Privacy Policy

Introduction

This privacy policy (the "Policy") sets out Nikunj Health Technologies Private Limited's approach to data privacy in furtherance of its obligations under the applicable data privacy laws. Reference to "We", "Us", "our", "ours" and "AyushPay" refers to Nikunj Health Technologies Private Ltd (including its affiliates). Further, the terms "You", "Your", "Yours" refer to You as a user of the services as elaborated in the Terms and Conditions available on the Portal ("Services").

This Policy is aimed at providing individuals notice of the basic practices and principles by which We process the personal data of individuals ("Personal Data") who visit, use, interact with and/or transact through the android app ("Portal") including guest users and browser. By visiting/accessing the Portal, and voluntarily providing us with data, both personal and/or sensitive personal, You are consenting to our use of it in accordance with this Policy. Any capitalised term used but not defined in this Policy shall have the meaning assigned to them under our Terms and Conditions.

Types of Data Collected

We may collect the following types of Personal Data:

• Any personal or personally identifiable information that You may submit or may be required to submit for registration and continued use of the services offered by Us including Your name, title, gender, date of birth, email address, telephone number (home/work/mobile), profile/display picture, login name, screen name, nickname, or handle, country/state/postcode or city of residence, postal or other physical address, name(s) of the workplace, job position/designation (including salary), IP addresses and other information collected passively. • Your picture/selfie. • Any other personal information You may choose to further provide us, including any information to update Your Account and profile, to fill out any forms, provide Your feedback to surveys, or to use any features offered by us.

We may collect the following types of Sensitive Personal Data:

• Password, financial information such as bank account or credit card or debit card or other payment instrument details, physical, physiological and mental health condition, sexual orientation, medical records and history, biometric information. • Credit reports and credit data bureau data collected from financial organizations (including TransUnion, CIBIL Limited and other credit bureaus) on Your behalf or on behalf of our Financing Partner. • PAN, Aadhar number and other KYC documents on behalf of the Financing Partners, at Your sole discretion.

The Personal Data and the Sensitive Personal Data shall collectively be referred to as the "Collected Data".

Types of Data Stored

AyushPay stores only Personal Data that may be required to carry out our operations and provide You with our Services and does not store any Sensitive Personal Data.

Express Consent

With regard to the Collected Data, You:

• Explicitly provide us with consent for collecting on a one-time basis Sensitive Personal Data, including but not limited to Your picture/selfie (through camera and microphone permissions) and location (through GPS). • Provide explicit consent for collecting on a periodic basis and at our discretion: Your sensitive personal data and documents including but not limited to your Aadhar, PAN, Bank Details, and Credit Score/Report from credit information companies. • Fully understand that the purpose of collecting the Collected Data is to enable Us to make informed lending decisions effectively and enable faster processing of credit applications to help provide speedier access to credit through our Portal. • Fully authorize Us to share your details with partner tie-ups who are members of credit information companies.

Sources & Purpose of Obtaining Personal Data

The Collected Data that is processed by Us can broadly be categorised as data shared by you and data shared by third parties.

We collect and process Your Collected Data for the following purposes:

• Verify the Collected Data and Your identity. • Monitor, improve and administer our Portal. • Deliver our Services and design customized products and services. • Send communications, notifications, and information regarding products or services requested by You. • Respond to Your inquiries or fulfil Your requests. • Diagnose technical problems and relay announcements and newsletters. • Prevent, detect and mitigate any fraudulent activities. • Contact/reach out to You via email, phone, WhatsApp, SMS or any other similar channels to offer Services. • Comply with our legal obligations and resolving disputes with users.

Legal Basis of Processing Your Collected Data

Our basis for collecting Your Collected Data is based on the fact that You have consented to Us processing Your Collected Data for a specific reason. This includes, without limitation, any information that You have made public through Your social media account, information that the social media service shares with Us, or information that is disclosed during the sign-up and sign-in processes of our Portal.

Further, the processing is necessary for the performance of the contract We have with You or to take steps to enter into a contract with You and is necessary for compliance with a legal obligation We have towards You and under applicable law.

Sharing of Your Collected Data with Third Parties

We reserve the right to share Your Collected Data with third parties, including our regulated Financing Partners for provision of Services on the Portal as permitted under applicable law. We will share Your information with third parties in such manner as described below:

• We may disclose Your Collected Data with regulated entities such as banks or NBFCs and our third-party partners for providing the Services. • We may share Your Collected Data with our third-party partners in order to conduct data analysis to serve You better. • We may disclose Your Collected Data, without prior notice, if obligated to do so by law or an order from the government and/or a statutory authority. • We may share the Collected Data with our technology service providers to perform credit and KYC checks to facilitate a loan for You through a regulated Financing Partner. • We and our affiliates may share Your Collected Data with another business entity should We merge with, or be acquired by that business entity, or in the event of reorganization, amalgamation, or restructuring of business.

Cookies

When You visit our websites, We may collect information from You automatically through cookies or similar technology. Cookies are small text files placed on Your computer by websites that You visit. They are used to make websites work more efficiently and to provide information about Your actions to the owners of the website.

We use cookies to: improve the way our website works; create greater content for You and remember Your preferences; and formulate information relevant to the user's area of interests.

Most browsers allow You to refuse to accept cookies and to delete cookies. Disabling some cookies may result in some features being unavailable. If You want to remove previously stored Cookies, You can manually delete them at any time.

Do Not Track

Some web browsers have a "Do Not Track" feature. This feature lets You tell websites You visit that You do not want to have Your online activity tracked. These features are not yet uniform across browsers. Our sites are not currently set up to respond to those signals.

Retention of Your Personal Data

We keep the Personal Data (and not the Sensitive Personal Data) We collect about You for as long as it is required for the purposes set out in this Policy and for legal or regulatory reasons. We may take reasonable steps to delete or permanently de-identify Your Personal Data that is no longer needed.

Please note that We may, from time to time, engage an overseas recipient to provide services to us, such as cloud-based storage solutions. We will store such information only in servers that are localized in India. Please note that We do not retain Your Sensitive Personal Data at any point of time.

External Links

Our Portal may contain links to websites of other organizations. This Policy does not cover how those organizations process Your Collected Data. We do not endorse and are not responsible for the privacy practices of these third-party sites. Therefore, We encourage You to read the privacy policies available on the other websites You visit.

The information a third-party site or platform collects is subject to the third-party site or platform's privacy practices. Privacy choices You have made on the third-party site or platform will not apply to our use of the information that We have collected directly through our applications.

Safeguarding and Securing the Collected Data

AyushPay uses administrative, technical, and physical safeguards to protect Your Collected Data, taking into account the nature of the Collected Data and the threats posed. AyushPay has implemented a variety of safety and security features to consistently protect Your Collected Data.

AyushPay has done all in its power to prevent data theft, unauthorized access, and disclosure by implementing the latest technologies and software. The Collected Data We collect is securely stored within our databases, and We use standard, industry-wide, commercially reasonable security practices such as encryption, firewalls, and SSL (Secure Socket Layers) for protecting Your information.

No Sale of Your Personal Data

We do not intend to use your personal data in any ways except those specified in this Privacy Agreement, the Terms and Conditions, and the Most Important Terms and Conditions.

Your Rights

Depending on the jurisdiction in which You are resident, You may enjoy certain rights regarding Collected Data that We process about you. Such rights may include:

• Access: You have a right to know what Collected Data We hold about You. • Correction: If You believe that any Collected Data We are holding about You is incorrect or incomplete, You can request that We correct or supplement such Collected Data. • Objection: You can contact Us to let Us know that You object to the collection or use of Your Collected Data for certain purposes. • Restrictions: You can always request Us to deactivate Your Account to restrict further processing of Your Collected Data. • Erasure: You can request that we delete some or all of your Personal Data from our systems. While this will be done immediately, residual data may be saved in certain logs and will be purged within a year after deleting your data. Once your data is deleted, you will no longer have an account with us.

Electronic Communications

You agree that AyushPay (either directly or through its affiliates, subsidiaries or other permitted assigns) may provide You communications about Your Account and the Service electronically or through phone calls, WhatsApp messages, or in writing. Standard mobile, message, or data rates may apply, and You are responsible for any such fees.

Any electronic communications will be considered to be received by You within 24 hours of the time We email it to You or otherwise send it to Your attention. We may assume You have received any communications sent to You by postal mail 3 business days after We send it.

How Do I Withdraw My Consent?

If You change Your mind after opting-in, You may withdraw Your consent to contact You, for the continued collection, use or disclosure of Your information, at any time, or request for deletion of Your Account maintained at AyushPay portal by raising a request through the Portal or by mailing Us at care@ayushpay.com.

However, if You have availed any loan facilities from Our Financing Partner, the Financing Partner shall have the right to continue processing Your information till such credit facility has been repaid in full, along with any interest and dues payable. AyushPay will not retain Your data and information if it is no longer required by Us and there is no legal requirement to retain the same.

Breach Notification

Where a Personal Data breach is likely to result in a risk to the rights and freedoms of individuals, it will be reported to the relevant supervisory authority in a timely manner in compliance with applicable laws. Individuals will be informed directly where required by law.

Phishing

"Phishing" usually occurs when users of a website are induced by an individual/entity into divulging sensitive Personal Data by using fraudulent websites and/or e-mail addresses. In the event You provide information to a website or respond to an e-mail which does not belong to Us or is not connected with Us in any manner, You will be a victim of Phishing.

We do not send e-mails requesting a user for payment information, username or passwords. However, AyushPay may verify the username, password etc. provided by You from time to time.

Severability and Exclusion

We have taken every effort to ensure that this Policy adheres with the applicable laws. The invalidity or unenforceability of any part of this Policy shall not prejudice or affect the validity or enforceability of the remainder of this Policy.

This Policy does not apply to any information other than the information collected by AyushPay through the Portal. This Policy shall be inapplicable to any unsolicited information You provide Us through the Portal or through any other means. All unsolicited information shall be deemed to be non-confidential and AyushPay shall be free to use and/or disclose such unsolicited information without any limitations.

No Waiver

The rights and remedies available under this Policy may be exercised as often as necessary and are cumulative and not exclusive of rights or remedies provided by law. It may be waived only in writing. Delay in exercising or non-exercise of any such right or remedy does not constitute a waiver of that right or remedy, or any other right or remedy.

Notification of Change

We regularly review and update our Policy to ensure it is up-to-date and accurate. Any changes We may make to this Policy will be in effect immediately after being posted on this page. We reserve the right to update or change our Policy at any time and You should check this Policy periodically.

Your continued use of the service after We post any modifications to the Policy on this page will constitute Your acknowledgment of the modifications and Your consent to abide and be bound by the modified Policy.

Contact & Grievance Officer

If You have any questions about our policy or related dealings with Us or would like further information about our services and practices, You can contact Us at care@ayushpay.com.

This Policy must be read in conjunction with the other agreements You may enter into with Us and the terms of services as published by Us on our Portal. Any grievance, with respect to the Collected Data, Your privacy or this Policy shall be addressed to care@ayushpay.com.

Grievance Officer: Name: Veena Karevhan Email: care@ayushpay.com

Copyright, Trademark & Intellectual Property

'AyushPay' is a registered trademark of QB Health Technology Private Limited. All materials on this Portal are protected by copyright, trademark, and other intellectual property rights. Any unauthorized use of any such information or materials may violate copyright laws, trademark laws, intellectual property laws, and other laws and regulations.

Termination

Subject to Our Terms and Conditions, We may suspend or terminate Your Account or Your use of this Portal at any time, for any reason or for no reason, provided that there are no outstanding credit provided by any of Our Financing Partners. You are personally liable for any charges incurred through Your Account prior to termination.

We reserve the right to change, suspend, or discontinue all or any aspects of this Portal at any time without notice. Please note that if You revoke any mandatory permissions or revoke the consent to process and store information needed to facilitate Your access to the loan facilities offered by Our Financing Partners, then We may have to cease the provision of Services to You.

Indemnification

AyushPay shall not be liable in case You breach any terms or conditions provided under this Policy and will not be obligated to indemnify You for any direct or indirect losses accruing to You.

You agree to indemnify, defend and hold harmless AyushPay, its affiliates, group companies and their directors, officers, employees, agents, third party service providers, and any other third party providing any service to AyushPay in relation to the Services, from and against any and all losses, liabilities, claims, damages, costs and expenses asserted against or incurred by AyushPay that arise out of, result from, or may be payable by virtue of, any breach or non-performance of any terms of this Policy by You.

Consent to This Policy

By accessing Our Portal, You agree to this Policy or any updated version of this Policy. This document supersedes any prior communication on this topic and reflects the entire and exclusive Policy for the Portal.

AyushPay is changing the way Indians pay for their healthcare and bridging the gap of their actual healthcare expense and what their insurance pays for. Simplifying Indian Healthcare.