Privacy Notice

This notice explains, in plain language, what personal data NephroLife collects, why, who it is shared with, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025. It is available in English and Tamil.

1. Who we are

NephroLife — the mobile app, the doctor portal (doctor.nephrolife.in) and nephrolife.in — is operated by Ringmann Global Private Limited, S.F 192, Airy Garden, Kannampalayam Road, Ravuthur Pirivu, Coimbatore – 641 402, Tamil Nadu, India. Under the DPDP Act we are the “Data Fiduciary” for your personal data.

2. Your consent

We use your personal data on the basis of the consent you give when you create your account, and only for the purposes listed below. Optional features — scanning a lab report, AI explanations, linking a doctor and notifications — work only when you choose to use them. You can withdraw consent at any time in Profile → “Manage consent” (see section 7); we then stop using your data and delete it, except what the law requires us to keep. Withdrawing does not affect what was lawfully done before.

3. What we collect and why

• Account — your email address and password (kept by our sign-in provider in protected form — we never see your password). Why: to sign you in and protect your account.
• Profile — name, age, dialysis start date, days, time and frequency, dry weight, urine output, dialysis centre, diabetes status, serology (HBsAg, anti-HCV, HIV, anti-HBs, Hepatitis B vaccination), primary kidney diagnosis (entered by your doctor), blood group, allergies, dialysis access (fistula, graft or catheter — where, and since when), emergency contact and your nominee. Why: to tailor the app and time your reminders, to build your emergency card and health report, and — if you link a doctor — to show them your history.
• Health records you log — dialysis sessions (weights, blood pressure, duration, energy, low-blood-pressure episodes, blood sugar, Kt/V and URR, notes), injections, symptoms, medicines and the doses you tick off, fluid and diet logs, lab results, daily fistula or catheter checks, and hospital events. Why: to show trends and flags, work out weight gain and diet allowances, send reminders and prepare your PDF report.
• Lab report photos — only if you use “Scan lab report”: the pages are sent to Google Gemini to read the values, which you check before saving. We do not keep the photos.
• AI features — only if you use them, sent to Google Gemini: for an AI lab explanation, that report's values; for Diet Advice, your question with your lab results, today's food and your daily limits; to translate a doctor's note, the note. If you choose the AI meal plan, the app makes one each day you open the plan, using your lab results, daily limits, food preferences and the food you logged that day, until you switch back to the app's plan. Why: to give you these explanations, answers and plans.
• Doctor link — the doctor you choose to link, the notes they send you, whether you have acknowledged them, and the lab targets and daily diet limits (fluid, potassium, phosphorus, protein) your doctor sets for you. Why: so your doctor can follow your care.
• Sessions recorded by your centre — dialysis sessions (weights, blood pressure, start and end times, machine readings, injections and remarks) entered in the doctor portal by nurses or technicians whom your linked doctor has added as centre staff, with who entered each one and when. Why: so you don't have to type what your centre already writes in your dialysis book. To add past sessions, staff may photograph pages of your dialysis book: the photo is sent to Google Gemini to read the entries, staff check them against the book before saving, and we do not keep the photo. You can see all of it in the app, tell us if something looks wrong, and switch this off in Profile at any time.
• Lab results recorded by your centre — results from the lab flow sheet your centre keeps, entered in the doctor portal by the same staff, with who entered each one and when. Why: so your results reach your records without you typing them. Staff photograph the sheet: the photo is sent to Google Gemini to read the values, staff check them against the sheet before saving, and we do not keep the photo. Staff cannot open the results once saved. They appear in your Labs tab marked as recorded by your centre, you can correct them there, and your linked doctor sees them. Switching off centre entry in Profile stops this too.
• Notification code — a code that lets us deliver your doctor's messages to your phone.
• Payments — your plan, its status and transaction references from Google Play, RevenueCat or Razorpay. We don't store your card, UPI or bank details: Google Play and Razorpay handle those. Razorpay's payment messages to us can include some of them, such as a card's last four digits or a UPI ID, and we don't keep them.
• Doctors using the portal — name, email, clinic details and subscription status.
• Centre staff using the portal — name and email of the nurses and technicians a doctor adds, and which doctors they work for. Why: so they can sign in and record sessions and lab results only for that doctor's linked patients.
• Technical logs — IP address, device and time of requests, kept by our providers to run the service securely.

We do not sell your data, use it for advertising, or profile you for marketing.

4. Who we share it with

• Your linked doctor — only after you link them, and only while the link lasts. They see what you log — including fistula checks, symptoms, medicine adherence and hospital events — and can send you notes and set your lab targets and daily diet limits. You can unlink at any time in Profile.
• Centre staff added by your doctor — nurses and technicians of your dialysis centre, only if your linked doctor adds them and you have not switched this off. They see your name, dialysis days and time, dry weight and your recent dialysis sessions (weights, blood pressure, times and machine readings, and the remarks and injections your centre recorded), and the name and dose of each injection you logged for those sessions, so they can record the next one without entering the same injection twice. They can add lab results from your centre's flow sheet but cannot open your lab reports: all they can learn is whether a report already exists for a date on the sheet in front of them. They cannot see your own notes, your medicines or anything else, and they can record only while your doctor's NephroLife plan is active. Everything they enter is logged with who made it.
• Service providers (Data Processors) — who process data only on our instructions, to run NephroLife: Supabase (database and sign-in; data stored in Singapore); Google — Gemini (lab scans and the AI features you choose to use, and photos of your dialysis book and lab flow sheet taken by your centre's staff) and Firebase Cloud Messaging (notification delivery); Expo (notification delivery, USA); Vercel (hosting nephrolife.in and the doctor portal; server code runs in the USA); RevenueCat and Google Play Billing (patient Pro purchases); Razorpay (Doctor plan payments); Resend (account emails such as sign-in codes and password resets); Cloudflare (bot protection on doctor sign-up); Zoho Mail (our support mailbox, support@nephrolife.in — anything you email us; stored in India).
• Authorities — only when Indian law requires it.

Some providers process data outside India (for example in Singapore and the USA). The DPDP Act allows this unless the Government of India restricts transfers to a country; we will follow any such restriction.

5. Doctor messages on your phone

When your doctor sends you a note, its text passes through Expo and Google's notification service to reach your phone. On a locked phone the content stays hidden until you unlock it. You can turn these notifications off in your phone's settings; the notes still appear in the app.

6. How long we keep it

We keep your data while your account is open. When you delete your account, your data is erased from our live systems at once, and from encrypted backups when those expire (within 30 days). That covers our providers' backups and any encrypted copies of the database we keep ourselves for recovery. We keep only what the law requires — for example payment records for tax purposes — and only for as long as it requires. We also keep a short security record that an account was deleted — its internal ID, whether it was a patient or doctor account, and how and when it was deleted, but not your name, email or health data — for one year, as the DPDP Rules require for security logs, and then erase it.

7. Your rights

Under the DPDP Act you can:

• Access — Profile → “Download my data” gives you a copy of everything we hold about you, with the list of those it is shared with. Your PDF health report is also available.
• Correction — edit or complete any record in the app.
• Erasure — delete individual records, or use Profile → “Delete account” to erase everything.
• Withdraw consent — Profile → “Manage consent” puts every choice in one place: unlink your doctor, stop your centre recording for you, stop the AI meal plan (the other AI features run only when you tap them), turn off notifications, or withdraw all consent by deleting your account — as easily as you gave consent.
• Nominate — Profile → “Nominee”: name a person who can exercise these rights for you if you die or become unable to act.
• Grievance — contact our Grievance Officer (section 11); we will respond within 30 days.
• Complaint — if you are not satisfied with our response, you may complain to the Data Protection Board of India.

The Act also gives you duties: give accurate information, and do not make false or frivolous complaints.

8. Security

Your data is encrypted in transit and at rest. Each account can reach only its own records, and a doctor only those of patients who linked them, with the minimum access each needs. If a personal-data breach occurs, we will inform you and the Data Protection Board of India as the DPDP Act requires. Please keep your password and phone secure.

9. Children

NephroLife is for people aged 18 and over. We do not knowingly collect data of anyone under 18. If you believe a child has an account, contact us and we will delete it.

10. Changes to this notice

When we change this notice we update the date at the top. For changes that matter, we will also tell you by email or in the app before they apply.

11. Contact and Grievance Officer

Grievance Officer, NephroLife (Ringmann Global Private Limited)

Email: support@nephrolife.in (subject: “Privacy”)

Post: S.F 192, Airy Garden, Kannampalayam Road, Ravuthur Pirivu, Coimbatore – 641 402, Tamil Nadu, India