“My Arvaya” (“we”, “us”, “our”, or the “App”) is a mobile application operated by Arvaya Healthcare Limited — a technology platform that helps you discover, book, and manage healthcare services with partner hospitals, clinics, doctors, diagnostic laboratories, and other healthcare providers (“Partners”). This Privacy Policy explains what personal and health data we collect, how we use, share, and retain it, and the rights available to you under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian law.
By downloading, registering for, or using the App, you consent to the collection and processing of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, we ask that you discontinue use of the App. This Privacy Policy should be read together with our Terms and Conditions of Use, available within the App and at our website.
My Arvaya is operated by Arvaya Healthcare Limited. Registered Office: Nirvana Co Working Spaces, Mezzanine Floor, Itag Plaza, ABC, G S Road, Dispur, GMC, Guwahati, Assam – 781005, India.
Email: developer@arvayahealth.com | Website: https://www.arvayahealth.com/
We collect: (a) Identity and account details – name, mobile number, email, date of birth, gender, and login credentials, plus, where you choose to provide it, your ABHA number for linking ABDM health records; (b) Health information – appointment and visit details, lab reports, prescriptions, ABDM/ABHA-linked records, inputs and responses from AI-assisted features, and data synced from connected wearables; (c) Payment and transaction data – wallet balance, transaction history, cashback, loyalty points, and referral activity (card/UPI/bank details are collected directly by our payment gateway partners; we do not store full payment credentials); (d) Location and device information – approximate or precise location where permitted, and device identifiers, IP address, OS, app version, and usage/crash analytics; and (e) Support communications – records of correspondence with our support and grievance team.
We use this information to create and manage your account; enable appointment booking and share relevant health data with the Partner you book with; retrieve and display your visit summaries, reports, and ABDM/ABHA-linked records; process payments and administer your wallet, cashback, loyalty, and referral benefits; provide support and send service notifications; improve the App and prevent fraud or misuse; send promotional communications unless you opt out; and comply with applicable law, including the DPDP Act and healthcare-sector regulations.
We process your data on the basis of consent given at registration and at each point of collection (for example, granting location access or linking ABHA), and, where applicable, to perform services you request or to comply with law. You may withdraw consent at any time via App settings or by emailing us; this may limit certain features. Subject to applicable law, you may access, correct, or request erasure of your data; withdraw consent; nominate a representative in case of death or incapacity; and lodge a grievance with our Grievance Officer (Section 8) or, if unresolved, the Data Protection Board of India. To exercise these rights, email developer@arvayahealth.com from your registered address; we may verify your identity before acting.
We share data only as necessary: with the specific Partner you book with; with the ABDM ecosystem and connected health information providers, per your ABDM consent; with payment gateway and banking partners to process transactions; with ambulance/emergency-response providers you request; with wearable providers you connect; with infrastructure service providers bound by confidentiality obligations; with authorities where legally required or to protect rights and safety; and with a successor entity on a merger or sale, bound by equivalent protections. Each third party processes data under its own privacy policy; we do not sell your personal data.
We use reasonable technical and organisational safeguards, including encryption in transit, access controls, and audit logging, though no method of storage or transmission is completely secure. We retain data for as long as your account is active and thereafter as needed to fulfil this Policy's purposes and comply with legal, tax, and healthcare record-keeping obligations. On account deletion, we delete or anonymise your data except where retention is legally required. Data is stored primarily in India; any processing abroad is safeguarded consistently with this Policy and the DPDP Act.
The App is intended for adults. Where a parent or guardian manages services for a minor or dependant, they are responsible for the accuracy of the information provided and for having authority to consent to processing that person's health data. We do not knowingly collect data directly from children without verifiable guardian consent.
Our Grievance Officer can be reached at the address and email in Section 1. We aim to acknowledge and resolve grievances within the timelines prescribed by law. In the event of a personal data breach likely to affect you, we will notify you and, where required, the Data Protection Board of India, as prescribed under the DPDP Act.
We may update this Policy to reflect changes in our practices, services, or applicable law, posting the revised version in the App and on our website with an updated Effective Date, and providing additional notice for material changes. Continued use of the App after such changes constitutes acceptance of the updated Policy.
This Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Guwahati, Assam.
© 2026 Arvaya Healthcare Limited. All rights reserved.