At Vardaan, we value your privacy and are committed to protecting your personal and health data. This Privacy Policy explains how we collect, use, share, and safeguard your information across our mobile apps, web portals, IoT devices, and elder care home platforms. By using Vardaan, you consent to the practices described in this Policy.

1. Who This Policy Applies To

This Privacy Policy applies to all users of Vardaan, including:

• Elders (B2C users who register directly).
• Residents (elders registered via elder care homes).
• Family Members & Guardians.
• Caregivers & Healthcare Providers.
• Elder Care Home Staff & Administrators.

2. Data We Collect

We collect the following categories of data depending on your role:

• Personal Data: Name, age, gender, contact details, family/guardian details.
• Health Data: Vitals (e.g., blood pressure, glucose, oxygen levels, ECG, weight, activity logs, medication adherence, mood).
• Resident Data (B2B): Profiles, staff notes, shift schedules, incident reports.
• Device Data: IoT readings, smart home status, wearables, usage logs.
• Emergency Data: GPS location, SOS events, fall detection triggers.
• Usage Data: App activity, preferences, analytics logs.

3. How We Use Your Data

We process your data to:

• Deliver health monitoring, alerts, and emergency support.
• Provide dashboards to family, caregivers, and care homes.
• Facilitate medical consultations, incident reporting, and risk predictions.
• Integrate with third-party services (insurance, pharmacy, ride-hailing, IoT).
• Improve Vardaan services via anonymized analytics.

We do not sell your personal health data to advertisers.

4. Data Sharing

We may share your data with:

• Family & Guardians: With elder/resident consent.
• Caregivers & Healthcare Providers: For monitoring, treatment, and emergencies.
• Elder Care Homes & Staff: For residents’ daily care and compliance records.
• Emergency Responders: Ambulance, local first responders when SOS is triggered.
• Trusted Third Parties: Pharmacies, insurance providers, IoT vendors, only when required.

All third-party integrations are bound by confidentiality and data protection agreements.

5. Consent & Control

• You give consent when registering, sharing data, or enabling integrations.
• You can withdraw consent anytime (may limit services).
• Residents: Consent may be managed jointly with the elder care home and/or guardian.
• Nomination: Elders and residents may nominate a representative to manage rights in case of incapacity or death.

6. Your Rights

Depending on your region, you may have the right to:

• Access your personal and health data.
• Request correction, completion, or deletion.
• Port your data to another service.
• Restrict or object to certain processing.
• File complaints with data protection authorities.

We respond to verified requests within legally mandated timelines.

7. Data Retention

• Your data is stored as long as your account or contract is active.
• Certain records (e.g., incidents, audit logs) may be retained longer for regulatory or contractual obligations.
• Once deleted, backups and archives are cleared within 90 days (unless required by law).

8. Security Measures

We use industry-standard safeguards to protect your data:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest.
• Access Controls: Role-based permissions for family, staff, and admins.
• Authentication: Biometric or PIN-based login options.
• Audit Trails: Immutable logs for actions and alerts.
• Monitoring: Regular penetration testing and compliance audits.

9. International Compliance

We comply with applicable laws in regions where we operate:

• GDPR (Europe): Rights of access, erasure, portability, objection.
• HIPAA (U.S.): Protection of health information, BAAs with providers.
• DPDP Act (India): Consent, correction, erasure, right to nominate.
• Other local laws (UK GDPR, PDPA Singapore, PIPEDA Canada, CCPA/CPRA California) as required.

10. Children & Guardianship

Vardaan is designed for elders. For elders under guardianship (e.g., due to incapacity), data processing requires consent from a guardian or authorized representative.

11. Data Transfers

If your data is transferred outside your country, we use lawful mechanisms such as:

• Standard Contractual Clauses (SCCs) for EU/EEA users.
• Adequacy decisions or equivalent safeguards in other regions.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via the app or email. Continued use means acceptance.

13. Contact Us

For privacy concerns, data access requests, or complaints, contact:

📧 privacy@vardaancare.com
📞 +91 9980081664
👤 hello@vardaancare.com