Privacy Policy

Welcome to Phyber, a digital healthcare platform operated by Northoak Technologies Private Limited ("Phyber", "Company", "we", "our", or "us").

Phyber is an integrated healthcare and wellness platform that enables individuals, healthcare professionals, employers, educational institutions, and partner organizations to access healthcare services, mental wellness support, assessments, appointments, health records, digital care journeys, and other related services through our websites, mobile applications, APIs and affiliated platforms (collectively, the Services).

This Privacy Policy explains:

• What information we collect
• Why we collect it
• How we use it
• Who we share it with
• How we protect it
• Your privacy rights and choices

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

Northoak Technologies Private Limited

Registered Office:

Flat No. SH-1106, H Block, Purva Seasons
C. V. Raman Nagar
Bengaluru, Karnataka 560093
India

Email: business@phyber.care

Website: https://phyber.care

This Privacy Policy applies to all products and services operated by Northoak Technologies Private Limited, including but not limited to:

• Phyber mobile applications
• Phyber web platform
• Newraun mental wellness platform
• Corporate wellness platform
• University wellness platform
• Healthcare provider portals
• APIs
• Customer support channels
• Future products released under the Phyber ecosystem unless governed by a separate privacy notice

The categories of information we collect depend on the Services you use.

4.1 Identity Information

• Name
• Date of birth
• Gender
• Government-issued identification where legally required
• Profile photograph
• Username
• Account credentials

4.2 Contact Information

• Email address
• Mobile number
• Postal address
• Emergency contact information

4.3 Health Information

Where you choose to use healthcare services, we may collect information including:

• Medical history
• Existing conditions
• Symptoms
• Allergies
• Medications
• Prescriptions
• Diagnostic reports
• Laboratory reports
• Consultation notes
• Vaccination information
• Wellness goals
• Lifestyle information
• Insurance information where required for healthcare services

Health information is processed solely for providing healthcare, wellness and related services requested by you or your organization, except where otherwise required by law.

4.4 Mental Wellness Information

Where you use Newraun or other mental wellness services, we may collect:

• Assessment responses
• Psychometric scores
• Risk classifications
• Mood journals
• Guided journey progress
• Counselling records
• Therapy notes created by healthcare professionals
• Wellness check-ins
• Behavioural indicators
• Clinical observations where applicable

This information is treated as sensitive personal information.

4.5 Appointment Information

• Appointment history
• Healthcare provider selected
• Clinic or hospital selected
• Visit history
• Consultation timings
• Appointment preferences
• Cancellation records

4.6 Location Information

With your explicit permission, Phyber may access your device's approximate or precise location to:

• Display nearby clinics, hospitals, laboratories, pharmacies and healthcare providers
• Recommend healthcare services near you
• Estimate travel distance and travel time
• Improve appointment recommendations
• Enable emergency or urgent care features
• Personalize location-based healthcare experiences
• Support future location-enabled healthcare services

Location access is optional.

You may deny or revoke location permission at any time through your device settings.

If location permission is not granted, location-dependent features may not function as intended.

Phyber does not continuously track your location in the background unless you explicitly enable a feature that requires such access and your device permissions permit it.

4.7 Device Information

We may automatically collect:

• Device model
• Operating system
• Browser
• IP address
• Device identifiers
• App version
• Network information
• Language preferences
• Diagnostic information
• Crash reports

4.8 Usage Information

We may collect information regarding your interaction with the Services, including:

• Pages visited
• Features accessed
• Search activity
• Session duration
• Clickstream information
• Error logs
• Performance metrics

4.9 Communications

We may retain communications including:

• Customer support requests
• Emails
• Chat conversations
• Feedback
• Surveys
• Call recordings where legally permitted and disclosed

Depending on the features you choose to use, Phyber may request access to:

Permissions are requested only when required for a feature you actively use.

You may disable permissions at any time through your device settings.

We use your information to:

• Create and manage your account
• Verify your identity
• Deliver healthcare services
• Facilitate appointments
• Connect you with healthcare providers
• Conduct psychometric assessments
• Deliver counselling services
• Generate assessment reports
• Recommend healthcare providers
• Recommend nearby healthcare facilities
• Personalize your experience
• Improve healthcare outcomes
• Provide customer support
• Send reminders and notifications
• Detect fraud and misuse
• Protect platform security
• Conduct analytics using aggregated or anonymized information
• Comply with applicable laws
• Develop new healthcare products and features

We do not use your personal health information for advertising without your explicit consent.

Certain Services may use artificial intelligence, machine learning or automated processing to:

• Personalize wellness journeys
• Generate wellness insights
• Assist healthcare workflows
• Recommend content
• Improve service quality
• Support healthcare professionals

AI-generated insights are intended solely as decision-support tools.

They do not constitute medical advice and should not replace consultation with qualified healthcare professionals.

Depending on applicable law, we process personal information based on:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests
• Protection of vital interests
• Provision of healthcare services

You may withdraw consent at any time where processing is based solely on consent.

We may share information with:

Healthcare Providers

Doctors, counsellors, psychologists, therapists, clinics, hospitals and healthcare organizations providing services requested by you.

Corporate and Educational Clients

Where your account is sponsored by an employer, university or educational institution, limited information may be shared in accordance with applicable agreements.

Sensitive health information will not be disclosed without appropriate authorization, except where required by law or provided in anonymized or aggregated form.

Service Providers

Cloud hosting providers, communication providers, payment processors, analytics providers, authentication providers, customer support providers and other vendors supporting the Services.

Insurance and Healthcare Partners

Where you request insurance, claims, reimbursement or integrated healthcare services.

Government Authorities

Where disclosure is required by applicable law, regulation or lawful request.

Business Transfers

In connection with mergers, acquisitions, restructuring or sale of assets.

Our Services may integrate with:

• Cloud infrastructure providers
• Mapping services
• Payment gateways
• Authentication providers
• Push notification services
• Analytics providers
• Crash reporting services
• Healthcare information exchanges
• Government digital health systems
• Insurance partners

Each provider processes information according to its own privacy obligations and applicable agreements.

We may use analytics and diagnostics tools to:

• Understand application performance
• Improve usability
• Identify bugs
• Monitor service reliability
• Measure feature adoption

Where possible, analytics are collected using aggregated or pseudonymized information.

We implement administrative, technical and organizational safeguards including:

• Encryption in transit using TLS
• Encryption of sensitive information at rest where appropriate
• Secure authentication
• Role-based access controls
• Multi-factor authentication for administrative access where applicable
• Audit logging
• Security monitoring
• Regular vulnerability assessments
• Secure backup procedures
• Disaster recovery planning

No electronic system can be guaranteed to be completely secure; however, we continually work to protect your information using industry-standard practices.

We retain information only for as long as necessary to:

• Provide the Services
• Maintain healthcare records where applicable
• Fulfil contractual obligations
• Resolve disputes
• Detect fraud
• Comply with legal and regulatory obligations

Retention periods vary depending on the nature of the information and applicable law.

Your information may be processed or stored in jurisdictions outside your state or country.

Where cross-border transfers occur, we implement reasonable safeguards consistent with applicable law.

Subject to applicable law, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Update information
• Request deletion
• Withdraw consent
• Restrict processing
• Object to certain processing
• Receive a copy of your information where legally applicable
• Lodge complaints with applicable regulatory authorities

You may request deletion of your account through:

• In-app account deletion
• Account settings (where available)
• Customer support
• Email to our Privacy Officer

Upon receiving a valid request, we will delete or anonymize your personal information within a reasonable period unless retention is required by law, regulatory obligations, fraud prevention or healthcare record requirements.

Our websites and applications may use cookies, local storage, SDKs and similar technologies to:

• Maintain user sessions
• Remember preferences
• Improve functionality
• Measure performance
• Analyze usage
• Enhance security

You may control cookies through your browser settings where applicable.

Our Services are not directed to children under the age permitted by applicable law without appropriate parental, guardian or institutional authorization.

Where required, parental or guardian consent will be obtained before collecting personal information from minors.

If we become aware of a personal data breach that is likely to result in significant harm, we will take appropriate steps to investigate, mitigate the impact and notify affected individuals and relevant authorities where required by applicable law.

We may update this Privacy Policy periodically to reflect changes in our Services, technology or legal requirements.

Material changes will be communicated through our applications, websites or other appropriate channels before they become effective where required by law.

For questions regarding this Privacy Policy or our privacy practices, please contact:

Privacy Officer

Northoak Technologies Private Limited

Support: support@phyber.care

Website: https://phyber.care

Phyber is committed to protecting personal information in accordance with applicable privacy and data protection laws. We continually review and improve our privacy practices to align with evolving legal, regulatory and industry standards, including the Digital Personal Data Protection Act, 2023 (India), and internationally recognized privacy principles where applicable.

This Privacy Policy should be read together with our Terms of Service, Consent for Health Data Processing, Cookie Policy and any service-specific privacy notices made available within the Phyber ecosystem.