Privacy Policy

This Privacy Policy explains how Swasthya Saathi Healthcare LLP ("we", "us", "our"), operating as the AIIMS Alumni Initiative and delivering services through the Kidvanta platform, collects, uses, stores, and protects personal data when you use the Kidvanta mobile application (com.aiims.swasthyasaathi), the administrative dashboard, or participate in a Swasthya Saathi school health camp.

This policy is fully compliant with the Digital Personal Data Protection (DPDP) Act, 2023 (India) and meets the requirements of the Google Play Store and Apple App Store for apps handling health and children's data.

Swasthya Saathi Healthcare LLP is India's first preventive healthcare programme for schools, delivering comprehensive, painless health screenings directly to school campuses — conducted by AIIMS Alumni-trained doctors following WHO, AAP, and IAP guidelines. The Kidvanta app is our digital platform serving doctors, parents, and school administrators.

Parent / Guardian

• Full name and mobile phone number (used for OTP login and WhatsApp notifications)
• Relationship to child (mother, father, guardian)
• Pre-screening health questionnaire responses about the child
• Digital or physical consent declaration
• Photography consent choice (separate, optional)

Child / Student — collected at health camp

• Child's full name, date of birth, gender, class, school name
• QR code identifier used for camp check-in and barcode scanning
• Triage flag status: Green / Yellow / Red

Doctors & Healthcare Staff

• Full name, medical registration number, specialisation, designation
• Mobile number (OTP login) and camp assignments
• All screening records submitted during camps

School & Camp Administrators

• Name, role, school/institution affiliation, mobile number
• Administrative actions and access audit logs

Automatically Collected

• App version, device OS, platform type (for crash debugging)
• Anonymous error and crash reports
• Request timestamps and IP addresses (access logs, 30-day retention)

The Kidvanta app requests the following device permissions. We only request permissions that are essential for the app's core functionality:

We share data only in the following strictly limited circumstances:

Each school appoints a Designated Authorised Person (DAP) — the Principal, School Owner, or Health Coordinator — as the institutional contact for student health matters. The following strict data boundaries apply:

The Kidvanta app is purpose-built to screen school-going children. All child health data is classified as sensitive personal data under the DPDP Act, 2023 and receives the highest level of protection on our platform.

• Health data is collected only with explicit written or digital consent from a parent or legal guardian before the camp.
• Children do not directly interact with the app — parents and healthcare professionals are the only user-facing roles.
• Child health records are encrypted at rest using AES-256-GCM with per-field keys managed by AWS KMS.
• Role-based access control (RBAC) ensures a doctor can only view records for their assigned camp session.
• Mental health (SDQ) data has a separate, stricter consent form and is never shared with the school's DAP.
• This consent is valid for one camp session only. A fresh consent is required for each subsequent camp — including repeat camps at the same school.
• We never sell, commercially profile, or use children's data for advertising purposes.

If you suspect unauthorised access to your account, contact us immediately: app.swasthyasaathi@gmail.com or +91 9905012304.

On receipt of a verified deletion request, personal data is permanently removed from primary databases and all backup copies within 30 days.

To exercise any right, email app.swasthyasaathi@gmail.com with subject line "Data Rights Request — [your name]". We respond within 30 days as required by the DPDP Act, 2023.

If unsatisfied with our response, you may escalate to the Data Protection Board of India once established under the DPDP Act, 2023.

• No liability for further costs. Swasthya Saathi is not liable for costs of further diagnostic tests, specialist consultations, treatments, or hospitalisation following a screening report. All such costs are the parent/guardian's sole responsibility.
• OPD voucher — select packages only. A free OPD consultation voucher is included only in Swasthya Plus / Swasthya Elite packages. It is valid only at empanelled partner hospitals, subject to availability, and may carry specific validity periods.
• No hospital endorsement. Swasthya Saathi does not endorse, guarantee, or recommend any empanelled hospital or doctor. The empanelment list is informational only. Parents should conduct independent due diligence before visiting any facility.
• Commercial arrangement disclosure. Swasthya Saathi may receive a facilitation fee from empanelled hospitals for referral coordination. This does not influence clinical findings or referral decisions — all referrals are made solely on clinical merit.

Photographs or video clips may be taken during health camps for use in Swasthya Saathi's promotional materials and public health awareness campaigns.

• Mobile app: Authentication tokens are stored in the device's encrypted SecureStore — not browser cookies. No third-party analytics SDKs (Firebase Analytics, Meta SDK, AppsFlyer, etc.) are embedded in the app.
• Admin dashboard (web): A single HttpOnly, Secure, SameSite=Strict session cookie maintains your login. No tracking or advertising cookies are used.
• WhatsApp notifications: Sent via an authorised messaging gateway using your registered mobile number only, strictly for health report delivery and follow-up reminders.
• No cross-app tracking: We do not share your device identifiers (IDFA, GAID, or fingerprinting) with any advertising network.

When we update this Privacy Policy, we will:

• Update the version number and "Last updated" date at the top of this page.
• Send an in-app notification for any material changes affecting your rights or our data practices.
• Issue an updated consent form at each new camp session, regardless of whether the policy has changed.

Continued use of the Kidvanta app after notification of changes constitutes acceptance of the updated policy. If you disagree with any changes, you may contact us to withdraw consent and request data deletion.

For privacy queries, data rights requests, consent withdrawal, or any concern about your data: