Last updated: this release
1. Who we are
Nurvix (“we”, “us”) is operated by Nurvix Care Tech and connects families with verified nurses for doctor-prescribed care delivered at home. This policy explains what information we collect and how we use it.
For the purpose of India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), Nurvix Care Tech is the Data Fiduciary that determines how and why your personal data is processed, and you are the Data Principal whose data we handle.
2. Information we collect
Account details: your name, mobile number and email address, used to create your account and verify you through a one-time code.
Booking details: the visit address, the patient's name and contact number (when you book for someone else), the service requested, notes you add, and your chosen payment method.
Location: with your permission, the GPS location or map pin you set, so a nearby nurse can reach the correct address.
Usage and device data: basic technical information (IP address, device and browser type, and timestamps) collected automatically to keep the service secure and diagnose problems.
3. How we use your information
To provide the service: to confirm and fulfil bookings, dispatch a verified nurse, process payments, and keep you updated at each step.
To keep you safe: to verify identities, prevent fraud and misuse, and maintain an audit trail of sensitive actions.
To improve Nurvix: to understand what's working and make the service more reliable.
4. Health information
Any health-related details you share (for example the care your doctor has prescribed) are treated as sensitive personal data. We share them only with the assigned nurse and the partner hospital coordinating your care, and only to the extent needed to deliver that care.
5. Who we share it with
The assigned nurse and partner hospital, to deliver your booking.
Payment and messaging providers, strictly to process payments and send you verification codes and updates.
Authorities, when required by law. We do not sell your personal information.
6. Data security & retention
Access to patient records is restricted to server-side systems and authorised staff. Verification codes are stored only as one-way hashes, and passwords are never stored in readable form. We keep booking records for as long as needed to provide the service and meet legal and accounting obligations, then delete or anonymise them.
7. Consent
We process your personal data on your consent, given by a clear affirmative action when you first accept our Terms and this Privacy Policy, and when you enable location. Consent is limited to the purposes described here.
You may withdraw your consent at any time — it is as easy to withdraw as it was to give. Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide some or all of the service. You can also turn off location sharing in your browser or device at any time.
8. Your rights as a Data Principal
Access: to obtain a summary of the personal data we hold about you and how it is processed.
Correction & erasure: to correct inaccurate data and to request deletion of data no longer needed for the purpose it was collected.
Grievance redressal: to raise a complaint with us about how your data is handled.
Nomination: to nominate another person to exercise these rights in the event of your death or incapacity.
To exercise any of these, contact our Grievance Officer through Help & Support.
9. Children's data
Where care is booked for a child, we process the child's data only with the consent of a parent or lawful guardian, and solely to deliver the care requested. We do not use children's data for tracking or targeted advertising.
10. Grievance Officer & contact
For any privacy question, to exercise your rights, or to raise a grievance, reach our Grievance Officer: Grievance Officer, Nurvix Care Tech. Email grievance@nurvix.care · +91-90000-00000. We acknowledge requests within 48 hours and respond within the timeframe required by applicable law.
If you are not satisfied with our response, you may approach the Data Protection Board of India as provided under the DPDP Act.
