Privacy Policy
Last updated 2 October 2026
DuraMater (“we”, “us”) provides preventive health testing and a dashboard that explains your lab results. This policy explains what personal data we collect, why, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
What we collect
- Account details — your name, email address and mobile number, and a securely hashed password if you set one.
- Health data — lab reports you upload, the values we read from them, and the scores and findings we calculate.
- Booking details — if you book a test: date of birth, sex, collection address and preferred time.
- Payment details — the amount, payment status and, for cards, only the last four digits and card network. Card numbers are handled by our payment provider and never reach us.
- Security records — sign-in times, IP address and device information, used to protect your account.
Why we use it
- To create and secure your account, including verifying your email and phone with a one-time code.
- To read your reports, compare results with reference ranges and show them on your dashboard.
- To arrange sample collection and contact you about your booking.
- To meet legal, safety and audit obligations.
We process your health data only with your consent, which you give when you create an account. We do not sell your data or use it for advertising.
How we protect it
- Report text and patient identifiers are encrypted at rest.
- Every access to your health records is logged.
- Data is sent only over encrypted connections.
- Only you can see your reports in your account. If you print or download a summary, sharing it is up to you.
Who we share it with
We use trusted service providers to run DuraMater — for example cloud hosting and storage, email and SMS delivery, Razorpay for payments, and our partner NABL-accredited laboratories for sample processing. They may only use your data to provide their service to us.
Your rights
- Access and download — download all your data at any time from Profile → Download my data in your dashboard.
- Correction — ask us to correct your account details.
- Erasure — delete your account from Profile → Delete account. Your reports, files and results are deleted immediately; we keep only the minimal records the law requires (such as payment and security logs).
- Withdraw consent — you can withdraw consent at any time by deleting your account.
- Grievances — contact us using the details below. If you are not satisfied, you may complain to the Data Protection Board of India.
How long we keep it
We keep your data while your account is active so you can track results over time. When you delete your account, your health data is deleted.
Contact
For privacy questions or to exercise your rights, contact us at our LinkedIn page.