1 Definitions

In this Privacy Policy, the following definitions apply:

• Cookies: Small files placed on your device by the HoloFx website or mobile application to remember your actions, preferences, and session state.
• Partners: Select third parties (including healthcare providers and group entities) with whom HoloFx maintains contractual agreements.
• Personal Data: Personal information including sensitive personal data/health records about you, which, either directly or indirectly, is capable of identifying you.
• Service Providers: Entities to whom HoloFx discloses your Personal Data in order to process information for specific operational healthcare purposes.
• HoloFx / Company: HoloFx PHR platform operated under applicable company guidelines and registered offices in Mumbai, India.
• User or You: The natural person who accesses or uses the HoloFx website or mobile application.

2 What Personal Data HoloFx Collects About You

HoloFx collects Personal Data for various healthcare and operational purposes set out in this Privacy Policy:

• Contact Information: First and last name, email address, postal address, phone number, and emergency contacts.
• Financial Information: Payment instrument information, transaction history, payment method, and billing preferences.
• Technical Information: Device usage, Internet Protocol (IP) address, operating system, and similar data collected via automated tools.
• Product and Service Information: Account membership number, registration details, lab test records, clinical consultation summaries, and prescriptions.
• Personal Health Records (Sensitive Data): Lab reports, diagnostic test results, medical history, vitals tracking, and external health reports uploaded by you.
• Reviews and Feedback: Your reviews, ratings, feedback, and opinions regarding products, healthcare services, or programs.

3 Permissions Used by the Application ⭐

To provide complete personal health management functionality, the HoloFx Mobile Application requests explicit device permissions as detailed below:

Permission	Technical Code	Purpose & Necessity
Storage / Files & Media	READ_EXTERNAL_STORAGE WRITE_EXTERNAL_STORAGE	Required to let you select and upload external lab test reports, prescriptions, and health documents to your PHR account, as well as download PDF reports locally to your device.
Calendar Access	READ_CALENDAR WRITE_CALENDAR	Required to schedule doctor appointment reminders and follow-up consultation alerts directly into your mobile device calendar.
Phone / Direct Dialing	CALL_PHONE	Required to allow one-touch direct phone calling to emergency helplines, clinic desks, and patient support from within the application.
Network & Internet	INTERNET ACCESS_NETWORK_STATE	Required to establish secure SSL/TLS encrypted network communication between the mobile app and HoloFx backend servers.
Local Database Cache	SQLite Storage	Required to securely cache your encrypted user session and offline profile info on your device for fast access.

4 How HoloFx Collects Personal Data

HoloFx collects Personal Data through the following channels:

• Information You Give: Information entered directly on our website, mobile app, or during clinic registration (e.g. uploading lab reports, setting profile details).
• Automatic Collection: Automated data received via cookies, IP tracking, and app usage monitoring to enhance security and navigation.
• E-mail & In-App Communications: Confirmation logs when opening emails or notifications sent by HoloFx.
• Information from Healthcare Providers & Partners: Medical data received from diagnostic labs, affiliated clinics, and healthcare partners.

5 Personal Data Shared by You

HoloFx collects Personal Data when you:

• Apply or register to receive healthcare products and/or services.
• Conduct transactions or upload external medical reports onto the Member Portal.
• Complete healthcare surveys, submit doctor reviews, or request customer support.

6 Personal Data Collected Automatically

• Web servers and mobile app analytics collect IP addresses, operating system details, device model, and browsing duration.
• This information is aggregated to measure usage patterns, optimize performance, and maintain application security.

7 Use of Personal Data and Purpose of Collection

HoloFx uses Personal Data for the following purposes:

• Carrying out obligations arising from any contract entered into between you and HoloFx.
• Providing products, medical services, lab test reports, and appointment notifications.
• Processing, disclosing, and sharing data with authorized Service Providers and healthcare partners to deliver medical care.
• Improving application features, operational security, and preventing fraud or unauthorized access.
• Complying with applicable statutory legal and healthcare obligations under Indian law.

8 Sharing of Personal Data

HoloFx may share Personal Data with:

• Partners & Healthcare Providers: Doctors, clinics, diagnostic centers, and HealthSpring labs involved in your care.
• Service Providers: Entities handling data storage, infrastructure, payment processing, user analytics, and customer support bound by strict confidentiality contracts.
• Ad-Tech & Analytics Platforms: Device identifiers or hashed data shared securely for attribution, performance measurement, and analytics (no selling of health records).
• Legal & Regulatory Authorities: Information disclosed to comply with applicable law, valid legal process, or to protect vital interests.

9 Keeping Data Secure

HoloFx uses technical and organizational security measures to safeguard your Personal Data. Data is stored on secure servers located in India certified under IS/ISO/IEC 27001 for Information Security Management Systems. Data in transit is protected using SSL/TLS encryption.

10 Retention of Personal Data

HoloFx retains Personal Data for as long as necessary to provide access to its products/services, comply with legal and medical record retention obligations, resolve disputes, and enforce agreements.

11 Where HoloFx Stores Personal Data

Personal Data collected under this Privacy Policy is hosted on secure cloud servers located strictly within India. Appropriate safeguards under Indian law are implemented to prevent data loss or unauthorized access.

12 Your Rights (DPDP Act Compliance)

Subject to applicable laws, you have the right to access your health profile, request correction of inaccurate contact details, withdraw processing consent, and file privacy grievances.

13 Changes to This Privacy Policy

HoloFx may update this Privacy Policy periodically. Updated versions will be accessible via the website and mobile app with an updated Date. Continued usage constitutes acceptance of the updated policy.