Privacy Policy — Aayi.ai

Last updated: 2 July 2026

This Privacy Policy describes how Aayi.ai ("we", "us", or "our") collects, uses, and shares information about you when you use our platform, mobile applications, and services (collectively, the "Services"). We are committed to protecting your privacy and handling your health data with the highest standards of care.

1. Who We Are

Aayi.ai is a Maternal and Child Digital Ecosystem operated by RDN Biofuture. We provide AI-powered healthcare tools for OB-GYN doctors, Pediatricians, hospitals, and their patients worldwide. Our registered address and data controller contact: hello@aayi.ai.

2. Information We Collect

Information you provide

Account registration details (name, email, mobile number, specialisation)
Health and clinical data entered by patients (symptoms, vitals, compliance logs, mood)
Prescription and clinical notes entered by doctors
Communications with aayi Companion
Demo and contact form submissions

Information collected automatically

Usage data and analytics (pages visited, features used, session duration)
Device information (browser type, operating system, device identifiers)
IP address and approximate location (country level)
Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information

To provide and improve the Aayi.ai platform and AI features
To connect patients with their treating doctors via the compliance dashboard
To send health reminders, compliance alerts, and vaccine notifications
To respond to demo requests and support queries
To analyse usage and improve platform performance
To comply with legal and regulatory obligations

We do not sell your personal data or use it for advertising targeting.

4. Health Data — Special Category Protection

Health and medical data is classified as sensitive personal data under applicable laws including India's Digital Personal Data Protection (DPDP) Act 2023 and the UAE Personal Data Protection Law (PDPL). We apply additional protections:

Explicit consent is obtained before any health data is collected
Health data is encrypted at rest (AES-256) and in transit (TLS 1.3)
Patients control what data is shared with their doctor and for how long
Health data is never shared with third parties without explicit consent
Data is retained only for the duration of the patient-doctor relationship plus a legally required period

5. Legal Basis for Processing

We process personal data on the following legal bases:

Consent — for health data and marketing communications
Contract — to deliver the Services you have subscribed to
Legitimate Interests — for platform analytics and security
Legal Obligation — to comply with healthcare and data protection laws

6. Data Sharing

We share data only with:

Your treating doctor — compliance data and health logs, with your consent
Cloud infrastructure providers — for hosting and storage (data processing agreements in place)
Analytics providers — anonymised, aggregated usage data only
Legal authorities — when required by law

7. Your Rights

Depending on your country, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data ("right to be forgotten")
Withdraw consent at any time
Object to or restrict certain processing
Data portability (receive your data in a machine-readable format)
Lodge a complaint with your local data protection authority

To exercise any right, email: privacy@aayi.ai. We respond within 30 days.

8. Cookies

We use essential cookies for platform functionality, analytics cookies (Google Analytics 4) to understand usage, and preference cookies to remember your settings. Non-essential cookies are only placed with your consent. You can manage cookies through your browser settings.

9. Data Retention

We retain personal data for as long as your account is active plus any legally required retention period. Health data is retained for a minimum of 7 years in compliance with medical records regulations, or until you request deletion (subject to legal obligations).

10. Security

We implement industry-standard security measures including end-to-end encryption, role-based access controls, regular security audits, and multi-factor authentication for all clinical users. No method of transmission is 100% secure; we will notify you of any breach in accordance with applicable law.

11. International Data Transfers

Data may be processed in India, UAE, and other countries where our infrastructure providers operate. All transfers are protected by appropriate safeguards including Standard Contractual Clauses or adequacy decisions where applicable.

12. Regulatory Compliance

India: Digital Personal Data Protection (DPDP) Act 2023
UAE: Federal Decree-Law No. 45 of 2021 (PDPL)
UK: UK GDPR and Data Protection Act 2018
EU: GDPR (Regulation 2016/679)
Global: WHO eHealth guidelines

13. Children's Privacy

Our doctor-facing platform is not directed to children. Pediatric patient data is entered by parents or guardians as authorised by the treating doctor. We do not knowingly collect data directly from children.

14. Changes to This Policy

We may update this policy periodically. Material changes will be notified by email and by a notice on our platform. The "Last updated" date at the top indicates when this version was published.

15. Contact Us

For privacy questions, requests, or complaints:
Email: privacy@aayi.ai
CSR | SNR Digital Marketing