Privacy Policy

1. Introduction & Entity Identity

Welcome to Kiicare. Kiicare is a healthcare technology initiative operated by its founding team in India ("we", "us", "our"). We are committed to protecting the privacy and security of your family's health data. This Privacy Policy explains how we collect, use, and safeguard your personal data in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023 of India and applicable international consumer privacy standards.

2. Data Localization & Global Infrastructure

Your family's health data is completely secure. 100% of our core database records, logs, and backups are stored on encrypted cloud servers located exclusively within India (AWS Mumbai Region). All data transmission across Indian and international regions is encrypted end-to-end using TLS 1.3 standards.

3. Information We Collect

• Caregiver Details: Name, email address, phone number (for OTP authentication), and city/country location.
• Patient Routine Details: Medication schedules, dosages, and daily dose confirmation logs.

Note: We intentionally do not collect highly sensitive diagnostic PII in crash logs or telemetry data to prevent accidental data breaches.

4. Data Principal Statutory Rights (DPDP Act 2023)

Under Chapter III of the DPDP Act 2023, as a Data Principal you hold the following statutory rights:

• Right to Access: Request a summary of personal data being processed.
• Right to Correction & Erasure: Request correction of inaccurate data or complete erasure of your family's records.
• Right of Grievance Redressal: Seek resolution of any privacy concerns via our designated Grievance Officer.
• Right to Nominate: Nominate an individual to exercise your rights in the event of incapacity or death.

5. Explicit Patient Consent

Under the DPDP Act, caregivers cannot solely authorize data tracking for adult patients. Before a patient's adherence data is tracked, the adult patient must provide explicit, separate consent via their own device during profile setup.

6. How We Use Your Data

We use your data solely to:

• Send timely medication reminders to patients.
• Trigger local-first full-screen alarms and dose reminders on patient devices.
• Provide adherence summaries to family caregivers.

We never sell, rent, or trade your personal or health data to third parties, advertising networks, or data brokers. Period.

7. Medical Disclaimer

Kiicare is not a medical device and does not provide medical advice, diagnosis, or treatment. It is strictly a routine reminder and adherence tracking tool. Always consult a qualified physician for medical decisions.

8. Age Requirement (18+)

Kiicare accounts may only be created by individuals who are at least 18 years of age. We do not knowingly collect personal data from minors without verifiable parental consent under Section 9 of the DPDP Act.

9. US Consumer Privacy & Enterprise Security (CCPA/CPRA)

Kiicare is a direct-to-consumer family adherence application. While Kiicare is a consumer application and not a US HIPAA Covered Entity, we protect all family health data using enterprise-grade technical safeguards (TLS 1.3 in transit, AES-256 at rest). We strictly adhere to US state consumer privacy standards (including California CCPA/CPRA), ensuring your data is never sold, shared, or monetized. US residents hold full rights to request data access or account deletion at any time by contacting support@kiicare.in.

10. Cybersecurity & Log Retention (CERT-In Directives)

In compliance with Section 70B of the Information Technology Act 2000 and CERT-In cyber security directives in India, we maintain encrypted access logs for a minimum of 180 days within Indian cloud servers and follow a 6-hour incident escalation protocol for security events.