Privacy
Your health data is some of your most personal information. This page explains what iDecodeMe collects, why, how long we keep it, who else touches it, and the rights you have under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
Effective date: July 2026
Never sold
We do not sell, rent, or share your reports or personal data with advertisers, insurers, or third-party AI model trainers.
Encrypted
Data is encrypted in transit and stored securely. Access is limited to you and the small set of systems that run the decoding service.
Deletable
You can delete an individual report or your entire account — including all stored data — from your settings at any time.
Who we are (Data Fiduciary)
iDecodeMe is operated as a sole proprietorship by Parindsheel Singh, located at 1077, Sector 67, SAS Nagar, Punjab 160062, India. For the purposes of the DPDP Act, this proprietorship is the Data Fiduciary and you (the user) are the Data Principal.
What we collect
- Account data: your email address, password hash, and any preferences you set.
- Health report data: PDF or image files of blood reports you upload, and the individual markers, values, units, and reference ranges we extract from them.
- Payment metadata: transaction ID, amount, plan, and status returned by Razorpay. We do not store your card number, CVV, UPI PIN, or bank credentials — those are handled entirely by Razorpay.
- Usage data: aggregate, cookieless analytics via Plausible (page views, referrer, device class). No cross-site tracking.
We do not ask for government IDs, insurance numbers, biometrics, caste, religion, or sexual-orientation data. If a report you upload contains extra personal identifiers (name, doctor, patient ID printed on the PDF), we retain them only for the retention window below and never use them for any purpose beyond producing your decode.
Why we process it, and our lawful basis
We process your data on the basis of your free, specific, informed, and unambiguous consent under section 6 of the DPDP Act, given when you create an account and upload a report. The purposes are:
- To decode your health report into plain-language explanations.
- To let you revisit past decodes, compare trends, and download PDF summaries.
- To process payments for paid plans (via Razorpay).
- To send transactional email (receipts, decode-ready notifications, password resets).
- To improve product quality using anonymised, aggregate analytics.
We do not use your health data to train AI models, and we do not permit our sub-processors to do so either.
How long we keep it (Retention)
| Data | Retention |
|---|---|
| Decoded reports (extracted markers + explanations) | 24 months from creation |
| Raw uploaded PDFs / images | 12 months from upload |
| Any data, on your request | Deleted immediately (within 7 days at most) |
| Payment records (for tax / statutory compliance) | 8 years, as required by Indian tax law |
After the retention window, data is deleted or irreversibly anonymised.
Sub-processors
We use a small set of vendors to run the service. Each has its own privacy commitments; we've chosen them because they meet our security bar.
| Sub-processor | Purpose | Region |
|---|---|---|
| GoDaddy | Domain & hosting infrastructure | India / global |
| Anthropic (Claude) | Large-language-model decoding of report markers into plain-language explanations | United States |
| Plausible Analytics | Cookieless, aggregate site analytics | European Union |
| Razorpay | Payment processing for paid plans | India |
Cross-border transfer
Report markers are sent to Anthropic in the United States for the sole purpose of generating your decode. Anthropic is contractually prohibited from using this data to train its models. This transfer is permitted under the DPDP Act; the Central Government has not (as of the effective date above) notified any country as restricted for transfer of personal data.
Your rights under the DPDP Act
As a Data Principal you have the right to:
- Access a summary of the personal data we process about you.
- Correct, complete, update, or erase your personal data.
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Withdraw consent at any time. Withdrawal does not affect processing that already happened lawfully.
- Grievance redressal — see the officer named below.
To exercise any of these rights, email harsankahlon@gmail.com. We respond within 15 days.
Grievance Officer
Name: Harsandeep
Email: harsankahlon@gmail.com
Address: iDecodeMe, 1077, Sector 67, SAS Nagar, Punjab 160062, India
Acknowledgement within 48 hours. Resolution within 15 days, as required by the DPDP Act, 2023 and the IT (Intermediary Guidelines) Rules, 2021.
Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access to production systems is restricted to named administrators with multi-factor authentication. We keep audit logs of access to health data and review them periodically. In the event of a personal-data breach that is likely to cause harm, we will notify affected users and the Data Protection Board of India as required by the DPDP Act.
Children
iDecodeMe is intended for users aged 18 and above. We do not knowingly process personal data of children. If you believe a child has created an account, email the Grievance Officer and we will delete it.
Changes to this policy
We'll update this page when practices change and revise the effective date at the top. Material changes will be emailed to registered users.
Contact
General privacy questions: harsankahlon@gmail.com.