Privacy Policy

Effective Date: July 7, 2025
Last Updated: July 7, 2025

This Privacy Policy (“Policy”) is issued by Writelyf Inc., a healthcare software company incorporated under applicable laws of India and operating globally (“Company”, “Writelyf”, “we”, “us”, or “our”).

We are committed to safeguarding your privacy and ensuring that your data is collected, processed, and used with the highest standards of integrity, legality, and transparency.

1. Binding Legal Notice

By accessing or using our services, platform, mobile application, or website located at www.writelyf.ai, you, the User, acknowledge that you have read, understood, and consented to this Policy. This Policy constitutes a binding legal agreement and shall prevail over any conflicting terms.

If you do not agree, you must immediately cease all use of our services.

2. Scope and Jurisdiction

This Policy applies to all Users, including patients, doctors, hospitals, administrators, and partners worldwide. Writelyf operates under applicable laws in jurisdictions including but not limited to:

• India (Digital Personal Data Protection Act, 2023)
• United States (HIPAA, CCPA)
• European Union (GDPR)
• Singapore (PDPA)
• United Arab Emirates (Federal Decree-Law No. 45 of 2021)

In the event of any conflict, the law most protective of the data subject shall apply.

3. Data We Collect

• Personally Identifiable Information (PII): Name, email, phone, country, gender
• Health Data: Medical history, symptoms, SOAP notes, diagnostic inputs
• Device & Technical Data: IP address, browser type, device identifiers
• Usage Data: App activity, preferences, logs, time stamps

4. Purpose of Processing

• Generation of AI-powered SOAP reports
• Improving diagnostic accuracy and healthcare outcomes
• Facilitating doctor-patient-hospital communication
• Compliance with legal obligations
• Fraud detection and security purposes
• Product development and system analytics

We do not sell, rent, or commercially exploit your health data under any circumstances.

5. Legal Basis

Processing of data is justified under the following legal grounds:

• Consent (Art. 6(1)(a) GDPR / Sec. 6 DPDP Act)
• Contractual necessity
• Legitimate interest (e.g. fraud prevention)
• Legal obligation (e.g. compliance with court orders or regulations)
• Vital interests (for health-related emergencies)

You may withdraw consent at any time, but this will not affect past lawful processing.

6. Data Retention

• Active usage: data retained for up to 7 years
• Dormant accounts: data archived after 12 months
• Legal retention: extended as per statutory requirements

Upon expiry, data is securely anonymized or destroyed using certified protocols.

7. Cross-Border Transfers

Data may be transferred and processed outside your country of residence. Writelyf ensures safeguards including:

• Standard Contractual Clauses
• Binding Corporate Rules
• Data Localization (when required by law)

8. Third-Party Services

We may share limited data with subprocessors strictly for operations:

• Twilio (OTP delivery)
• SendGrid (email communications)
• OpenAI (SOAP generation)
• Supabase (storage and analytics)

All subprocessors are GDPR-compliant and bound by contract to ensure confidentiality.

9. Security Measures

• End-to-end TLS encryption
• Role-based access control (RBAC)
• Activity logging and intrusion detection
• Data hashing and tokenization
• Periodic third-party security audits

Breach Notification: Users will be notified within 72 hours of any material data breach.

10. Your Rights

• Right to access and obtain a copy of your data
• Right to rectification and erasure (right to be forgotten)
• Right to data portability
• Right to restrict or object to processing
• Right to withdraw consent

Requests may be sent to privacy@writelyf.ai and will be addressed within 30 days.

11. Children’s Privacy

Our services are intended for individuals 18+. We do not knowingly collect data from minors without authorization.

12. Compliance with Legal Requests

Writelyf may disclose user data when required by law or court order. We do not honor frivolous or unauthorized requests.

13. Indemnity and Limitation of Liability

Users agree to indemnify Writelyf and its team against claims arising from misuse of data.

Writelyf's total liability is limited to INR ₹10,000 or USD $100, whichever is lesser.

14. Amendments and Updates

This Policy may be updated. Continued use of the platform implies acceptance of changes.

15. Governing Law and Dispute Resolution

This Policy is governed by Indian Law (for users in India) and local laws (for global users). Disputes shall be resolved in New Delhi courts unless otherwise required by law.

16. Contact Us