records, inquiries, and published listings in your account dashboard.
- Right to Correction: Update or rectify incomplete or inaccurate personal or clinical information at any time.
- Right to Erasure & Account Deletion: Request soft or permanent deletion of your profile and data records through the Danger Zone in Account Settings.
- Right to Nominate: You may nominate an individual to exercise your privacy rights in the event of death or incapacity.
7. Grievance Officer & Redressal Mechanism
In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the contact details of our Grievance Officer are: