this is the code – Last Updated: 04-09-2026
Introduction
Tulasi Healthcare (“Tulasi Healthcare”, “we”, “our”, or “us”) is committed to protecting the privacy and confidentiality of individuals using the Tulasi Healthcare mobile application (“App”). This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal information when you access or use the App. By using the App, you acknowledge that you have read and understood this Privacy Policy.
Information We Collect
Depending on the services you access through the App, we may collect the following categories of information:
Personal Information: Name, age, gender, emergency contact and other identification details provided by you.
Contact Information: Mobile number, email address, postal address, and other communication details.
Health Information: Information relating to your mental health, medical history, consultations, diagnoses, treatment plans, prescriptions, assessments, and any other health information voluntarily shared by you for receiving healthcare services.
How We Use Your Information
We may use your personal information for purposes including:
Creating and managing your user account.
Providing healthcare, counselling, consultation, and related services.
Scheduling appointments and facilitating communication with healthcare professionals.
Improving the quality, functionality, and security of the App.
Complying with applicable legal, regulatory, and healthcare obligations.
We process your information only where permitted by applicable law or with your consent, where required.
Protection of Your Information
We implement appropriate administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, misuse, or loss. Access to personal information is restricted to authorized personnel and service providers who require such access for legitimate business or healthcare purposes.
Under Section 23 of the Mental Healthcare Act, 2017, all mental health information and medical records are strictly confidential.
The information here includes information which is stored and maintained electronically or digitally. However, we might share such information wherever permitted or required by law, including for the purposes of providing treatment with the members of the treating team or with a duly authorized representative after obtaining proper consent.
The disclosure of information might also be done in cases where it is necessary to prevent harm, violence, or threat to life, or to adhere to any orders passed by the competent court or authority.
Patients can choose to add their care-givers’/NR/any other authorized person’s name while registering on the app with whom the wish to share their information, the onus of such transaction/disclosure remains on the patient himself in such cases.
In all such situations, Tulasi will try to limit the disclosure of information that is reasonable and necessary for the relevant purpose.
All personal and health data is primarily stored and processed on secure servers located within India (AWS India Region). Any cross-border data transfer to third-party SDKs or service providers complies strictly with the DPDP Act 2023, ensuring processing only occurs in jurisdictions or frameworks permitted by Indian regulatory authorities.
The App contains specific caretaker flows for minor patients. In accordance with the DPDP Act 2023:
Processing data of individuals under 18 years of age requires verifiable parental or lawful guardian consent.
We do not track behavior, construct behavioral profiles, or serve targeted advertisements to minors.
Data Retention and Security Standards
Data Retention: We retain medical and health records for a minimum statutory period of 3 years from the date of your last consultation (or up to 20 years for specialized mental health/long-term clinical records) or for as long as necessary to provide our services, comply with legal and regulatory requirements, resolve disputes, and enforce our legal rights, in accordance with Indian medical record regulations. Non-health personal data and the information that is no longer required is securely deleted or anonymized once the purpose for collection ends or upon valid consent withdrawal.
Security Standards: Data is protected using end-to-end encryption (E2EE) and AES-256 encryption at rest, along with TLS 1.3 encryption in transit, adhering to HIPAA-compliant and enterprise-grade technical safeguards.
Your Privacy Rights
Under applicable law (including the DPDP Act 2023), you have the right to:
Access, review, and request copies of your data.
Correct, update, or erase inaccurate or outdated data.
Restrict or object to certain processing activities.
Receive a copy of your personal information, where applicable.
Withdraw consent for optional processing.
Right to Nominate: You have the right to nominate another individual who, in the event of your death or incapacity, can exercise your privacy rights and manage your health records under this Policy.
Also, nothing in these terms takes away or limits any of the rights of the users given to them under the Mental Healthcare Act, 2017 or any other applicable laws.
The app shall not be interpreted in any manner determining the user’s legal or mental capacity merely because a user has or does not have access to a certain feature of the app. Requests may be subject to applicable legal and regulatory requirements.
Data Breach Notification:
In the event of a personal data breach, Tulasi Healthcare will promptly notify the Data Protection Board of India and affected individuals without undue delay, outlining the nature of the breach, potential impact, and remedial steps taken.
Updates to this Privacy Policy
Tulasi Healthcare may revise this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our services. Any updated version will be made available through the App, along with the revised “Last Updated” date. Continued use of the App after such changes constitutes acceptance of the updated Privacy Policy.
Grievance Redressal
If you have complaints, questions, or wish to exercise your rights, you may contact our designated Grievance Officer:
Name: Chandra
Designation: Data Protection & Grievance Officer
Address: Tulasi Healthcare, Sector 64, Gurgaon, Haryana, India
Email: gmoperations@tulasihealthcare.com
Response SLA: We will acknowledge your grievance within 24 hours and resolve your request within 15 business days (not exceeding the 30-day statutory limit).
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact:
Email: info@tulasihealthcare.com
gmoperations@tulasihealthcare.com
We encourage users to review this Privacy Policy periodically to stay informed about how their information is collected, used, and protected.