Privacy Policy

OjasLabs is a personal health records platform that helps Indian families track and understand their health reports over time. We are not a hospital, clinic, or diagnostic centre. We do not provide medical diagnoses, prescriptions, or treatment plans.

OjasLabs is currently operated by Avinash Palakurthi, Hyderabad, Telangana, India.

Account information

• ·Your name and email address from your Google account
• ·Your Google profile photo (optional, used for display only)

Health data (only with your explicit consent)

• ·Health report files you upload (PDF or images of lab reports)
• ·Extracted health values (for example: blood sugar levels, haemoglobin, cholesterol) — extracted automatically from your uploaded reports using AI
• ·Family member profiles you create (name, relation, primary health condition)

Consent records

• ·A record of when you gave consent, what you agreed to, and when it expires. This is required by the DPDP Act 2023.

We use your data for exactly one purpose: to show you your own health history.

• ·Your uploaded reports are read by AI to extract health values
• ·Extracted values are stored so you can see your trends over time (for example: how your HbA1c has changed over the last 6 months)
• ·Your data is never used to train AI models, build advertising profiles, or for any purpose other than showing you your own health information

• ·All your data is stored on servers located in India. Your health data never leaves the country.
• ·Data is encrypted at rest and in transit
• ·Access to your data is restricted — only you and the family members you add to your account can see your health information
• ·We use industry-standard authentication (Google Sign-In) so we never store or see your password

Under the Digital Personal Data Protection Act 2023, you have the following rights:

• ·Right to access — you can see all your data by logging into your account at any time
• ·Right to erasure — you can delete your account and all your data permanently from Account Settings. We will delete everything within 30 days of your request.
• ·Right to withdraw consent — you can withdraw your consent at any time. This will stop further processing of your health data. Existing data will be deleted on request.
• ·Right to grievance — if you believe your data rights have been violated, you can contact our Grievance Officer (details below)

• ·Before we store or process any health data, we ask for your explicit consent through a clear on-screen notice
• ·Consent is valid for 1 year. After 1 year, we ask again before continuing to process your data.
• ·A record of your consent (what you agreed to, when, and for how long) is stored securely as required by the DPDP Act 2023

If we make significant changes to this privacy policy, we will notify you by email or by showing a notice when you next log in. The effective date at the top of this page will always show when it was last updated.

This privacy policy is governed by the following Indian laws:

• ·DPDP Act 2023— Digital Personal Data Protection Act (India's main data protection law)
• ·IT Act 2000 + SPDI Rules 2011 — Information Technology Act and Sensitive Personal Data rules
• ·Consumer Protection Act 2019 — applicable when fees are charged