Privacy Policy

Nurvix (“we”, “us”) is operated by Nurvix Care Tech and connects families with verified nurses for doctor-prescribed care delivered at home. This policy explains what information we collect and how we use it.

For the purpose of India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), Nurvix Care Tech is the Data Fiduciary that determines how and why your personal data is processed, and you are the Data Principal whose data we handle.

Account details: your name, mobile number and email address, used to create your account and verify you through a one-time code.

Booking details: the visit address, the patient's name and contact number (when you book for someone else), the service requested, notes you add, and your chosen payment method.

Location: with your permission, the GPS location or map pin you set, so a nearby nurse can reach the correct address.

Usage and device data: basic technical information (IP address, device and browser type, and timestamps) collected automatically to keep the service secure and diagnose problems.

To provide the service: to confirm and fulfil bookings, dispatch a verified nurse, process payments, and keep you updated at each step.

To keep you safe: to verify identities, prevent fraud and misuse, and maintain an audit trail of sensitive actions.

To improve Nurvix: to understand what's working and make the service more reliable.

Any health-related details you share (for example the care your doctor has prescribed) are treated as sensitive personal data. We share them only with the assigned nurse and the partner hospital coordinating your care, and only to the extent needed to deliver that care.

The assigned nurse and partner hospital, to deliver your booking.

Payment and messaging providers, strictly to process payments and send you verification codes and updates. Messages are delivered through WhatsApp (operated by Meta Platforms), through SMS providers, or by email.

Authorities, when required by law. We do not sell your personal information.

Access to patient records is restricted to server-side systems and authorised staff. Verification codes are stored only as one-way hashes, and passwords are never stored in readable form. We keep booking records for as long as needed to provide the service and meet legal and accounting obligations, then delete or anonymise them.

We process your personal data on your consent, given by a clear affirmative action when you first accept our Terms and this Privacy Policy, and when you enable location. Consent is limited to the purposes described here.

You may withdraw your consent at any time — it is as easy to withdraw as it was to give. Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide some or all of the service. You can also turn off location sharing in your browser or device at any time.

Access: to obtain a summary of the personal data we hold about you and how it is processed.

Correction & erasure: to correct inaccurate data and to request deletion of data no longer needed for the purpose it was collected.

Grievance redressal: to raise a complaint with us about how your data is handled.

Nomination: to nominate another person to exercise these rights in the event of your death or incapacity.

To exercise any of these, contact our Grievance Officer through Help & Support.

We send three kinds of message: the one-time code you ask for when you sign in, and the two visit codes for each booking — one the nurse needs to start the visit, one to finish it. We do not send advertising or promotional messages on WhatsApp.

When you book for yourself, the visit codes come to you. When you book for someone else, they go to that person's number, because they are the one at the door — and you confirm, when you book, that they agreed to receive them.

Messages are delivered by WhatsApp, a service of Meta Platforms, or by an SMS provider. Meta processes the phone number and the message to deliver it, under WhatsApp's own terms and privacy policy. We keep a record of whether each message was delivered; we do not keep the codes in those records.

To stop visit updates on WhatsApp, reply STOP to our WhatsApp number. Reply START to turn them back on. A sign-in code you request yourself is still sent, because you asked for it; visit codes then come by SMS instead, so the visit can still go ahead.

To delete your account and personal data, email nurvix.care@gmail.com from the email address on your account, or write through Help & Support, with the subject “Delete my data” and the mobile number you sign in with. We confirm who you are with a one-time code before deleting anything.

We delete your profile, saved addresses and contact details, and remove your number from our messaging records. We acknowledge the request within the time stated in section 10 and complete it within 30 days.

Some records must be kept by law even after deletion — invoices and payment records under GST and accounting rules, and the record of a care visit where a hospital is required to retain it. Those are kept only for the period the law requires, are not used for anything else, and are then deleted or anonymised.

If you signed in or linked anything using a Meta product, you can also remove Nurvix from your Meta account settings. Deleting your data with us does not delete your WhatsApp account, which is governed by WhatsApp.

Where care is booked for a child, we process the child's data only with the consent of a parent or lawful guardian, and solely to deliver the care requested. We do not use children's data for tracking or targeted advertising.

For any privacy question, to exercise your rights, or to raise a grievance, reach our Grievance Officer: D Shankar, Proprietor, Nurvix Care Tech. Email nurvix.care@gmail.com · +91 77802 10499. We acknowledge requests within 48 hours and respond within the timeframe required by applicable law.

If you are not satisfied with our response, you may approach the Data Protection Board of India as provided under the DPDP Act.