Privacy Policy

1. Introduction

This Privacy Policy explains how Dhruvstack ("we," "us," or "our") collects, uses, stores, and protects information when you use the Orva mobile application and our web services at orva.dhruvstack.com.

By accessing or using Orva, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue using the service.

2. Information We Collect

We collect only the data necessary to provide you with timely medication reminders, family caregiver collaboration, and secure account access.

2.1 Account & Registration Information

• Basic Profile Details: When you register an account, we collect your name, email address, and optional phone number.
• Single Sign-On & Social Logins: If you choose to sign in via Google or Facebook Login, we collect only your basic public profile name and verified email address to authenticate your session. We do not access your contact lists, friend lists, or post content to your social feeds.

2.2 Health & Medication Records

• Medication Schedules: Medicine names, dosage strengths, timing schedules, and meal instructions (e.g. before/after food).
• Adherence Logs: Timestamps of doses recorded as taken, snoozed, or missed.
• Health Vitals & Diagnostics: Optional blood pressure, blood glucose, and symptom logs entered voluntarily by you to prepare doctor summaries.
• Emergency Medical ID: Important emergency contact numbers, blood group, and allergy notes saved for first responders.

2.3 Caregiver Circle & Device Diagnostics

• Family Circle Links: Contact details of family members or caregivers you intentionally pair via QR code or invite link.
• Device State & Battery Diagnostics: When companion mode is enabled, the app shares battery level percentage and connectivity status with designated family caregivers to verify that an elder's phone remains powered and active.
• Notification Tokens: Device identifiers used to deliver time-critical medicine alarms and missed-dose escalation alerts.

3. How We Use Your Information

We process collected information strictly for service operations and patient safety:

• Delivering Dose Reminders: Sounding alarms and notifications at your scheduled intake intervals.
• Family Caregiver Escalation: Alerting authorized family members if a vital scheduled dose is missed beyond your configured grace period.
• Transactional Email Communications: Sending essential service messages, such as One-Time Password (OTP) verification codes, Caregiver Circle invitations, password recovery links, and urgent escalation alerts.
• Drug Interaction Safety: Cross-referencing added medications against clinical registries (such as the Ayushman Bharat Digital Mission drug directory) to warn you of potential contradictions.

4. Social Sign-In & Platform Compliance

When you choose to authenticate using third-party social logins (including Google Sign-In and Facebook Login):

• We access only the basic identity scopes (public_profile and email) required to establish your user account.
• We never use social data for targeted advertising or marketing profiling.
• You may disconnect social authentication at any time through your social platform account settings or through our Account & Data Deletion portal.

5. Email & Communications Standards

Orva adheres to strict anti-spam principles and deliverability standards:

• Strictly Transactional: We send only transactional, user-initiated communications. We never send unsolicited marketing promotions or third-party ads.
• Explicit Opt-In: Messages are sent only to email addresses provided directly during registration or confirmed during caregiver pairing.
• Preferences & Opt-Out: Users can update their notification preferences directly in the app settings or contact our support team to adjust communications. See our Email & Communications Policy for full details.

6. Data Security & Storage

We employ robust technical and organizational safeguards to protect your personal and medical information:

• On-Device Encryption: Local SQLite databases are stored securely on your mobile device.
• Encrypted Transmission: All network communication between the app and our backend uses Transport Layer Security (TLS 1.2 / TLS 1.3) with HTTPS.
• Confidentiality: Server access is strictly restricted to authorized engineering personnel using multi-factor authentication.

7. Information Sharing & Third Parties

We do not sell, rent, or trade your personal information. Data is shared only under specific circumstances:

• Your Designated Caregivers: Adherence status and emergency contacts are shared exclusively with the individuals you explicitly connect in your Care Circle.
• Infrastructure Providers: Trusted cloud and email infrastructure providers operating under strict data processing agreements and confidentiality obligations.
• Legal Obligations: When required by applicable law, court order, or governmental authority.

8. User Rights & Data Deletion

You have complete control over your personal data:

• Access & Export: You can view, edit, or export your medication history and vitals reports within the app at any time.
• Account & Data Deletion: You can permanently delete your account and all associated cloud data directly in the app (Settings → Account → Delete Account) or by following the instructions on our Account & Data Deletion Page.

9. Policy Updates

We may update this Privacy Policy periodically. Any revisions will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically.

10. Contact Us

If you have questions, concerns, or data requests regarding this Privacy Policy, please contact our support team:

• Entity: Dhruvstack / Orva Health
• Support Email: support@dhruvstack.com
• Website: https://orva.dhruvstack.com