Privacy Policy
Last updated: June 25, 2026
1. INTRODUCTION
HomeoHub ("we", "us", "our") is committed to protecting the privacy and personal data of all users. This Privacy Policy explains how we collect, use, store, and disclose your personal information in connection with your use of our platform, in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. DATA FIDUCIARY
HomeoHub acts as the Data Fiduciary as defined under the DPDP Act, 2023. All personal data processed through the platform is handled under HomeoHub's control and responsibility in accordance with applicable law.
3. CATEGORIES OF PERSONAL DATA COLLECTED
We collect the following categories of data: 3.1 Identity and Contact Data: Name, date of birth, gender, mobile number, email address, residential address. 3.2 Health and Medical Data: Medical history, symptoms, clinical complaints, diagnoses, prescriptions, test reports, and other health-related information voluntarily shared by you. 3.3 Technical Data: IP address, device type, browser type and version, operating system, session activity, and log data. 3.4 Payment Data: Transaction ID, payment mode, and billing information processed via third-party payment gateways. We do not store card or banking credentials. 3.5 Consent Records: Timestamp, IP address, consent version, and user ID at the time of consent collection. 3.6 Communication Data: Messages, queries, and consultation records exchanged through the platform.
4. PURPOSE OF DATA PROCESSING
Your personal data is processed for the following purposes: (a) Registration, authentication, and account management; (b) Facilitation of medical consultations and treatment services; (c) Assignment of practitioners and delivery of treatment packages; (d) Processing payments and issuing receipts; (e) Sending appointment reminders, treatment updates, and service notifications; (f) Compliance with legal, regulatory, and judicial obligations; (g) Improvement of platform features and services using anonymised analytics; (h) Internal record-keeping and audit trails.
5. LEGAL BASIS FOR PROCESSING
Personal data is processed on the basis of: (a) Consent freely given by the data principal at the time of registration and service initiation; (b) Performance of a contract for the delivery of healthcare services; (c) Compliance with legal obligations under applicable Indian law; (d) Legitimate interests of HomeoHub in operating a safe and compliant platform.
6. SENSITIVE PERSONAL DATA
Health and medical information constitutes Sensitive Personal Data or Information ("SPDI") under applicable law. Such data is collected only with your explicit informed consent and is processed solely for the purpose of providing treatment-related services. SPDI is not shared with any third party without your express consent, except where required by law or court order.
7. DATA SHARING AND DISCLOSURE
We do not sell your personal data. Your data may be shared with: 7.1 Assigned Practitioners: The practitioner assigned to your case will have access to your health data strictly for the purpose of providing clinical services. 7.2 Payment Processors: Third-party payment gateways process transaction data in accordance with their own privacy and security standards. 7.3 Technology and Hosting Providers: Infrastructure and cloud service providers operating under appropriate data processing agreements. 7.4 Legal and Regulatory Authorities: Where required by court order, applicable law, or government directive. 7.5 Anonymised Research: Aggregate and de-identified data may be used for clinical research and platform improvement. This data cannot be traced back to individual users.
8. TELEMEDICINE DATA
Consultation records, clinical notes, prescriptions, and communications generated during telemedicine sessions are retained for a minimum period of seven (7) years in compliance with applicable medical record-keeping standards. Recorded sessions, where applicable, are retained for a minimum of five (5) years.
9. DATA RETENTION
We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, and thereafter for the following minimum periods: (a) Medical records and clinical data: 7 years from the date of last interaction; (b) Recorded consultation sessions: 5 years; (c) Consent records: 7 years from the date of consent; (d) Payment records: As required by financial and tax laws; (e) Account data: For the duration of active account plus 3 years after closure.
10. DATA SECURITY AND CYBER INCIDENT DISCLAIMER
HomeoHub implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include encryption, access controls, secure data transmission, and periodic security audits. However, no transmission over the internet or electronic storage system is entirely secure. Despite HomeoHub's best efforts, the possibility of a cyber attack, data breach, ransomware attack, or unauthorised third-party intrusion cannot be entirely eliminated. HomeoHub shall bear no liability, direct or indirect, for any loss, theft, unauthorised disclosure, corruption, or misuse of personal data arising from: (a) Cyber attacks, hacking, or intrusion by malicious third parties beyond HomeoHub's reasonable control; (b) Malware, ransomware, phishing, or social engineering attacks targeting the platform or its infrastructure; (c) Vulnerabilities in third-party software, hosting providers, or internet infrastructure not within HomeoHub's direct control; (d) Force majeure events including government-directed cyber warfare, nation-state attacks, or large-scale infrastructure failures; (e) Any breach resulting from the user's own device being compromised, credentials being shared, or negligent handling of login information. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, HomeoHub will endeavour to notify affected users and the relevant regulatory authorities in accordance with applicable law. HomeoHub's obligation is limited to such notification and does not constitute an admission of liability.
11. COOKIES AND TRACKING
The platform may use cookies and similar tracking technologies to enhance your browsing experience, maintain session state, and collect usage analytics. You may manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.
12. CHILDREN'S DATA AND PARENTAL CONSENT
12.1 HomeoHub's services are not intended for individuals below the age of 18 years without verifiable parental or guardian consent, in compliance with Section 9 of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). 12.2 Where treatment is sought for a minor, the parent or legal guardian must register on the minor's behalf and provide all required consents. HomeoHub shall not knowingly process personal data of a child without obtaining verifiable parental consent prior to such processing. 12.3 HomeoHub expressly commits to not engaging in: (a) Behavioural monitoring or tracking of children; (b) Targeted advertising directed at children; (c) Collection of data from children beyond what is strictly necessary for the delivery of healthcare services; (d) Psychological profiling of children for any commercial purpose. 12.4 A parent or legal guardian may at any time withdraw consent for the processing of their child's personal data by submitting a written request to info@homeohub.in. Withdrawal shall not affect the lawfulness of processing carried out prior to such withdrawal. Upon withdrawal, HomeoHub shall cease further processing and may suspend related services. 12.5 Any user who misrepresents the age of a minor or provides false parental consent shall bear sole and exclusive legal liability for such misrepresentation and all consequences arising therefrom.
12A. AUTOMATED PROCESSING AND AI-ASSISTED SERVICES
12A.1 HomeoHub operates an AI-assisted health guidance service known as Dr. Intelligent. This service uses artificial intelligence to analyse user-provided health information, symptoms, and medical history and to generate informational health guidance. 12A.2 Users acknowledge and agree that: (a) Outputs generated by Dr. Intelligent are informational and educational in nature and do not constitute a medical diagnosis, clinical prescription, or professional medical advice; (b) Dr. Intelligent is not a registered medical practitioner and does not replace the independent clinical judgment of a qualified healthcare professional; (c) AI-generated guidance may be incomplete, inaccurate, or unsuitable for an individual's specific medical circumstances; (d) Users must not make medical decisions — including initiating, discontinuing, or modifying any treatment — based solely on AI-generated outputs. 12A.3 HomeoHub does not permit fully automated consequential clinical decisions without human practitioner oversight. All prescriptions and clinical treatment plans must be authorised by an assigned qualified practitioner. 12A.4 Users have the right to request that any AI-generated health guidance be reviewed by a human practitioner. Such requests may be submitted through the platform's support channel or at info@homeohub.in. 12A.5 Consultation data processed through Dr. Intelligent may be used in anonymised, aggregated form to improve platform performance and clinical safety. No personally identifiable data is used to train external AI models or shared with AI vendors without explicit user consent.
13. HOMEOHUB UNIVERSAL LIVING IDENTITY (HH-ULI)
HomeoHub assigns each registered user a unique, permanent identifier known as the HomeoHub Universal Living Identity ("HH-ULI") in the format HH-H-XXXXXXXX. The HH-ULI: (a) Is permanently assigned to a single individual and is never reused or reassigned to any other person; (b) Serves as the primary anchor for all health records, consultation history, prescriptions, laboratory reports, and insurance data; (c) Remains with the individual across all account changes, device changes, or contact detail updates; (d) Is permanently retired upon confirmed death of the holder — not deleted — to preserve the complete lifetime medical history; (e) May in the future incorporate biometric anchors including thumbprint, retinal scan, and DNA fingerprint as additional verification layers. The HH-ULI belongs to the individual, not to any account, device, guardian, or custodian. Health records attached to a HH-ULI cannot be merged into or transferred to another person's identity.
14. GOVERNMENT IDENTITY DOCUMENTS
To strengthen identity verification and prevent duplicate account creation, HomeoHub may collect and store government-issued identity document numbers ("GovIDs") including but not limited to Aadhaar (India), PAN Card, Passport, Social Security Number (USA), National Insurance Number (UK), Emirates ID (UAE), and equivalent identity documents from other jurisdictions. 14.1 GovID data is stored in encrypted form and is used exclusively for: (a) Identity verification and de-duplication of user accounts; (b) Linking health records to the correct individual; (c) Facilitating custodian transfer upon verified life events such as death, divorce, or court orders. 14.2 Submission of GovIDs is voluntary at the time of registration but may be required for certain advanced platform features or higher trust-level access. 14.3 A GovID number already associated with an existing HomeoHub account cannot be linked to a second account. Detection of a duplicate GovID will result in a block and notification to contact HomeoHub Support for account review and potential merging. 14.4 HomeoHub does not share GovID data with any third party except where required by applicable law or valid court order.
15. HEALTH INSURANCE DATA
Users may voluntarily upload and store health insurance policy details including policy documents in PDF format, policy name, insurer, policy number, coverage dates, coverage amounts, and coverage inclusions and exclusions. 15.1 Insurance data is stored as part of the user's HH-ULI health record and is used exclusively to: (a) Assist the AI diagnostic system (Dr. Intelligent) in providing coverage-aware treatment recommendations; (b) Enable users to make informed decisions about treatment options in relation to their insurance benefits. 15.2 Insurance documents are processed by an AI system for automated data extraction. By uploading an insurance document, you consent to such automated processing. The extracted data is stored under your HH-ULI and is not shared with any insurer, employer, or third party without your explicit consent. 15.3 Users are responsible for the accuracy of insurance information provided on the platform. HomeoHub does not verify insurance claims, act as an intermediary with insurance providers, or guarantee coverage for any treatment.
16. HEALTH RECORD OWNERSHIP AND CUSTODIAN ACCESS
16.1 Ownership: All health records, consultation notes, prescriptions, laboratory reports, and related data generated or stored under a HH-ULI belong exclusively to the individual identified by that HH-ULI ("Record Owner"). Custodians, guardians, and account holders who manage records on behalf of a minor or dependent do not hold ownership of such records. 16.2 Custodians: A custodian is a person who holds access rights to a minor's or dependent's health records. Custodian access does not confer ownership. Multiple custodians (primary and secondary) may be designated for a single HH-ULI. 16.3 Custodian Transition: In the event of: (a) Divorce or separation: Custodian access may be modified upon submission of a valid court order or mutual written agreement between custodians, subject to HomeoHub's administrative review; (b) Death of a custodian: Access shall transfer to the designated emergency nominee on record. If no nominee is designated, the next of kin must provide a death certificate and valid succession documentation to HomeoHub Support; (c) Incapacity of a custodian: A legal guardian may apply for custodian access upon submission of valid legal documentation. 16.4 When a minor reaches the age of 18, HomeoHub will facilitate the transfer of full record ownership to the individual upon successful identity verification at their request.
17. IDENTITY DEDUPLICATION AND ACCOUNT MERGING
17.1 Each individual is permitted to hold only one HomeoHub account. The creation of multiple accounts by the same individual, whether through different contact details, devices, or identity information, is a violation of HomeoHub's Terms of Use. 17.2 HomeoHub employs automated and manual processes to detect duplicate accounts, including matching of GovIDs, mobile numbers, biometric data, and profile similarity. 17.3 Upon detection of duplicate accounts, HomeoHub may: (a) Notify the user and request confirmation of the duplicate; (b) Initiate an administrative account merging process, consolidating health records from all detected duplicate accounts under a single primary HH-ULI; (c) Deactivate secondary accounts following merging, retaining all records for audit purposes. 17.4 Deliberate creation of multiple accounts to circumvent HomeoHub's identity verification, avail free services fraudulently, or conceal medical history from treating practitioners may result in permanent suspension of all associated accounts without refund and, where applicable, reporting to relevant legal authorities.
18. INTERNATIONAL USERS
If you access the platform from outside India, your data will be processed and stored in India in accordance with Indian law. By using the platform, international users consent to such cross-border processing. HomeoHub does not guarantee compliance with data protection laws of any jurisdiction other than India.
19. YOUR RIGHTS AS DATA PRINCIPAL
Under the DPDP Act, 2023, you have the following rights: (a) Right of Access: To obtain confirmation of whether your data is being processed and a summary thereof; (b) Right to Correction: To correct inaccurate or outdated personal data; (c) Right to Erasure: To request deletion of personal data, subject to legal retention obligations; (d) Right to Grievance Redressal: To file a complaint with HomeoHub's Grievance Officer; (e) Right to Nominate: To nominate a person to exercise your rights in the event of incapacity or death. Requests may be submitted to the Grievance Officer at info@homeohub.in. We will respond within a reasonable period as prescribed under applicable law.
20. WITHDRAWAL OF CONSENT
You may withdraw your consent to data processing at any time by contacting us at info@homeohub.in. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal. Please note that withdrawal of consent may result in suspension or termination of services.
21. GRIEVANCE OFFICER
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, HomeoHub has designated a Grievance Officer to address complaints and concerns regarding the processing of personal data. Grievance Officer: Yagneshkumar Baraiya Designation: Data Protection Officer Organisation: Homeohub Healthcare Private Limited Email: info@homeohub.in All grievances will be acknowledged within 48 hours and addressed within the timeframe prescribed under applicable law.
22. THIRD-PARTY LINKS
The platform may contain links to third-party websites or services. HomeoHub is not responsible for the privacy practices of such third parties. Users are encouraged to review the privacy policies of any linked websites before providing personal information.
23. CHANGES TO THIS POLICY
HomeoHub reserves the right to update this Privacy Policy at any time. Revised policies will be published on the platform with an updated effective date. Continued use of the platform after any modification constitutes acceptance of the revised policy. Users are encouraged to review this policy periodically.
24. CONTACT
For any questions, concerns, or requests relating to this Privacy Policy or data processing practices, please contact us at info@homeohub.in.