Your parent's health records, handled carefully and on purpose.

The full policy

Written under the Digital Personal Data Protection Act, 2023. Last updated [month you publish this] 2026.

1. Who we are

Sarovan is run by Priyanka [surname] and Kuldeep [surname], based in Guwahati, Assam. For the records we hold, we are the data fiduciary. Reach us on WhatsApp at +91 80998 80272, or by email at [hello@sarovan.com, once the mailbox exists].

2. Whose data this is

The records are your parent's personal data, including data about their health. Your parent is the data principal. We collect and use it on their consent, given by them directly. If your parent cannot give consent themselves, we take it from the person lawfully acting for them, and we note who that is.

3. What we record

• Readings taken at each visit: blood pressure, oxygen, blood sugar, weight and similar.
• Medicines, doses, schedules and refill history.
• Prescriptions, test reports and notes from appointments.
• Contact details for your parent and for the family members you add.
• A masked copy of one photo ID, only where a hospital or insurer needs it. Never Aadhaar.

4. Why we use it

Only to run the care service: to visit, to record readings, to manage medicines and appointments, to act when a reading crosses a limit, and to write your monthly report. We do not advertise, we do not profile anyone, and we do not sell anything to anyone. Ever.

5. Consent, and taking it back

We take your parent's consent before we begin, in a language they read comfortably, and we explain what each item is for. Your parent, or the person acting for them, can withdraw that consent at any time. When it is withdrawn we stop, and on request we delete the records after sending a full copy.

6. How we store it

• Records sit in an encrypted database hosted in India, in Mumbai.
• Getting in needs a phone number we have added and a one-time code sent to that phone.
• Each family can open only their own parent's records.
• Uploaded documents open only for someone who is signed in. There are no shareable links.
• We do not keep health records in WhatsApp, in email attachments, or on a personal computer or cloud drive.
• This public website is a separate system with no connection to the records database.

7. Who else sees it

Only where the care needs it: your parent's own doctor, and the hospital named in their file during an admission. If you hire a bedside attendant, that arrangement is between you and the agency, and we pass on only what is needed to set it up. Nobody else, and never for marketing.

8. How long we keep it

While your parent is a customer, and for three years after the service ends. Then we delete it. You can ask us to delete it sooner and we will, after sending you a full copy.

9. Your parent's rights

As the data principal, your parent, or the person they nominate, can:

• Ask what we hold and get a copy.
• Have it corrected or completed.
• Have it deleted.
• Name someone to exercise these rights on their behalf.
• Raise a complaint and get an answer.

We act on any of these within a reasonable time and tell you when it is done.

10. Complaints

Our contact for complaints is Priyanka, on the number above. If we cannot settle it, you may approach the Data Protection Board of India.

11. If something goes wrong with the data

If records are ever exposed or lost, we will tell the Data Protection Board of India and the people affected, as the law requires, and tell you plainly what happened and what we did about it.

12. Changes to this page

If we change how we handle data, we update this page and the date at the top. Anything that materially affects your parent's records, we tell you directly.