Carevie Privacy Policy

Introduction

We understand that privacy policies can be hard to read. We’ve tried to keep this one clear and straightforward. If you have questions, contact us at hello@carevie.com.

Who are we?

Carevie is a digital health information management platform. It allows users to create a secure account, upload and store medical documents, and access summaries or extracted information from their own content (where such features are enabled).

We do not replace professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for medical decisions.

Types of information we collect

We may collect the following categories of information depending on how you use Carevie:

• Account and identity information: name, email address, and basic profile information you choose to provide (for example, profile photo).
• Contact information: email address and optional phone number (if you provide it).
• Health and medical information: medical reports, prescriptions, bills, appointment details, notes, and other health-related files you upload or enter.
• Usage data: interactions with the platform, pages or features used, and activity logs (where applicable).
• Technical data: IP address, device type, browser, operating system, and server logs.
• Authentication/security data: login sessions, verification tokens, and security-related events (stored and processed securely).

How we use your personal data and why

We use personal data for the following purposes:

• To create and manage your Carevie account
• To store, organize, and display the content you upload (medical reports, prescriptions, bills, appointment information)
• To provide optional features such as document summaries or extracted information from your own uploads (where enabled)
• To maintain platform security, prevent abuse, and detect unauthorized access
• To provide customer support and respond to inquiries
• To communicate service-related messages (for example, security alerts or important notices)
• To comply with legal obligations and enforce our Terms

We do not use health data for advertising or marketing purposes.

How we collect your personal data

We collect personal data through:

• Information you provide directly during signup and profile setup
• Medical reports, images, files, and information you upload or enter voluntarily
• Your use of platform features (for example, viewing, uploading, searching, and organizing records)
• Automated technologies such as cookies and server logs
• Communications you send to us (for example, support requests)

Who we share your personal data with

We do not sell or rent your personal data.

We may share limited personal data with:
• Service providers who help us operate the platform (for example, hosting, database, storage, email delivery, analytics if enabled, and security monitoring). These providers act on our instructions to provide services to us.
• Legal or regulatory authorities where required by law or a lawful request.
• Professional advisors (such as lawyers or auditors) where necessary for compliance or protection of legal rights.

We require third parties to apply appropriate security and confidentiality obligations.

Your rights and choices

Subject to applicable Indian law (including the DPDP Act), you may have rights to:

• Access information about the personal data we process about you
• Correct inaccurate or incomplete personal data
• Request deletion of personal data (subject to lawful exceptions)
• Withdraw consent where processing is based on consent
• Raise concerns or lodge a grievance

To exercise these rights, contact us at hello@carevie.com. If you have a grievance, you can also email hello@carevie.com.

Security, integrity, and retention of your personal data

We implement reasonable technical and organizational measures intended to protect your data, such as:

• Secure authentication and access controls
• Encryption in transit (for example, HTTPS/TLS) and encryption at rest where applicable
• Restricted internal access and least-privilege permissions
• Monitoring and logging to help detect suspicious activity

Retention: We retain personal data for as long as your account is active or as necessary to provide the services you request. You may request deletion of your account and associated data. After deletion, some information may be retained if required by law or for legitimate purposes such as security, fraud prevention, backups, or dispute resolution. Backup copies, if any, may persist for a limited period based on our retention cycles.

Data transfers, storage and processing

Your personal data may be stored and processed on secure servers operated by Carevie or trusted service providers.

Depending on the infrastructure we use, your data may be processed or stored outside India. When this occurs, we take steps intended to ensure an appropriate level of protection consistent with applicable law and contractual safeguards with service providers.

Cookies and tracking technologies

Carevie uses cookies and similar technologies to:

• Maintain user sessions and authentication
• Improve platform performance and usability
• Remember preferences

You can control cookie usage through browser settings. Disabling cookies may affect platform features. For details, see our Cookie Policy.