Privacy Policy

Jiive Longevity Technology Pvt. Ltd. (“Jiive”, “we”, “us”) is an Indian company that provides a health testing service delivered over WhatsApp. You book a blood test by chatting with Lumi, our AI health companion; a trained phlebotomist collects your sample at home; the sample is processed at Thyrocare’s NABL-accredited laboratories; a physician reviews any concerning results; and your report and follow-up conversations happen in your WhatsApp chat with Lumi.

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Jiive is the Data Fiduciary — the entity that decides how and why your personal data is processed.

We collect only what the service needs. We do not collect your location beyond the address you give us, and we do not access your contacts, photos, or other WhatsApp conversations.

• Service delivery: booking your test, scheduling the home visit, processing your sample, generating your report, and delivering it to you on WhatsApp.
• Doctor review: having a physician review results that need attention before you receive them.
• Reminders: practical messages such as fasting reminders before collection and notifications when your report is ready.
• Support: answering your questions about your report and helping you act on it.

We do not use your data for purposes unrelated to the service without asking you first.

We process your personal data under the DPDP Act on the basis of your consent, which you give when you book a test and share your details with us. Where the law permits, we may also process data for certain legitimate uses recognised by the DPDP Act, such as complying with a legal obligation.

Your health data — blood results, derived scores, and health information you share in chat — is handled with heightened care: access is restricted to the people and systems that need it to deliver your service, and it is never used for advertising or profiling unrelated to your health report.

You can withdraw your consent at any time (see Section 10). If you withdraw consent, we will stop processing your data except where we are legally required to retain it, though this may mean we can no longer provide the service to you.

We share your data only with the parties needed to deliver the service:

• Partner laboratories: Thyrocare’s NABL-accredited labs receive your sample and the details required to process it and report results.
• Reviewing physicians: doctors who review your results see the health data needed to do so.
• Payment providers: third-party payment processors handle your payment; we receive only the payment status.
• Website analytics: PostHog, which hosts our website analytics in the European Union, receives data about how you use jiive.ai (see Section 7).
• WhatsApp / Meta: the service runs on WhatsApp, so your messages pass through Meta’s platform. WhatsApp chats are end-to-end encrypted in transit. Jiive, as the party you are chatting with, processes the content of your messages in order to provide the service — that is how Lumi reads and replies to you.

Each of these parties is bound to use your data only for the purpose it was shared. We may also disclose data where required by law or a lawful order of a court or authority.

• We never sell your personal or health data. Never sold. Shared only with the partners who deliver your test.
• We never share your data with advertisers, data brokers, or insurers for marketing or advertising purposes.
• We never use your health data to build advertising profiles.

We use PostHog to understand how people use jiive.ai, so we can improve it. PostHog stores this data on servers in the European Union. It records:

• The pages you visit, where you came from, the type of device and browser you use, and how long you stay.
• What you click and how far you scroll, which we also see as heatmaps.
• Session recordings that replay how you moved through the site. Anything you type into a form is hidden in these recordings.

To recognise a return visit, PostHog sets a cookie and keeps an identifier in your browser’s storage. We also store a short reference code, such as JV-7K3Q9M. When you tap a WhatsApp button, the code is added to the end of your message so we can tell which visits lead to a booking. We then link only your booking and payment status to the code, never your health data, and we never send your name, phone number, email or messages to PostHog.

Analytics is on when you first visit. To turn it off, choose Decline in the cookie notice. From then on nothing is sent to PostHog from this browser, including session recordings. The reference code is still added to your WhatsApp message, so we can count the chat, but it isn’t linked to your visits. If you clear this site’s data in your browser, the cookie notice appears again and you can choose again.

• Your data is encrypted in transit and at rest.
• Access is limited by role: only the people and systems that need your data to deliver the service can access it.
• We review our security practices regularly and act on issues we find.

No system is perfectly secure. If a data breach affecting you occurs, we will notify you and the Data Protection Board of India as required under the DPDP Act.

We keep your data only as long as needed for the purposes above:

• Health records and reports: retained so you can access your history and track changes over time, and for as long as applicable medical record-keeping rules require.
• Chat messages: retained while your account with us is active, so Lumi can give you continuity of support.
• Booking and payment records: retained as required by tax and accounting law.

When data is no longer needed and no law requires us to keep it, we delete it. You can also request erasure at any time (see Section 10).

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it has been processed.
• Correction of inaccurate or incomplete data.
• Erasure of your data, subject to legal retention requirements.
• Withdraw consent at any time, as easily as you gave it.
• Nominate another person to exercise your rights if you are unable to (for example, due to death or incapacity).
• Grievance redressal — a readily available way to raise complaints (see Section 11).

To exercise any of these rights, message us on WhatsApp. We may need to verify your identity before acting on a request.

If you have a concern about how your data has been handled, message us on WhatsApp.

We will acknowledge and respond to grievances within the timelines prescribed under applicable rules. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

The Jiive service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.

We may update this policy as the service or the law changes. If we make material changes, we will notify you on WhatsApp before they take effect. The date at the top of this page shows when it was last revised.