NexCure — Privacy Policy

1. Introduction

NexCure Healthcare Technologies Private Limited ("NexCure," "we," "us," or "our") is committed to protecting the privacy and security of individuals who use our website, our Android and iOS mobile applications, and all associated services (collectively, the "Platform"). This Privacy Policy explains what personal and health-related information we collect, how we use, share, and safeguard that information, and the rights available to you in respect of your information.

This Privacy Policy is drafted with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Digital Personal Data Protection Rules, 2025, and other applicable Indian law governing the processing of personal data.

By accessing or using the Platform, you consent to the collection, use, storage, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Policy, you must not use the Platform.

2. Information We Collect

Voluntarily Provided Information

We collect information that you voluntarily provide when you register for and use the Platform, including:

• Full name, email address, phone number, date of birth, and gender
• Residential address (optional)
• Health information, including symptoms, medical history, and information shared with the AI Assistant or Doctors
• Medical records and documents uploaded by you
• Appointment details, including booking history and scheduling preferences

Automatically Collected Technical Information

When you access the Platform, we automatically collect certain technical information, including:

• Device information, including device type, operating system, and unique device identifiers
• Browser type and version and Internet Protocol (IP) address
• Cookies and similar tracking technologies
• Analytics data regarding your interaction with the Platform
• Crash reports, diagnostic logs, and usage logs (pages visited, features used, timestamps)

3. How We Use Your Information

NexCure processes personal and health information for the following purposes:

• To provide, operate, and maintain the healthcare services offered through the Platform, including symptom triage, doctor routing, and appointment booking.
• To improve the accuracy, relevance, and safety of AI Assistant responses over time.
• To enhance the overall user experience and develop new Platform features.
• To provide customer support and respond to inquiries.
• To maintain the security and integrity of the Platform, and to detect, prevent, and address fraud, abuse, or unauthorized access.
• To send appointment reminders, service notifications, and other transactional communications.
• To comply with applicable legal, regulatory, and law enforcement obligations.

4. Legal Basis for Processing

Under the DPDP Act, NexCure processes personal data primarily on the basis of your explicit, informed consent, obtained at the time of registration and prior to the collection of sensitive categories of information such as health data. Where applicable, NexCure may also process personal data on the basis of "legitimate uses" recognized under the DPDP Act.

5. Cookies and Tracking Technologies

NexCure and its service providers use cookies, web beacons, and similar technologies to operate the Platform, remember your preferences, authenticate your session, and understand how the Platform is used.

6. AI Processing of Health Information

When you interact with the NexCure AI Assistant, the symptoms, health information, and other data you input are processed by artificial intelligence systems to generate educational guidance and doctor-routing suggestions.

Data submitted to the AI Assistant may be retained by NexCure for a limited period to enable conversation continuity and service improvement.

7. Data Sharing and Disclosure

NexCure does not sell your personal information. We may share your information with the following categories of recipients, solely as necessary to provide the Services:

• Doctors: With whom you have booked an appointment or initiated a consultation.
• Third-Party Service Providers: Who support Platform operations, including authentication, cloud hosting, payment gateways, analytics, and AI APIs.
• Regulatory & Law Enforcement: Where required by applicable law, regulation, legal process, or governmental request.
• Corporate Transactions: A successor entity in connection with a merger, acquisition, restructuring, or sale of assets.

8. Security and Data Retention

NexCure implements industry-standard technical and organizational security measures designed to protect personal and health information, including encryption of data in transit and at rest, secure authentication, and role-based access controls.

We retain data for as long as necessary to provide the Services and comply with applicable legal and regulatory obligations. Upon account deletion, NexCure will delete or anonymize personal information within 30 days, except where retention is required by law.

9. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information NexCure holds about you.
• Correct or update inaccurate or incomplete personal information.
• Request deletion of your personal information, subject to legal retention requirements.
• Data Portability: Download or receive a copy of your personal information in a portable format.
• Withdraw consent to the processing of your personal information at any time.
• Lodge a grievance with NexCure's Grievance Officer.

10. Contact Us & Grievance Officer

In accordance with applicable Indian law, NexCure has designated a Grievance Officer to address privacy-related complaints and concerns:

• Name: Dr. Vikram Sharma, Chief Data Privacy & Grievance Officer
• Email: grievance@nexcure.in
• Support Email: support@nexcure.in
• Contact Phone: +91 (120) 456-7890
• Address: Level 4, Cyber Park, Sector 62, Noida, Uttar Pradesh 201309, India