Privacy Policy

At HealthFlexi, your privacy is important to us. This Privacy Policy explains how we collect, use, store, and share your personal and health-related information when you engage with our medicated weight loss services, including GLP-1 + GIP-based interventions (such as tirzepatide), teleconsultations, diagnostics, and lifestyle guidance.

We are committed to protecting your data in accordance with Indian laws, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and the applicable rules for Sensitive Personal Data or Information (SPDI).

1. Information We Collect

When you use our services, we collect the following categories of data:

a. Personal Information

Full name, mobile number, email address, and residential address
Gender, age, and date of birth
Identity proof (if required for prescription validation)
Payment method details and transaction history

b. Sensitive Personal Data or Information (SPDI)

Medical history and current health conditions
Prescription details and medication usage (e.g., GLP-1 + GIP injections)
Lifestyle data (e.g., diet, physical activity, sleep patterns)
Body measurements (e.g., weight, BMI, waist circumference)
Diagnostic test results from partner laboratories

c. Technical & Usage Data

Device identifiers, IP address
Usage behavior on our website or mobile app
Activity logs related to consultations and program engagement
Cookies and similar tracking technologies

2. Purpose of Data Collection

Your information helps us:

Evaluate eligibility for weight loss medication and clinical protocols
Schedule and manage teleconsultations with licensed doctors and nutritionists
Create and personalize diet, fitness, and lifestyle plans
Coordinate diagnostic tests and follow-up services
Track progress and adjust your treatment plan
Process payments and manage subscriptions
Conduct anonymized internal research and analytics
Comply with legal and medical record-keeping requirements

3. Sharing Your Information

We share your data only as necessary and with appropriate safeguards:

We do not sell, rent, or trade your personal information to advertisers or third parties.

Healthcare Providers: Licensed doctors, dietitians, and health coaches involved in your care
Diagnostic Partners: NABL-accredited labs for tests and reports
Technology Vendors: Secure platforms that host our software and communication tools
Payment Processors: For billing and subscription services
Regulatory Authorities: When required by Indian law, court order, or for public health compliance

4. Data Protection and Security

We follow industry-standard security practices including:

End-to-end encryption for data transmission and storage
HIPAA-compliant data storage systems
Multi-factor authentication and access control
Regular security audits and monitoring
Secure disposal of data when no longer needed

5. Your Rights as a User

As a user of HealthFlexi, you have the right to:

Access and review your personal data
Request correction of inaccurate data
Withdraw consent at any time (may impact services)
Request deletion of data, subject to retention obligations
Data portability in commonly used formats

To exercise these rights, please contact us at support@healthflexi.com.

6. Consent and Legal Basis

By signing up for our services, completing medical assessments, or participating in consultations, you give explicit consent for us to process your personal and health information.

If you are using HealthFlexi on behalf of someone else (e.g., a minor or dependent), you confirm you have the authority to share their information.

7. Data Retention Policy

Account data: Retained while your account is active or until consent is withdrawn
Health/medical data: Retained for at least 3 years post-interaction or program completion
Financial transaction data: Retained for 8 years per tax/company laws
Other data: Retained for 3 years post-interaction, unless required for legal purposes

8. Use of Cookies and Analytics

Our website and app may use cookies and third-party analytics tools to:

Improve functionality and user experience
Monitor engagement and performance
Deliver personalized recommendations
Remember your preferences and settings

You may adjust your cookie settings in your browser at any time.

9. Children's Privacy

Our services are intended for individuals 18 years or older. We do not knowingly collect personal information from children under 18 without verifiable parental consent. If we discover that we have collected such information, we will delete it promptly.

10. Updates to This Policy

We may revise this Privacy Policy periodically. Any changes will be posted on our website with the updated effective date. Continued use of our services after changes implies your acceptance of the revised policy.