Privacy Policy

We may collect the following categories of information:

• Identity and Contact Information: name, date of birth, class/grade, school name, roll number, parent/guardian name, email address, and phone number.
• Student Health Information: health screening records, vaccination status, allergy and medical-history entries, growth/wellness metrics, disability-related information relevant to statutory reporting, and other health-record fields entered by the School, Administrator, or Parent/Guardian.
• Account and Usage Information: login credentials (stored in encrypted/hashed form), access logs, device/browser information, IP address, and general usage patterns on the Platform.
• Compliance Documentation: records generated or uploaded to support a School's demonstration of compliance with applicable government health, wellness, and disability-related mandates.
• Payment Information: billing details necessary to process subscription payments (processed via secure third-party payment gateways; KidsHealth360 does not store full card/bank credentials on its own servers).

Information collected is used strictly for the following purposes:

• To create and maintain digital student health records on behalf of the School/Parent.
• To generate general wellness suggestions, reminders, and administrative reports for Schools and Parents/Guardians.
• To help School Administrations track and document compliance with applicable government health and wellness requirements.
• To operate, maintain, secure, and improve the Platform, including troubleshooting and customer support.
• To communicate with Users regarding their account, service updates, or policy changes.
• To comply with applicable law, regulatory requests, or lawful government orders.

We do not use Student health information for behavioural advertising, and we do not build advertising profiles of Students.

KidsHealth360 does not sell or rent personal or health data to any third party. We may share information only in the following limited circumstances, and only to the extent necessary:

• With the School and the concerned Parent/Guardian of the relevant Student, who are the primary owners/recipients of the health record.
• With engaged service providers (e.g., cloud hosting, secure data storage, email/SMS delivery, payment processing) strictly as data processors acting on our instructions, under confidentiality and data-protection obligations, and solely to enable delivery of the Services — never for the processor's own independent use.
• With government or statutory authorities, but only where a School/Parent has authorized submission of compliance documentation, or where disclosure is legally mandated (e.g., in response to a valid court order, government directive, or applicable law).
• In connection with a bona fide business transaction (such as a merger or acquisition), subject to the acquiring entity agreeing to honour the commitments of this Privacy Policy.

In every case above, only the minimum necessary information is shared, and recipients are contractually and/or legally bound to protect it and to use it solely for the specified purpose.

Given the nature of the Platform, a significant portion of the information processed relates to minors. Accordingly:

• Student health records may only be created, uploaded, or edited by an authorized School Administrator or a verified Parent/Guardian — not by the Student directly.
• Schools/Administrators are responsible for obtaining appropriate parental/guardian consent, in line with applicable school policy and law, before submitting a Student's health information to the Platform.
• We apply enhanced access controls to restrict visibility of Student health data to authorized personnel only (e.g., the concerned School's designated staff and the Student's own Parent/Guardian).

• Information is stored on secure servers with industry-standard technical and organizational safeguards, including encryption in transit, access controls, and role-based permissions.
• Access to Student health records is restricted on a need-to-know basis to authorized School Administrators, the Student's Parent/Guardian, and limited authorized KidsHealth360 personnel.
• While we implement reasonable and appropriate security measures, no method of electronic storage or transmission is 100% secure; Users are encouraged to safeguard their own login credentials.
• In the unlikely event of a data breach affecting personal information, we will notify affected Users and relevant authorities as required under applicable law.

We retain Member information for as long as the relevant School/User account remains active, and thereafter for such additional period as is necessary to comply with legal, regulatory, tax, or record-keeping obligations, to resolve disputes, and to enforce our agreements. Upon a valid deletion request (see Section 8) and expiry of any mandatory retention period, data will be securely deleted or anonymized.

Subject to applicable law (including the Digital Personal Data Protection Act, 2023 and related rules), Members may exercise the following rights by contacting us at the details in Section 12:

• Right to Access: request a copy of the personal/health information we hold about you or your child.
• Right to Correction: request correction of inaccurate or incomplete information.
• Right to Withdraw Consent: withdraw consent to processing at any time, without affecting the lawfulness of processing carried out before such withdrawal, and understanding that withdrawal may limit or end access to certain Services.
• Right to Erasure: request deletion of personal information, subject to applicable legal retention requirements.
• Right to Grievance Redressal: raise a complaint with our designated Grievance Officer (Section 12) regarding any privacy concern.

The Platform may use cookies and similar technologies to maintain login sessions, remember preferences, and understand general usage patterns for the purpose of improving the Services. These are not used to sell data or to build third-party advertising profiles. Users can control cookie preferences through their browser settings.

The Platform may contain links to third-party websites or services (e.g., government portals, healthcare partners). This Privacy Policy does not apply to such third-party sites, and we encourage Users to review the privacy practices of any third-party site they visit.

Where information is processed or stored using service providers located outside India, we take reasonable steps to ensure such providers maintain a level of data protection consistent with this Policy and applicable Indian law.

For any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal/health information, please contact our Grievance Officer:

Grievance Officer — Acquity Growadvice LLP
A-816 Bestech Business Towers, Sector 66, Mohali, Punjab 160062, India
info@kidshealth360.com · +91 78145 24624

We aim to acknowledge and address grievances within the timelines prescribed under applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated Policy will be posted on this page with a revised “Last Updated” date. Material changes affecting how Student health data is used will be communicated to Schools/Parents through the Platform or registered contact details.