1. Introduction
BioByte Informatics Private Limited ("BioByte", "we", "us", "our") is committed to protecting your privacy and handling your personal data, including your health data, responsibly and in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made thereunder. This Privacy Policy explains what data we collect through Seevo, how we use it, who we share it with, and the rights you have over your data.
In this Policy, "Personal Data" means any data about an individual who is identifiable by or in relation to such data, and "Processing" means any operation performed on Personal Data, including collection, storage, use, sharing, and deletion. BioByte acts as the Data Fiduciary in respect of the Personal Data you provide through Seevo.
2. What Information We Collect
2.1 Information you provide directly
- Account information: your name, phone number, email address, and date of birth.
- Health Memory Vault profiles: names and relationships of family members whose reports you choose to manage, where you have their authority to do so.
- Medical lab reports: photographs, PDFs, or files of diagnostic test reports that you upload, including all biomarker values, reference ranges, dates, and laboratory information contained within them.
- Emergency profile information: any medical conditions, allergies, medications, blood group, emergency contacts, and photographs you choose to add to your Emergency Response Profile.
- Communications: messages you send to us for support, including via WhatsApp.
2.2 Information collected automatically
- Device information: device type, operating system, and app version, for the purpose of providing and improving the Service.
- Usage information: how you interact with the app, including features used and screens visited, for the purpose of improving the Service and diagnosing technical issues.
- Approximate location: where relevant to recommend nearby Lab Partners, with your permission.
2.3 Information generated by Seevo
AI-generated summaries, interpretations, trend analyses, and, where applicable, your BioByte Health Score, generated from the reports and information you provide.
3. How We Use Your Information
- Provide the core Service, including generating plain-language summaries of your lab reports using AI calibrated to Indian reference ranges, and where available, in your preferred Indian language.
- Track biomarker trends over time and generate forecasts once sufficient data points exist.
- Generate your BioByte Health Score, where this feature is enabled and where you have separately consented to this.
- Facilitate bookings with Lab Partners where you choose to use this feature.
- Provide your Emergency Response Profile feature, where you choose to enable it.
- Communicate with you regarding your account, the Service, and, where you have consented, product updates and marketing.
- Improve and develop the Service, including through aggregated and anonymised analysis.
- Comply with our legal obligations.
We process your health data only for the specific purposes you have consented to. Consent for report analysis, consent for sharing data with Lab Partners, and consent for insurance data sharing, where applicable, are collected separately and granularly within the app, and you may withdraw any of these consents independently at any time through your account settings.
4. AI Processing and Third-Party AI Models
To generate your health summaries, Seevo processes your uploaded reports using artificial intelligence, including a third-party multimodal AI model, currently Google's MedGemma, layered with BioByte's proprietary reference range database calibrated for Indian populations. We take steps to ensure that data sent for AI processing is handled securely and is used solely to generate your summary, and is not used by the third-party AI provider to train models on your data, in accordance with our agreements with such providers. [To be confirmed and detailed following finalisation of AI vendor agreements.]
6. Data Storage and Security
Your data is stored on secure cloud infrastructure with industry-standard security measures, including encryption in transit and at rest. [Specify hosting location(s) and provider(s) once finalised — relevant for DPDP Act cross-border data transfer provisions under Section 16, which currently await a notified list of permitted countries.] Access to your health data within BioByte is restricted to personnel who require it to provide the Service, under confidentiality obligations.
7. Data Retention
We retain your Personal Data, including uploaded reports and AI-generated summaries, for as long as your account remains active, or as needed to provide the Service to you. If you delete your account, your data will be deleted in accordance with Section 8 below. We may retain limited information as required for legal, tax, or regulatory compliance purposes even after account deletion, for the minimum period required by applicable law.
8. Your Rights and Data Deletion
- Access the Personal Data we hold about you.
- Correct or update inaccurate or incomplete Personal Data.
- Withdraw consent for any specific processing activity, as easily as you gave it.
- Request erasure of your Personal Data.
- Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
Deleting your data: Seevo provides a data deletion feature within the Health Memory Vault that allows you to permanently delete your account and associated data in two taps. Upon deletion, your reports, summaries, and profile information will be permanently removed from our active systems within [X] days, except where retention is required by law as described in Section 7.
9. Children's Data
Seevo is not directed at children under 18. Where a parent or guardian uses the Health Memory Vault to manage a minor's health reports, the parent or guardian is the account holder and is responsible for that data, and consents on the minor's behalf in accordance with the DPDP Act's provisions for processing children's data.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect, and where required, will seek your fresh consent.