Privacy Policy

1. What Information We Collect

When you use Ayropath, we may collect the following:

Account Information

• Name, phone number, email address, date of birth, gender
• Password (stored encrypted — we never see it in plain text)
• Profile photo (if you upload one)

Health & Order Information

• Lab test bookings and results (shared with Thyrocare to process your tests)
• Doctor consultation details — appointment date, time, and doctor assigned
• Medicine orders — items purchased, delivery address, prescription (if required)

Payment Information

• We do not store your card or bank details.
• Payments are handled entirely by Cashfree Payments, which is PCI-DSS compliant.
• We only store the payment reference ID (to track orders and process refunds).

Usage Data

• Pages you visit, features you use, and time spent on the site
• IP address, browser type, device type
• This data helps us improve the platform and fix issues

2. Why We Collect It

We use your information only to:

• Fulfill your bookings — lab tests, consultations, medicine deliveries
• Send you order confirmations, refund updates, and appointment reminders via email or SMS
• Process payments and handle refunds through Cashfree
• Coordinate delivery and returns with Delhivery (our courier partner)
• Send OTPs for login and account verification (via SMS)
• Respond to your support requests
• Improve our platform based on how people use it
• Meet legal and regulatory requirements

We do not use your health data for advertising or sell it to any third party.

3. Who We Share Your Data With

We share data only when necessary to deliver the service:

We never sell your data. All third-party partners are bound by their own privacy policies and data protection agreements.

4. How We Protect Your Data

• All data is transmitted over HTTPS (encrypted).
• Passwords are hashed — we cannot read them.
• Payment data never touches our servers — Cashfree handles it directly.
• Database access is restricted to authorised team members only.
• We use MongoDB Atlas (cloud-hosted, encrypted at rest) for our database.

No system is 100% secure. If we ever detect a breach that affects your data, we will notify you promptly.

5. How Long We Keep Your Data

• Account data: kept for as long as your account is active.
• Order and booking records: kept for a minimum of 3 years for legal and tax compliance.
• OTP logs: deleted after 30 days.
• If you delete your account, your personal details are anonymised within 30 days, but order records may be retained for legal requirements.

6. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you.
• Correct — update incorrect information in your profile.
• Delete — request deletion of your account and personal data (subject to legal retention requirements).
• Opt out — unsubscribe from marketing emails at any time using the link in our emails.

To exercise any of these rights, email us at admin@ayropath.com. We will respond within 7 business days.

7. Cookies

We use cookies and local storage to keep you logged in and remember your preferences. We do not use third-party advertising cookies. You can clear cookies in your browser settings, but this will log you out of your account.

8. Children's Privacy

Ayropath is not intended for children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it promptly.

9. Links to Other Websites

Our website may link to external sites (for example, Thyrocare's report portal). We are not responsible for the privacy practices of those sites. Please review their privacy policies before sharing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top. We encourage you to review this page periodically. Continued use of Ayropath after changes means you accept the updated policy.

11. Contact Us

Questions about this policy or how we handle your data? Reach us at: