AYKA Care
Legal & Privacy Information

AYKA Privacy Policy

Effective Date: 8 May 2026
Last Updated: 8 May 2026
Version: 1.0
Platform: www.aykacare.in

This Policy constitutes a legally binding agreement governing the collection, storage, use, processing, disclosure, and protection of your Personal Data in connection with your use of digital platforms operated by AYKA Clyvora Private Limited.

1. Introduction & Identity of the Data Fiduciary

AYKA Clyvora Private Limited, a company incorporated under the Companies Act, 2013, bearing Corporate Identification Number U62099UP2025PTC223390 and registered under the Startup India initiative vide certificate DIPP206218, having its registered office at 5/1115, Khalapar Mohalla, Memaran, Saharanpur, Uttar Pradesh — 247001, India (hereinafter referred to as "AYKA", "the Company", "we", "our", or "us") is committed to protecting the privacy and personal data of all persons who access or use its digital platforms and services.

This Privacy Policy ("Policy") constitutes a legally binding document between the Company, acting as the Data Fiduciary, and you, the Data Principal, governing the collection, storage, use, processing, disclosure, and protection of your Personal Data in connection with your use of the following platforms operated by AYKA Clyvora Private Limited:

AYKA Life

A cloud-based clinic management Software-as-a-Service platform designed for clinics, hospitals, and healthcare institutions, offering appointment scheduling, electronic medical records (EMR), billing, patient communication, and franchise operations management.

AYKA Expert

A telemedicine Software-as-a-Service subscription platform for registered medical practitioners to conduct online consultations, manage patient records, and issue digital prescriptions.

AYKA Care

A patient-facing teleconsultation platform enabling individuals to book medical appointments, consult registered doctors through digital channels, access personal health records, and manage their healthcare journey.

AYKA Alliance

A three-tier franchise network (City, District, and State levels) enabling business partners to distribute, market, and support AYKA products within their respective geographies.

(Each of the above, individually and collectively, referred to as the "Platform(s)" or "Services".)

This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), the Information Technology Act, 2000 ("IT Act"), and all other applicable laws and regulations of India.

BY ACCESSING OR USING ANY OF OUR PLATFORMS, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND CONSENT TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DISCONTINUE USE OF OUR PLATFORMS IMMEDIATELY.

2. Scope & Application

This Policy applies to:

  • all users of the AYKA Life, AYKA Expert, AYKA Care, and AYKA Alliance platforms, including but not limited to registered medical practitioners, clinics, hospitals, patients, franchise partners, and visitors to our websites;
  • all Personal Data and Sensitive Personal Data collected through our websites, mobile applications, application programming interfaces (APIs), and any other digital touchpoints operated by the Company;
  • all processing activities carried out by AYKA Clyvora Private Limited whether as a Data Fiduciary (when processing data for its own purposes) or as a Data Processor (when processing data on behalf of its business clients such as clinics and hospitals); and
  • data collected from third-party integrations including payment gateways, the Ayushman Bharat Digital Mission (ABDM) ecosystem, DigiLocker, MeriPehchaan, and third-party analytics and communication service providers.

This Policy does not apply to the practices of third-party websites, applications, or services that may be linked to or from our Platforms. We encourage you to review the privacy policies of any third-party services you access through our Platforms.

3. Definitions

In this Policy, unless the context otherwise requires, the following terms shall have the meanings ascribed to them below, which are aligned with the definitions provided under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000:

3.1

Personal Data

means any data about an individual who is identifiable by or in relation to such data, including but not limited to name, email address, phone number, date of birth, gender, postal address, financial information, device identifiers, and any other information that directly or indirectly identifies a natural person.

3.2

Sensitive Personal Data or Information (SPDI)

means personal information consisting of passwords; financial information such as bank accounts, credit/debit card details; physical, physiological, and mental health conditions; sexual orientation; medical records and history; biometric information; and any other information received by the Company under lawful contract or otherwise, as specified under Rule 3 of the SPDI Rules, 2011.

3.3

Health Data

means any Sensitive Personal Data or Information relating to an individual's physical or mental health, medical history, diagnosis, prescriptions, treatment records, investigation reports, or other clinical information collected through or stored on the Platforms.

3.4

Data Principal

means the natural person to whom the Personal Data relates. In the context of children, Data Principal includes the parent or lawful guardian of such child.

3.5

Data Fiduciary

means any person who alone or in conjunction with other persons determines the purpose and means of processing Personal Data. AYKA Clyvora Private Limited acts as a Data Fiduciary in relation to the Personal Data it collects and processes for its own purposes.

3.6

Data Processor

means any person who processes Personal Data on behalf of a Data Fiduciary. AYKA Clyvora Private Limited may act as a Data Processor in respect of patient data collected and managed by clinics and hospitals using the AYKA Life platform.

3.7

Consent

means a free, specific, informed, unconditional, and unambiguous indication of the Data Principal's wishes by a clear affirmative action, signifying agreement to the processing of Personal Data for a specified purpose.

3.8

Processing

means a wholly or partly automated operation or set of operations performed on Personal Data or sets of Personal Data, including collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, use, disclosure, restriction, erasure, or destruction.

3.9

Purpose

means the specific, clear, and lawful reason for which Personal Data is collected and processed, as communicated to the Data Principal at the time of or prior to collection.

3.10

Personal Data Breach

means any unauthorised processing of Personal Data or accidental disclosure, acquisition, sharing, use, alteration, destruction, or loss of access to Personal Data that compromises the confidentiality, integrity, or availability of Personal Data.

3.11

Child

means a person who has not completed eighteen years of age.

3.12

Grievance Officer / Data Protection Officer

means the individual designated by the Company to receive, acknowledge, and resolve grievances related to the processing of Personal Data, as required under the DPDP Act, 2023 and the SPDI Rules, 2011.

4. Personal Data We Collect

We collect the following categories of Personal Data, depending on the Platform you access and your role as a user:

4.1 Information You Provide Directly

When you register for or use our Platforms, you may provide us with:

  • Identity Information: full name, date of birth, gender, profile photograph;
  • Contact Information: email address, mobile number, postal address, city, state, PIN code;
  • Professional Information: for doctors/administrators: medical registration number, council details, specialisation, experience, clinic name/address, GSTIN;
  • Authentication Credentials: username, password, one-time passwords (OTPs), security questions;
  • Financial Information: bank details, UPI IDs, credit/debit card details (processed through third-party; we do not store full card numbers), billing address;
  • Health Information: for patients: chief complaints, medical history, current medications, allergies, family history, diagnosis, prescriptions;
  • Franchise & Business Information: for AYKA Alliance partners: business entity details, PAN, GSTIN, territory details, bank details for payouts.

4.2 Health Data and Medical Records

In connection with the telemedicine and clinical services facilitated through AYKA Expert and AYKA Care, we collect and store Health Data, which constitutes Sensitive Personal Data or Information under the SPDI Rules, 2011. This includes:

  • consultation notes and summaries generated by consulting doctors;
  • digital prescriptions issued through the Platform;
  • diagnostic and investigation reports uploaded by you or your treating doctor;
  • symptom information and health queries submitted through our platforms or AI-assisted features;
  • ABHA (Ayushman Bharat Health Account) ID and linked health records (ABDM integration); and
  • vitals, measurements, and other physiological data provided during consultations.

Collection and processing of Health Data is undertaken only with your explicit, informed, and written consent. You have the right to withdraw consent at any time, subject to the provisions of applicable law and any overriding legal obligation.

4.3 Automatically Collected Information

When you access our Platforms, our systems automatically collect certain technical and usage data, including:

  • Device Information: device type, model, operating system, unique device identifier (UDID), mobile network information;
  • Log Data: IP address, browser type/version, pages accessed, referring URL, date/time of access, time spent;
  • Location Data: general location inferred from IP; precise location only if permitted by user via device settings;
  • Cookies & Tracking: session identifiers, preference cookies, analytics cookies (see Section 14 for details); and
  • Usage Patterns: features accessed, frequency of use, search queries within the Platform, interaction data.

4.4 Information from Third Parties

We may receive Personal Data about you from the following third-party sources:

  • Payment Gateways: transaction confirmation, payment status, and fraud prevention signals from authorised gateway partners;
  • ABDM Ecosystem: health records linked to your ABHA ID, shared with explicit consent via consent manager;
  • DigiLocker / MeriPehchaan: identity verification data used for government-authorised KYC or verification;
  • Referral Partners: basic contact details from authorised AYKA Alliance partners who refer new users; and
  • Social Login Providers: profile information authorised by you if you choose to register or log in using third-party social accounts.

5. Purpose of Processing Personal Data

We collect and process your Personal Data solely for the following specified, clear, and lawful purposes:

13

Account Registration & Authentication

To create, verify, and maintain your user account on the Platform, including identity verification and credential management.

14

Provision of Services

To deliver the healthcare, telemedicine, clinic management, or franchise services you have subscribed to or requested, including online consultations, prescriptions, and managing appointments.

15

Health Record Management

To create, store, retrieve, and share your health records and consultation history in accordance with your instructions and applicable regulations.

16

Payment Processing

To process subscription fees, consultation charges, franchise commissions, payouts, and to generate GST-compliant invoices.

17

Communication & Notifications

To send you appointment reminders, prescription confirmations, service updates, billing notifications, and other transactional communications.

18

Customer Support & Grievance

To respond to your queries, complaints, and grievances in accordance with applicable law.

19

Platform Improvement & Research

To analyse aggregated and anonymised usage data for the purpose of improving our Platforms, features, and user experience.

20

Safety, Security, & Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal or prohibited activities.

21

Legal & Regulatory Compliance

To comply with applicable laws, court orders, regulatory directions, or enforceable governmental requests including under the IT Act, DPDP Act, and healthcare regulations.

22

ABDM Compliance

To enable sharing of health records through the ABDM ecosystem with your explicit consent, in accordance with the Health Data Management Policy of the NHA.

23

Marketing & Promotional

To send you information about new features, products, or offers where you have provided consent. You may opt out at any time.

24

AI & Algorithm Improvement

To use anonymised and pseudonymised data for training, testing, and improving our artificial intelligence features, subject to your consent and AI policy.

6. Legal Basis for Processing

We process your Personal Data on the following legal bases, as provided under the Digital Personal Data Protection Act, 2023:

6.1 Consent (Section 6, DPDP Act)

For the collection and processing of Sensitive Personal Data and Health Data, for marketing communications, and for any purpose not covered by the legitimate uses below, we rely on your free, specific, informed, unconditional, and unambiguous consent, obtained prior to or at the time of collection. You may withdraw consent at any time; however, withdrawal shall not affect the lawfulness of processing carried out before withdrawal, and may limit our ability to provide certain services.

6.2 Legitimate Uses (Section 7, DPDP Act)

We may process certain Personal Data without consent under the following legitimate uses as specified in Section 7 of the DPDP Act:

  • the State or any instrumentality of the State processing data for the performance of any function under law;
  • compliance with a judgment, decree, or order under law;
  • responding to a medical emergency involving a threat to life or immediate threat to health;
  • taking measures to provide medical treatment or health services during an epidemic, outbreak, or other threat to public health; and
  • processing for purposes of employment, including the prevention of corporate espionage, and maintenance of confidentiality of trade secrets, intellectual property, and classified information.

6.3 Legal Obligation

We process Personal Data where necessary to comply with a legal obligation to which we are subject, including obligations under the DPDP Act, IT Act, GST law, income tax law, and healthcare regulations including the Telemedicine Practice Guidelines, 2020.

7. Health Data & Sensitive Personal Information

Health Data and other Sensitive Personal Data or Information collected through our Platforms receive the highest level of protection under this Policy and applicable law. We undertake the following obligations in relation to Health Data:

25

Explicit Consent

We collect Health Data only with your explicit, informed, and written consent, obtained through a clear and specific consent mechanism at the time of or prior to collection. Consent for Health Data is separate from general registration consent.

26

Purpose Limitation

Health Data is used exclusively for the purpose for which consent was obtained — primarily, to facilitate your telemedicine consultation, enable access to your health records, and support the clinical functions of the AYKA Expert and AYKA Care platforms. Health Data will not be used for commercial purposes, advertising, or profiling without your explicit additional consent.

27

Restricted Disclosure

We will not transfer or disclose your Health Data to any third party except: (a) to the consulting doctor with whom you have scheduled a consultation; (b) to our authorised data processors (such as cloud infrastructure providers) who are contractually obligated to maintain equivalent standards of data protection; (c) to government authorities or healthcare regulators where required by law; or (d) in a genuine medical emergency where disclosure is necessary to protect your life or health.

28

ABDM Integration

If you choose to link your ABHA ID and participate in the ABDM health records ecosystem, your health records will be shared only in accordance with your consent artefact issued through the ABDM consent manager. You may modify or revoke such consent through the ABDM consent manager at any time.

29

Security Measures

We implement technical and organisational security measures appropriate to the sensitivity of Health Data, including encryption at rest and in transit, role-based access controls, and audit logging. See Section 15 for details.

30

Retention

Health Data is retained for the period specified in Section 10 of this Policy, consistent with the record-keeping requirements of the Telemedicine Practice Guidelines, 2020.

8. How We Share Your Personal Data

We do not sell, rent, or trade your Personal Data to any third party. We share Personal Data only in the following circumstances and with the following categories of recipients:

8.1 Healthcare Professionals

Where you have scheduled a consultation through AYKA Care or AYKA Expert, we share your relevant health information, consultation history, and contact details with the consulting registered medical practitioner, to the extent necessary to enable the provision of medical services.

8.2 Authorised Service Providers and Data Processors

We engage third-party service providers who process Personal Data on our behalf under contractual obligations that require them to maintain standards of data protection equivalent to those set out in this Policy. These include:

  • cloud infrastructure and hosting providers (data centres located within India);
  • payment gateway operators for processing financial transactions;
  • SMS, email, and push notification service providers for transactional communications;
  • customer relationship management (CRM) and helpdesk software providers; and
  • analytics and performance monitoring tools operating on anonymised or pseudonymised data.

8.3 ABDM and Government Health Ecosystem

With your explicit consent, we share relevant health data with the Ayushman Bharat Digital Mission (ABDM) ecosystem operated by the National Health Authority, enabling interoperability with other ABDM-registered health entities. Such sharing is governed by the ABDM Health Data Management Policy and subject to your ABDM consent artefact.

8.4 Legal and Regulatory Authorities

We may disclose Personal Data to courts, law enforcement agencies, regulatory bodies, or government authorities where required by law, by court order, or where we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of the Company, our users, or the public; or (c) detect, prevent, or address fraud, security, or technical issues.

8.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your Personal Data may be transferred to the acquiring entity, subject to the acquirer being bound by equivalent data protection obligations. We will provide notice of any such transfer through our Platforms.

8.6 Aggregate and Anonymised Data

We may share aggregated, anonymised, or pseudonymised data that does not identify any individual for purposes of research, analytics, industry benchmarking, or public health reporting. Such data is not Personal Data and is not subject to the restrictions of this Policy.

9. International Transfers of Personal Data

AYKA Clyvora Private Limited stores and processes all Personal Data, and in particular all Health Data and Sensitive Personal Data, on servers and infrastructure located within the territory of India, in compliance with applicable data localisation requirements.

To the extent that any cross-border transfer of Personal Data becomes necessary for operational reasons (such as the use of a foreign-headquartered cloud service provider or analytics tool), such transfer shall be undertaken only to countries notified by the Central Government of India as permissible destinations for the transfer of Personal Data under the DPDP Act, 2023, and subject to appropriate contractual safeguards including standard contractual clauses or equivalent data protection agreements.

10. Data Retention

We retain Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable law, whichever is longer. The following retention periods apply:

Account & Registration Data

Active + 3 Years

Retained for the duration of your active account and for a period of three (3) years following account deletion or deactivation, to address post-termination queries or disputes.

Health Data & Consultations

7 Years Minimum

Retained for a minimum period of seven (7) years from the date of the consultation, consistent with Telemedicine Guidelines and applicable medical records law.

Financial Transaction Data

8 Years

Retained for a period of eight (8) years from the date of transaction, in compliance with the requirements of the Income Tax Act, 1961 and GST law.

Communication & Support Logs

2 Years

Retained for a period of two (2) years from the date of the communication or resolution of the support ticket.

Usage & Analytics Data

Up to 5 Years

Retained in anonymised form for a period of up to five (5) years for platform improvement and statistical purposes.

Legal Hold Data

Until Resolved

Where Personal Data is subject to ongoing legal proceedings, investigation, or disputes, it is retained beyond standard periods until resolved.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction. You may request deletion of your Personal Data at any time in accordance with Section 12.3 (Right to Erasure), subject to any overriding legal retention obligations.

11. Children's Privacy

Our Platforms are designed for use by adults. We do not knowingly collect Personal Data from children (individuals below the age of eighteen (18) years) without verifiable parental or guardian consent.

Where a parent or legal guardian seeks to register a child as a patient on AYKA Care or to obtain teleconsultation services on behalf of a child, the following requirements apply:

31

Parent/Guardian Maintenance

The parent or guardian must create and maintain the account; the child may not independently create or hold an account;

32

Verifiable Consent

The parent or guardian must provide verifiable consent for the collection and processing of the child's Personal Data and Health Data at the time of registration;

33

Associated Records

Health Data relating to the child will be associated with the parent or guardian's account and will not be processed for any purpose beyond provision of the requested healthcare services; and

34

Consent Withdrawal

The parent or guardian may, at any time, withdraw consent for the processing of the child's data, access the child's records, or request deletion of the child's data, by contacting our Grievance Officer.

We have implemented age verification measures at the time of registration. If we discover that we have inadvertently collected Personal Data from a child without verifiable parental consent, we will take immediate steps to delete such data. If you believe we may have collected data from a child without appropriate consent, please contact us immediately at the details provided in Section 19.

12. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you, as a Data Principal, have the following rights in relation to your Personal Data processed by us:

12.1

Right to Access Information About Processing (Section 11, DPDP Act)

You have the right to obtain confirmation as to whether we are processing your Personal Data, and to access a summary of the Personal Data being processed, the processing activities undertaken with respect to your data, and the identities of other Data Fiduciaries and Data Processors with whom your data has been shared.

12.2

Right to Correction and Updation (Section 12, DPDP Act)

You have the right to request correction of inaccurate or misleading Personal Data, completion of incomplete Personal Data, and updation of Personal Data that is no longer current. We will process such requests within a reasonable time and will notify any Data Processor or recipient with whom the corrected data must be updated.

12.3

Right to Erasure (Section 12, DPDP Act)

You have the right to request the erasure of your Personal Data where the purpose for which it was collected is no longer being served, or where you withdraw consent and no other legal basis for processing exists. Please note that we may be required to retain certain data beyond your erasure request to comply with legal obligations, including the Health Data retention requirements specified in Section 10.

12.4

Right to Nominate (Section 14, DPDP Act)

You have the right to nominate any other individual to exercise your rights under the DPDP Act in the event of your death or incapacity. You may register or update your nominee through your account settings or by contacting our Grievance Officer.

12.5

Right to Grieve (Section 13, DPDP Act)

You have the right to have your grievances regarding the processing of your Personal Data addressed by our Grievance Officer within the timelines specified in Section 17 of this Policy. If you are dissatisfied with our response, you have the right to escalate your complaint to the Data Protection Board of India.

13. How to Exercise Your Rights

To exercise any of the rights set out in Section 12, or to ask questions or raise concerns about our data processing practices, you may contact our Grievance Officer using the details provided in Section 17. Your request should include:

  • your full name and registered email address or mobile number;
  • the specific right you wish to exercise and the Personal Data to which your request relates; and
  • any supporting information or documentation relevant to your request.

We will acknowledge your request within forty-eight (48) hours and will endeavour to respond substantively within thirty (30) days of receipt. Where additional time is required due to the complexity of the request, we will notify you of the reason for delay and the expected resolution timeline.

We may request additional information to verify your identity before processing requests relating to Personal Data, to ensure the security and privacy of our users.

14. Cookies & Tracking Technologies

Our websites and Platforms use cookies, web beacons, pixel tags, and similar tracking technologies to enhance user experience, analyse platform usage, and deliver relevant communications. We use the following categories of cookies:

Strictly Necessary Cookies

Essential for the basic functioning of our Platforms, including authentication, session management, and security. These cannot be disabled without affecting core features.

Functional / Preference Cookies

Used to remember your preferences, language settings, and personalisation choices to improve your browsing experience.

Analytics & Performance Cookies

Used to collect anonymised information about how users interact with our Platforms, enabling us to improve performance. Includes tools like Google Analytics.

Marketing & Targeting Cookies

Used only with your explicit consent to deliver targeted communications and measure campaigns. Includes tools like Meta Pixel and Google Ads tags.

You can manage your cookie preferences through your browser settings or through the cookie consent banner displayed on our websites. Please refer to our Cookie Policy for a complete list of cookies used, their duration, and instructions for managing preferences.

15. Security Measures

We implement robust technical and organisational security measures to protect your Personal Data from unauthorised access, accidental loss, alteration, or destruction. Our security framework includes:

15.1 Technical Measures

  • Encryption: All Personal Data (especially Health & Financial Data) is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher.
  • Access Controls: Role-based access control (RBAC) ensures only authorised personnel access Personal Data strictly as needed.
  • Authentication: Multi-factor authentication (MFA) is enforced for all administrative access to systems.
  • Audit Logging: Comprehensive audit logs are maintained for all access and operations, and are reviewed periodically.
  • Vulnerability Management: Regular security assessments, penetration testing, and scans are conducted to resolve security weaknesses.

15.2 Organisational Measures

  • Data Protection Training: All employees and contractors with data access undergo mandatory security and data protection training.
  • Confidentiality Obligations: All personnel processing Personal Data are bound by confidentiality obligations and non-disclosure agreements.
  • Third-Party Assessments: Data processors and service providers must demonstrate equivalent security standards as a condition of engagement.
  • Business Continuity: We maintain business continuity and disaster recovery plans to minimise disruption and data loss in security incidents.
Notwithstanding the foregoing, no method of electronic transmission or storage is one hundred percent secure. We cannot guarantee the absolute security of your Personal Data and encourage you to exercise caution when transmitting sensitive information online. You are responsible for maintaining the confidentiality of your account credentials.

16. Personal Data Breach Response

In the event of a Personal Data Breach, we will follow the procedure set out below in compliance with Section 8(6) of the DPDP Act, 2023 and the directions of the Data Protection Board:

35

Detection & Containment

Upon detection of a breach, our security team will immediately initiate containment measures to limit the scope and impact of the breach.

36

Assessment

We will assess the nature, scope, and likely consequences of the breach, including the categories and approximate number of Data Principals affected.

37

Notification to Data Protection Board

We will notify the Data Protection Board of India of the breach in the form, manner, and within the timeframe prescribed by the Board, providing details of the nature of the breach, the Personal Data affected, and the remedial measures taken or proposed.

38

Notification to Affected Data Principals

We will notify each affected Data Principal of the breach in clear and plain language, including the nature of the data compromised, the likely impact, and the steps we are taking to address the breach and protect affected individuals.

39

Remediation

We will implement remedial measures to address the vulnerabilities that gave rise to the breach and to prevent recurrence.

We maintain an incident response plan and conduct regular breach simulation exercises to ensure preparedness. All breach notifications to Data Principals will be delivered through the contact details registered with the Platform.

17. Grievance Redressal

In accordance with Section 13 of the Digital Personal Data Protection Act, 2023, Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and Rule 5 of the SPDI Rules, 2011, we have designated a Grievance Officer to receive and resolve grievances from Data Principals regarding the processing of their Personal Data.

Designated Officer

Aakash Yadav

Grievance Officer & Data Protection Officer

Company

AYKA Clyvora Private Limited

Email Address

support@aykacare.in

Phone Number

+91 92207 82066

Working Hours

Mon to Sat, 10:00 AM to 6:00 PM IST

Postal Address

AYKA Clyvora Private Limited, 5/1115, Khalapar Mohalla, Memaran, Saharanpur, Uttar Pradesh — 247001

We will acknowledge your grievance within forty-eight (48) hours of receipt and will aim to resolve it within thirty (30) days. If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India at www.dpb.gov.in.

18. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or regulatory developments.

In the event of a material change to this Policy — including any change that affects the purposes for which Personal Data is processed, the categories of data collected, or the rights of Data Principals — we will provide you with at least thirty (30) days' prior notice through one or more of the following channels:

  • a prominent notice on our Platform or website;
  • an email notification to the address registered with your account; or
  • an in-app notification.

Your continued use of our Platforms following the effective date of the revised Policy shall constitute your acceptance of the updated terms. If you do not agree to the revised Policy, you must discontinue use of our Platforms and may request deletion of your account and Personal Data.

We recommend that you review this Policy periodically to stay informed of how we protect your information. The version history and effective date of each version are maintained at the footer of this Policy.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact us at:

AYKA Clyvora Private Limited

CIN: U62099UP2025PTC223390

Registered Office

5/1115, Khalapar Mohalla, Memaran, Saharanpur, Uttar Pradesh — 247001, India

General Inquiries / Phone

+91 92207 82066 | info@aykacare.in

Privacy / Data Inquiries

Email: support@aykacare.in

Grievance Officer

Email: support@aykacare.in | Aakash Yadav

Customer Support

Email: support@aykacare.in

20. Effective Date & Version History

VersionEffective DateNature of Change
1.08 May 2026Initial publication

This Privacy Policy is published by AYKA Clyvora Private Limited in compliance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and all other applicable laws of India.

By continuing to use AYKA platforms and services, you acknowledge that you have read, understood, and agreed to the terms outlined in this Privacy Policy. If you do not agree, please discontinue using our platforms.