Privacy Policy

Your privacy is not a feature, it's a foundation. Here's exactly how we protect your family's data.

Last updated: July 31, 2026 · Effective date: August 1, 2026

1. Information We Collect

We collect information you provide directly: your name, email, phone number, and your parent's health and care details when you set up the Gamira platform.

Automatically collected data includes health metrics (heart rate, BP, SpO2, sleep, activity), voice interaction logs, device usage data, and location data (only during emergencies).

We also collect technical data such as device identifiers, IP addresses, and app usage analytics to improve our services.

2. How We Use Your Information

To provide the Gamira companion service, voice interactions, health monitoring, medicine reminders, and emergency response.

To generate health insights, reports, and AI summaries for families and authorized medical professionals.

To detect emergencies such as falls and trigger SOS protocols including contacting family and emergency services.

To improve our AI models, develop new features, and enhance user experience, always in aggregated, anonymized form.

3. DPDP Act Compliance

Gamira complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India. We are registered as a Significant Data Fiduciary given the sensitivity of health data we process.

We obtain explicit, informed consent before collecting and processing personal data. You have the right to withdraw consent at any time.

You may request access to, correction of, or erasure of your personal data. Contact [email protected] to exercise these rights.

We conduct annual Data Protection Impact Assessments and maintain a Data Breach Response Plan with 72-hour notification protocols.

4. GDPR Compliance

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). We process personal data on the legal bases of consent, contract, and legitimate interest.

You have the right to access, rectify, erase, restrict, port, and object to the processing of your data.

We do not transfer data outside the EU/EEA without appropriate safeguards such as Standard Contractual Clauses.

To lodge a complaint with a supervisory authority, contact your local Data Protection Authority.

5. Cookies & Tracking

We use essential cookies for authentication and core functionality. Analytics cookies help us understand usage patterns.

Marketing cookies are only used with your explicit consent. You can manage cookie preferences in your account settings or through our Cookie Policy page.

6. Data Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Health data is stored separately with additional access controls.

Access to personal data is strictly limited to authorized personnel on a need-to-know basis, with full audit logging.

We undergo annual third-party security audits and penetration testing.

7. Your Rights

Right to Access: Request a copy of all personal data we hold about you.

Right to Rectification: Correct inaccurate or incomplete data.

Right to Erasure: Request deletion of your data (subject to legal retention requirements).

Right to Data Portability: Receive your data in a structured, machine-readable format.

Right to Object: Object to processing based on legitimate interests.

Right to Withdraw Consent: Withdraw consent for data processing at any time.

8. Contact Us

For any privacy-related questions or to exercise your rights, contact our Data Protection Officer:

Email: [email protected]

Address: Rudrapur, Uttarakhand, India 263153

We respond to all privacy requests within 30 days.