Privacy Policy

Zenvirai — Family Health Platform  ·  Effective: 1 January 2025  ·  Last updated: June 2025

Zenvirai ("we", "our", "the app") is operated by Nectar Digital, Nepal. This policy explains what personal and health data we collect, how we use it, and your rights.

1. What We Collect

• Account data: phone number, optional email, language preference.
• Family & member data: names, dates of birth, biological sex, country.
• Health records: vitals, medications, conditions, allergies, immunizations, documents, encounter visits. PHI
• Women's health data: menstrual cycle, pregnancy, fertility signs. PHI
• Emergency data: GPS coordinates (only when you tap SOS), emergency contacts.
• AI interaction logs: anonymised queries sent to our self-hosted AI model. We never send PHI to third-party AI APIs.
• Device & usage data: FCM push token, app version, OS version.

2. How We Use Your Data

• Provide the family health management features of the app.
• Send medication and appointment reminders you configure.
• Alert your nominated emergency contacts when you trigger SOS.
• Improve our AI health assistant (using anonymised, non-identifiable data only).
• Comply with legal obligations.

3. Data Sharing

We do not sell your data. We share data only as follows:

• Emergency contacts you nominate — when you trigger SOS.
• First responders — only what you put on your QR emergency card, which you control.
• Firebase / Google — FCM push token for notifications; no health data is shared.
• Legal requirements — if required by law or court order.

4. Data Storage & Security

• Data is stored on servers in India (DigitalOcean) and backed up to the same region.
• All data in transit is encrypted via TLS 1.2+.
• Passwords are hashed with Argon2. JWTs expire in 15 minutes.
• Sensitive health fields (reproductive health, mental health) are encrypted at the field level.
• Access to health records requires explicit consent grants.

5. Your Rights (GDPR / Global)

• Access: request a copy of your data via Settings → Export Data.
• Correction: update your profile and health records at any time in-app.
• Deletion: permanently delete your account and all associated data at Settings → Delete Account, or at zenvirai.nectar.com.np/account/delete/.
• Portability: export your records in FHIR/JSON or PDF format.
• Withdraw consent: remove caregiver access at any time in Settings → Consent.

6. Children

The app is intended for use by adults managing a family. Children's health data is managed by an adult account holder. We do not knowingly collect data directly from children under 13 without adult supervision.

7. Retention

We retain your data for as long as your account is active. On account deletion, all personal data is permanently erased within 30 days. Anonymised aggregate analytics may be retained.

8. Changes

We will notify you via the app when this policy changes materially. Continued use after the effective date constitutes acceptance.