DPDP compliance
This notice explains how Klynea — a sole proprietorship registered in India (Udyam Reg. No. UDYAM-UP-50-0279489), proprietor: Asiya Hashmi ("Klynea", "we", "us") — handles your personal data in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). As the data fiduciary, Klynea (proprietor: Asiya Hashmi) is accountable for the lawful, fair, and transparent processing of your data.
Last updated: 15 July 2026
1. Data we collect
We collect two broad categories of personal data:
- Identifiers — name, mobile number, email, date of birth, gender, and, where you link it, your ABHA / Health ID.
- Health records — symptoms, diagnoses, prescriptions, lab reports, vitals, and clinical notes. We treat health data as sensitive and apply heightened safeguards to it.
2. Purpose of processing
We process your data for the specific, lawful purpose of operating the care platform: maintaining your health record, sharing it with the clinicians you authorise, providing AI-assisted decision-support to those clinicians, securing your account, and meeting legal obligations. We do not use your data for any incompatible purpose without fresh consent.
3. Consent & how to withdraw it
We rely on your consent, requested in clear and plain language at the point of collection and itemised by purpose. You can review andwithdraw consent at any time from the privacy controls in the app, or by writing to our grievance officer. Withdrawal is as easy as giving consent, takes effect going forward, and does not affect processing already carried out lawfully. Some features that genuinely depend on a given data category may stop working once consent for it is withdrawn.
4. Retention
We keep your personal data only for as long as it is needed for the purposes above, or for as long as the law requires (for example, medical-record retention obligations that apply to clinicians). When the purpose is met and no legal hold applies, we delete the data or irreversibly anonymise it.
5. Security & encryption
Your data is hosted in India (asia-south1, Mumbai) onencrypted infrastructure and is protected in transit with TLS. Selected sensitive identifiers and clinical artifacts receive an additional application-level encryption layer. Access is role-based and security-relevant activity is logged. We maintain reasonable technical and organisational safeguards and a process to make legally required personal-data breach notifications.
6. Your rights as a data principal
The DPDP Act gives you the following rights, which you can exercise from within the app or by contacting our grievance officer:
Right to access
Obtain a summary of the personal data we process about you and the processing activities we carry out.
Right to correction
Have inaccurate or incomplete data corrected, completed, or updated.
Right to erasure
Have your data erased where it is no longer needed for the purpose it was collected and no legal retention duty applies.
Right to nominate
Nominate another individual to exercise your rights on your behalf in the event of death or incapacity.
Right to grievance redressal
Raise a complaint with our grievance officer and have it addressed within the timelines set by the DPDP Act and Rules.
7. Grievance officer
To exercise any right above, or to raise a concern, contact our Grievance Officer:
The Grievance Officer
Klynea — a sole proprietorship registered in India (Udyam Reg. No. UDYAM-UP-50-0279489), proprietor: Asiya Hashmi
474/9 Bari House, Kadam Rasool, Sitapur Road, Lucknow, Uttar Pradesh 226020, India
Email: grievance@klynea.in
We will acknowledge your request and respond within the timelines required by law. If you are not satisfied with our response, you may escalate your grievance to theData Protection Board of India.
8. Children & persons with disabilities
For children and persons with disabilities, we obtain verifiable consent from a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, in line with the DPDP Act.
9. Related notices
This notice should be read alongside ourPrivacy Policy andTerms of Service.