Privacy policy

Effective 1 August 2026 · Draft for legal review before launch

Who we are

Onelo Healthcare Private Limited (incorporation in progress), Mumbai, India (“Onelo”) operates onelo.health, a doctor-led metabolic health programme. This notice is issued under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025.

What we collect and why

Identity and contact data (name, phone, email, city) to create your account and communicate with you. Health data you provide during eligibility checks and consultations (height, weight, conditions, lab results) solely to deliver medical care through registered medical practitioners. Payment data is processed by our payment providers; we do not store card numbers. We collect only what each stated purpose requires.

Consent

We process health data only with your explicit, affirmative consent, taken before collection. You may withdraw consent at any time by writing to privacy@onelo.health or via the app; withdrawal stops future processing and does not affect care already delivered. On request, this notice is available in the languages of the Eighth Schedule to the Constitution.

Sharing

Your data is shared only with: the registered medical practitioner treating you; the diagnostic laboratory performing your tests; the pharmacy dispensing any prescription your doctor issues; and service providers bound by contract to process data solely on our instructions. We never sell personal data and never use health data for advertising.

Security and retention

Data is encrypted in transit and at rest and access is role-restricted. We retain health records for the period required of medical records under applicable law, and delete or anonymise other personal data when its purpose is exhausted or consent is withdrawn.

Your rights

You may access, correct, and request erasure of your personal data, nominate a representative, and lodge a grievance. Write to privacy@onelo.health. If unresolved, you may complain to the Data Protection Board of India.

Contact

Data protection contact: privacy@onelo.health. Grievance Officer: see Grievance redressal page.