Privacy Policy

Karyakarta (OPC) Pvt. Ltd. ("Karyakarta", "we", "our" or "us") is committed to protecting the privacy, confidentiality and security of personal information entrusted to us by our users. Karyakarta is a home-care and wellness services platform providing care and support services for elderly individuals and children with special needs, along with associated healthcare, wellness and professional services. This Privacy Policy explains how we collect, receive, use, store, process, share and protect personal information when individuals access or use our website, mobile applications and associated services. This policy applies to:

• Individuals and family members using the Karyakarta customer application.
• Caregivers, nurses, special educators, counsellors, healthcare professionals and other service providers using the Karyakarta service provider application.
• Wellness coordinators and authorised personnel using Karyakarta's internal operational applications.
• Visitors accessing our website or communicating with us through our official channels.

By accessing or using our applications, website or services, you acknowledge that you have been provided access to this Privacy Policy. Where consent is required for the collection or processing of personal information, we will obtain such consent through appropriate mechanisms.

Depending on how you interact with Karyakarta, we may collect the following categories of information.

2.1 Personal and Identification Information

This may include:

• Full name.
• Age and date of birth.
• Gender, where voluntarily provided or relevant to service delivery.
• Mobile number and email address.
• Residential address and service location.
• Emergency contact details.
• Relationship between the registered user and the individual receiving care.
• Identity or verification information, where required.

2.2 Account and Authentication Information

When creating or accessing an account, we may collect:

• Registered mobile number and email address.
• One-time passwords (OTPs) and authentication-related information.
• Account credentials and profile details.
• Account preferences and settings.
• Login activity and account-related records.

We may use third-party communication service providers to deliver OTPs and account-related notifications.

2.3 Health, Medical and Care-Related Information

Given the nature of our services, we may collect personal information relevant to the care and wellbeing of individuals receiving services.

• Medical history and existing health conditions.
• Allergies and relevant medical sensitivities.
• Mobility limitations and physical assistance requirements.
• Medical prescriptions or care instructions voluntarily provided.
• Health-related observations recorded during wellness visits.
• Information relating to physical, cognitive or developmental needs.
• Disability-related information and special care requirements.
• Information relevant to nursing, caregiving, physiotherapy, counselling and other wellness services.
• Relevant medical reports, care notes and health-related records.

We collect and use such information to the extent reasonably necessary for coordinating and delivering requested services and related purposes.

2.4 Information Relating to Children

Where services are requested for children, particularly children with special needs, we may collect:

• Child's name and age.
• Parent or lawful guardian details.
• Developmental and educational history relevant to the requested services.
• Information about developmental delays, learning difficulties or special educational requirements.
• Assessment information and intervention plans provided by parents or authorised professionals.
• Session notes and progress reports, where applicable.

Such information will be handled with additional care and appropriate parental or lawful guardian consent wherever required by applicable law.

2.5 Service and Booking Information

We may collect information relating to:

• Services requested or booked.
• Subscription plans and service preferences.
• Appointment dates, times and locations.
• Caregiver or professional assignments.
• Visit records and service completion status.
• Session attendance and reports.
• Feedback, complaints and service ratings.
• Communications between users and Karyakarta's support or operational teams.

2.6 Payment and Transaction Information

When users purchase services or subscriptions, we may collect:

• Transaction references.
• Payment status.
• Subscription details.
• Billing information.
• Invoices and payment history.

Payments may be processed through third-party payment gateways. Karyakarta does not intend to store complete debit card, credit card or other payment instrument credentials on its own systems. Such information is handled by the relevant payment service provider in accordance with its applicable security practices.

2.7 Service Provider Information

For individuals registering as service providers, we may collect:

• Name, contact details and residential address.
• Professional qualifications and educational credentials.
• Relevant licences, registrations and certifications.
• Professional experience and areas of specialisation.
• Identity and verification documents.
• Bank or payment details for service payouts.
• Availability and service preferences.
• Assignment history, attendance and service records.
• Performance feedback and ratings.
• Location information collected for service coordination and monitoring.
• Other information reasonably necessary for onboarding and managing service providers.

2.8 Documents, Images and Uploaded Information

Our applications may allow users, service providers and authorised personnel to upload documents, photographs and other files.

• Medical reports and prescriptions.
• Health-related documents.
• Photographs relevant to care requirements.
• Identity and verification documents.
• Educational and developmental assessment reports.
• Intervention plans and progress-related documents.
• Other information voluntarily submitted through the applications.

Such uploads may contain personal, health-related or other confidential information. They will be processed for the purposes of service delivery, verification, coordination, record-keeping and other relevant operational requirements. Users should ensure that they have the necessary authority and consent before uploading information concerning another individual.

2.9 Technical and Device Information

When using our applications or website, certain technical information may be collected, including:

• Device type and operating system.
• Application version.
• IP address.
• Device identifiers, where available.
• Application usage and interaction data.
• Crash reports and diagnostic information.
• Network and technical performance information.

Karyakarta uses personal information for legitimate and clearly defined operational and service-related purposes, including:

1. Creating and managing user accounts.
2. Verifying identities and authenticating users.
3. Facilitating service bookings and subscription management.
4. Matching users with appropriate caregivers, nurses, special educators, counsellors and other professionals.
5. Coordinating wellness visits and monitoring service delivery.
6. Maintaining service records and care-related information.
7. Communicating appointment confirmations, reminders, service updates and important notifications.
8. Providing customer assistance and resolving complaints.
9. Processing payments, subscriptions, refunds and service-provider payouts.
10. Maintaining service quality and operational efficiency.
11. Improving application functionality and user experience.
12. Detecting suspicious activities, misuse, fraud or security incidents.
13. Complying with applicable legal and regulatory obligations.

We do not use personal information for purposes unrelated to the services or purposes for which it was collected without obtaining the necessary consent or otherwise establishing a lawful basis.

Karyakarta may share relevant personal information with authorised individuals and organisations where necessary for providing services, operating the platform or complying with applicable laws.

4.1 Assigned Service Providers

Relevant information may be shared with assigned caregivers, nurses, special educators, counsellors, physiotherapists and other professionals to enable them to understand and fulfil the individual's care requirements. Such information may include contact details, service location, relevant health information, care instructions, uploaded documents and appointment details. Access will be limited to information reasonably necessary for the assigned service.

4.2 Wellness Coordinators and Internal Personnel

Authorised Karyakarta employees and wellness coordinators may access relevant user and service information for:

• Coordinating appointments and assignments.
• Monitoring service delivery.
• Following up on scheduled visits.
• Maintaining service records.
• Handling customer concerns.
• Ensuring operational quality and continuity of care.

Access to personal and health-related information is intended to be restricted according to operational responsibilities.

4.3 Family Members and Authorised Representatives

Where an individual registers or requests services on behalf of an elderly family member or child, relevant information may be shared with the registered user, parent, lawful guardian or other authorised representative, subject to appropriate authority and applicable consent requirements.

4.4 Third-Party Technology and Service Providers

Karyakarta uses third-party technology infrastructure and service providers to support the operation of its applications and services. Our application infrastructure and data storage utilise Firebase services provided by Google. Depending on the services and integrations used, we may engage third-party providers for:

• Cloud hosting and data storage.
• Application infrastructure and maintenance.
• Authentication and account management.
• OTP delivery and SMS notifications.
• Email and communication services.
• Payment processing.
• Application analytics and diagnostics.
• Technical support and security services.

Such providers may process relevant information on Karyakarta's behalf, subject to applicable contractual and legal requirements and their respective service terms and privacy practices. Information may be stored or processed on infrastructure located in different geographical regions, depending on the configuration and services used by Karyakarta and its technology providers.

4.5 Legal and Regulatory Disclosure

We may disclose information where required or permitted by applicable law, court orders, government authorities, law enforcement agencies or other competent regulatory bodies.

4.6 Business Transfers

In the event of a merger, acquisition, restructuring, sale or transfer of business assets, relevant information may be transferred as part of the transaction, subject to applicable legal requirements and appropriate safeguards. Karyakarta does not sell users' personal information to third parties for commercial exploitation.

We recognise that health-related and care-related information is particularly personal and confidential. Karyakarta takes reasonable steps to protect such information against unauthorised access, disclosure, alteration, loss or misuse. These steps may include:

• Restricting access to authorised personnel.
• Limiting information sharing to relevant service requirements.
• Maintaining appropriate access controls.
• Using suitable technical and organisational safeguards.
• Requiring relevant personnel and service providers to maintain confidentiality.
• Reviewing and improving information-handling practices.

Service providers are expected to use information obtained through Karyakarta solely for the purposes of their assigned responsibilities and not disclose it to unauthorised individuals.

Karyakarta recognises the importance of protecting the personal information of children, particularly children receiving special education, counselling, caregiving or other developmental support services. Where a child receives services through Karyakarta, relevant information may be provided by the child's parent or lawful guardian. We may collect information necessary to understand the child's requirements, coordinate services, maintain intervention records and support continuity of care. Karyakarta will seek verifiable parental or lawful guardian consent wherever required under applicable law. We do not knowingly collect children's personal information for unrelated commercial purposes or targeted advertising directed at children. Parents and lawful guardians may contact us to access, correct or request deletion of information concerning their children, subject to applicable legal and operational requirements.

Karyakarta may collect location information from service providers through the service provider application to facilitate service coordination and operational monitoring. Location information may be used for:

• Identifying the location of assigned service providers.
• Coordinating home-care appointments and visits.
• Supporting service-provider check-in and check-out activities, where implemented.
• Monitoring and verifying wellness visits.
• Facilitating operational coordination and service management.
• Improving service reliability and accountability.

Location information may be collected through device permissions and application functionality. The availability, frequency and precision of location collection may depend on the device, operating system, application permissions and technical configuration. Service providers may manage location permissions through their device settings. However, disabling location permissions may affect their ability to perform certain assigned duties or use location-dependent application features. Karyakarta will use location information only for relevant operational and service-related purposes and in accordance with applicable law.

Our website and applications may use cookies, analytics tools and similar technologies to understand usage patterns, improve functionality, diagnose technical issues and enhance user experience. These technologies may collect technical information such as browser type, device information, pages visited and interaction data. Users can manage cookie preferences through their browser settings, where applicable. Disabling certain cookies may affect website functionality.

Karyakarta uses Firebase infrastructure for hosting and storing application-related data. Personal information is retained for as long as reasonably necessary to fulfil the purposes for which it was collected, including service delivery, account management, operational requirements, dispute resolution and compliance with applicable laws. Different categories of information may be retained for different periods depending on their purpose and applicable legal requirements. When information is no longer required, Karyakarta will take appropriate steps to delete or anonymise it, subject to applicable legal obligations, legitimate retention requirements, backup retention cycles and technical limitations.

Karyakarta takes reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, alteration or disclosure. Such measures are intended to protect information processed through our applications, internal systems and associated technology infrastructure. However, no method of electronic storage, transmission or communication can be guaranteed to be completely secure. Users are encouraged to maintain the confidentiality of their account credentials and OTPs and promptly notify Karyakarta if they suspect unauthorised access to their accounts. In the event of a personal data breach, Karyakarta will take appropriate steps in accordance with applicable legal requirements.

Our applications and website may contain links to third-party websites, platforms or services. Karyakarta is not responsible for the privacy practices, content or security policies of independent third-party services. Users are encouraged to review the privacy policies of such services before sharing personal information with them.

Subject to applicable law, users may have the right to:

• Request information about the personal data collected and processed by Karyakarta.
• Request correction or updating of inaccurate or incomplete information.
• Request erasure of personal information where applicable.
• Withdraw consent previously provided for specific processing activities.
• Raise grievances concerning the handling of personal information.
• Nominate another individual to exercise applicable rights in the event of death or incapacity, where provided by law.

Requests may be submitted through the contact details provided in this Privacy Policy. Upon receiving a request, Karyakarta may seek reasonable information to verify the identity and authority of the person making the request. Withdrawal of consent may affect our ability to provide certain services where the relevant information is necessary for their delivery. Karyakarta will address such requests in accordance with applicable legal requirements.

Karyakarta provides users with the ability to independently initiate account deletion through the application. Users who wish to discontinue using Karyakarta may use the account deletion functionality available within their application settings or account management section. Upon receiving an account deletion request, Karyakarta will take appropriate steps to process the request and delete or anonymise associated personal information, subject to applicable legal obligations and legitimate retention requirements. Certain records may need to be retained for legal, financial, regulatory, contractual or dispute-resolution purposes. Account deletion may affect access to active subscriptions, bookings, service records and other associated functionalities. Where users experience difficulties with account deletion or have additional data-related requests, they may contact support@karyakarta.co.

Service providers registered with Karyakarta may receive access to certain personal information of users assigned to them. Such access is provided to facilitate the performance of their professional responsibilities. Service providers are expected to:

• Maintain confidentiality of all personal and care-related information.
• Use such information only for assigned services.
• Avoid unauthorised copying, downloading or sharing of user information.
• Not disclose personal or medical information to unrelated third parties.
• Notify Karyakarta of any suspected unauthorised access or disclosure.
• Follow applicable confidentiality and information-handling requirements.

Karyakarta may take appropriate action in cases of misuse or unauthorised disclosure, subject to applicable agreements and laws.

Karyakarta may periodically update this Privacy Policy to reflect changes in our services, applications, operational practices, technology or applicable legal requirements. Any revised version will be published on our website or made available through appropriate application channels. The updated policy will indicate the date on which it was last revised. Where material changes require renewed consent or notification under applicable law, Karyakarta will take appropriate steps to communicate those changes.

If you have questions, concerns, complaints or requests relating to this Privacy Policy or the handling of your personal information, you may contact Karyakarta through the following details: Company: Karyakarta (OPC) Pvt. Ltd.
Privacy / Grievance Contact: Karyakarta Support Team
Email: support@karyakarta.co
Website: https://karyakarta.co
Registered Office Address: F-6/12, Malviya Nagar, New Delhi, India - 110017 Karyakarta will acknowledge and address privacy-related requests and grievances within the timelines prescribed under applicable law.