Privacy Policy

1. Introduction

Welcome to RikaAmrit, a comprehensive Dietician Customer Relationship Management (CRM) platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using RikaAmrit, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

• Contact Details: Name, email address, phone number, mailing address
• Account Information: Username, password (encrypted), profile picture
• Payment Information: Billing details, payment method (processed through secure third-party payment gateways)

2.2 Health & Dietary Information

• Medical History: Pre-existing conditions, allergies, medications, past medical records
• Physical Metrics: Height, weight, BMI, body measurements, progress photos
• Dietary Information: Food preferences, dietary restrictions, meal logs, nutrition goals
• Lifestyle Data: Activity level, sleep patterns, stress levels, exercise routines
• Consultation Notes: Notes from dietician consultations and recommendations

2.3 Technical Information

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, features used, interaction patterns
• Cookies: Session cookies, preference cookies, analytics cookies

3. How We Use Your Information

3.1 Primary Purposes

• Service Delivery: Provide personalized diet plans, nutrition guidance, and health consultations
• Progress Tracking: Monitor your health goals, weight management, and dietary adherence
• Communication: Send appointment reminders, diet plan updates, health tips, and notifications
• Dietician Matching: Connect you with qualified dieticians based on your needs and preferences
• Payment Processing: Process subscription fees, consultation charges, and other payments

3.2 Platform Improvement

• Analyze usage patterns to improve our services and user experience
• Develop new features and enhance existing functionalities
• Conduct research and analytics (anonymized data only)
• Troubleshoot technical issues and maintain platform security

4. Information Sharing & Disclosure

4.1 With Your Consent

• Assigned Dieticians: Your health and dietary information is shared with your assigned dietician(s) for consultation and treatment purposes
• Healthcare Providers: With your explicit permission, we may share relevant information with other healthcare professionals

4.2 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing (Razorpay, Stripe)
• Cloud storage and hosting (AWS, Google Cloud)
• Email and SMS notifications (Twilio, SendGrid)
• Analytics and performance monitoring

These providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.

4.3 Legal Requirements

We may disclose your information when required by law, such as:

• Compliance with legal obligations, court orders, or government requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities
• Emergency situations involving health and safety

5. Data Security

5.1 Security Measures

We implement robust security measures to protect your information:

• Encryption: End-to-end encryption for data transmission (SSL/TLS)
• Storage Security: Encrypted database storage with AES-256 encryption
• Access Control: Role-based access restrictions and multi-factor authentication
• Regular Audits: Security audits, vulnerability assessments, and penetration testing
• Secure Backups: Regular encrypted backups with disaster recovery protocols
• HIPAA Compliance: Adherence to healthcare data protection standards

5.2 Data Breach Protocol

In the unlikely event of a data breach, we will:

1. Notify affected users within 72 hours
2. Report the incident to relevant authorities as required by law
3. Take immediate action to contain and remediate the breach
4. Provide guidance on protective measures users can take

6. Your Privacy Rights

6.1 Access & Control

You have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct any inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Limit how we use your data in certain circumstances
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your data for specific purposes
• Right to Withdraw Consent: Withdraw consent for data processing at any time

6.2 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@rikaamrit.com. We will respond to your request within 30 days.

7. Data Retention

We retain your information for as long as necessary to:

• Provide you with our services
• Comply with legal obligations (typically 7 years for health records)
• Resolve disputes and enforce our agreements
• Maintain audit trails for security and compliance purposes

When data is no longer needed, it is securely deleted or anonymized. You may request earlier deletion by contacting us.

8. Cookies & Tracking

8.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality (login, session management)
• Performance Cookies: Help us understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Collect anonymous usage statistics

8.2 Cookie Control

You can control cookies through your browser settings. Note that disabling certain cookies may limit platform functionality.

9. Third-Party Services

Our platform may contain links to third-party websites or integrate with external services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Third-party integrations may include:

• Payment gateways (Razorpay, Stripe, PayPal)
• Video conferencing (Zoom, Google Meet)
• Analytics tools (Google Analytics)
• Social media platforms

10. Children's Privacy

RikaAmrit is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

For users aged 13-18, parental consent is required before using our services.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on the platform

Your continued use of RikaAmrit after changes indicates acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: