Privacy Policy

Last updated: October 2026

    DHRUVAID is an emergency identity platform. We handle sensitive health data. We take privacy seriously and comply with India's Digital Personal Data Protection (DPDP) Act 2023.
  

1. Who We Are

DHRUVAID is operated by Dhruv Emergency Response Systems (OPC) Private Limited (CIN U62011AP2026OPC126435), registered in India. We provide emergency identity cards that help bystanders and medical responders access critical health information during emergencies.

2. What Data We Collect

Personal: Name, age, gender, phone number, photo
Medical: Blood group, allergies, medical conditions, surgery history
Insurance: Company name, policy number, TPA, coverage type
Emergency contacts: Names, phone numbers, relationship
Vehicle: Vehicle number, type
Location: GPS coordinates captured only during emergency triggers
Usage: Scan logs, emergency trigger timestamps, incident IDs
Health records you add: hospital visits, prescriptions, lab reports and other documents saved in your Health Vault, saved Specialist Finder histories, lab report explanations and your Health Summary
Nutrition calculator inputs (age, height, weight, activity, pregnancy or breastfeeding) — kept only in your own browser, not on our servers

3. Why We Collect It

To display your medical profile when your card is scanned in an emergency
To notify your emergency contacts during an emergency
To facilitate hospital pre-alerts and insurance pre-intimation (with your consent)
To provide you a dashboard to manage your profile
To explain your lab reports and documents, suggest which specialist to see, and give general food guidance — only when you use these services
To prepare your Health Summary for doctors and, with your emergency consent, for the treating hospital

3A. AI Processing of Your Documents

When you use the Medical Report Reader, document scanning or the AI clinical summary, the document image or the relevant medical facts are sent to Google Gemini (Google LLC) to produce the explanation. We do not send your name, phone number or ID numbers for the clinical summary. Google processes this data under its API terms; DHRUVAID does not allow it to be used for advertising. You review every AI result before it is saved, and you can choose not to use these services.

4. Emergency Data Sharing — Your Consent

We share your medical data with third parties (hospitals, ambulance services, insurance TPAs) ONLY when:

You have explicitly checked the Emergency Data Sharing Consent checkbox during activation
An emergency is triggered by scanning your QR code or tapping your NFC card

    Principle of Data Minimization: We share only what each party needs.

    Family → Full medical alert + GPS

    Hospital → Blood group, allergies, conditions, insurance details

    Ambulance → Blood group, allergies, GPS location only

    Insurance TPA → Name, policy number, incident ID only

5. Data Storage

All data is stored on MongoDB Atlas (cloud database) with encryption at rest
Servers are hosted on Render.com (Singapore region)
Documents you save to your Health Vault (including photos taken with "Scan now") are stored in private, encrypted cloud storage (Cloudflare R2; older files in our MongoDB Atlas database). They are not public and can only be opened through your DHRUVAID login
We do not store your data on local servers
Location data is stored only in scan logs for audit purposes

6. Your Rights (DPDP Act 2023)

Right to access — view all your data from your dashboard
Right to correction — edit your profile anytime from your dashboard
Right to erasure — delete documents from your Health Vault yourself, or request deletion of all your data by emailing contact@dhruvaid.in
Right to withdraw consent — uncheck emergency consent from your profile anytime
Right to grievance — contact our Grievance Officer at contact@dhruvaid.in

7. Data Retention

We retain your data for as long as your card is active. If you deactivate your card and request deletion, we delete all personal data within 30 days. Scan logs are retained for 1 year for audit purposes then automatically deleted.

8. Third Parties

We use the following third-party services:

Twilio — WhatsApp and SMS delivery (subject to Twilio's privacy policy)
MongoDB Atlas — Database storage
Cloudflare R2 — Private storage of Health Vault files
Render.com — Hosting
Razorpay — Payment processing (does not receive medical data)
Google Gemini — AI reading of lab reports and medical documents, and clinical summaries (only when you use these services)

We do not sell your data to any third party. We do not use your data for advertising.

9. Cookies

We use a secure login cookie to keep you signed in (up to 30 days, or until you log out). We do not use tracking cookies or advertising cookies. The Nutrition Guide stores your calculator inputs in your browser's local storage so you don't have to re-enter them.

10. Children

Our service is not directed at children under 18. For children's cards under the Elite family plan, a parent or guardian must complete activation and provide consent on the child's behalf.

11. Changes to This Policy

We may update this policy. We will notify registered users of material changes via WhatsApp/SMS.

12. Contact

Dhruv Emergency Response Systems (OPC) Private Limited (CIN U62011AP2026OPC126435)
Grievance Officer: contact@dhruvaid.in
Address: Prasadampadu, Vijayawada, Andhra Pradesh 521108