Effective Date: 3 October 2023
Last Updated: 28 August 2026
Orvo Technologies Private Limited (“Orvo”, “we”, “us”, or “our”) operates the Orvo platform, including its websites, mobile applications, web applications, clinic management systems, patient applications, doctor applications, staff applications, and related healthcare technology services (collectively, the “Services”).
This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use our Services.
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.
Depending on how you use Orvo, we may collect the following categories of information.
We may collect information such as:
When Orvo is used for healthcare-related services, we may process information provided by you or by healthcare providers, including:
Healthcare information is treated as sensitive information and is processed only for legitimate healthcare, operational, legal, or other purposes described in this Privacy Policy.
We may collect information relating to:
Where payments are processed through third-party payment providers, payment information may be processed directly by those providers in accordance with their respective privacy policies.
When you use our applications or websites, we may automatically collect certain technical information, including:
We use this information primarily to operate, secure, maintain, troubleshoot, and improve the Services.
If you contact us or communicate with Orvo through email, telephone, WhatsApp, SMS, support channels, or other communication methods, we may collect and retain the information necessary to respond to and manage those communications.
We may use information collected through the Services for the following purposes:
We do not use healthcare information for unrelated purposes without an appropriate legal basis or authorization.
Orvo provides technology that may be used by independent doctors, clinics, hospitals, laboratories, and other healthcare providers.
Where a healthcare provider uses Orvo to create or manage patient records, that healthcare provider may determine how patient information is collected, used, and managed for the purpose of providing healthcare services.
Healthcare providers may have their own privacy notices and policies. You should review the applicable healthcare provider’s privacy policy for information about how that provider handles your information.
Orvo may process such information on behalf of healthcare providers to provide and operate the Services.
Where enabled and where appropriate consent, authorization, or another lawful basis is required, Orvo may integrate with India’s Ayushman Bharat Digital Mission (ABDM) and related digital health services.
This may include processing information associated with:
Information exchanged through ABDM-enabled services is handled in accordance with applicable ABDM/NHA requirements and applicable law.
We do not sell your personal information.
We may share or provide access to information where reasonably necessary for providing and operating the Services, including with:
Information may be shared with doctors, clinics, hospitals, laboratories, or other healthcare providers when necessary to provide healthcare services or when authorized by the user or healthcare provider.
We may use third-party service providers for services such as:
These providers may process information only as necessary to provide services to Orvo or as otherwise permitted by applicable law.
We may disclose information when reasonably necessary to:
If Orvo is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.
We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, fulfill the purposes described in this Privacy Policy, comply with applicable legal and regulatory obligations, resolve disputes, enforce agreements, and protect the security and integrity of our Services.
Healthcare and medical records may be retained for longer periods where required by applicable law, regulatory requirements, contractual obligations, or where reasonably necessary for continuity of healthcare services.
When personal information is no longer required for the purposes for which it was collected, we may delete, anonymize, de-identify, or securely dispose of it, subject to applicable legal, regulatory, security, and operational requirements.
Deletion of an application from your device does not automatically delete information stored on our systems.
Where you request deletion of your account or personal information, we will process the request in accordance with applicable law and our legal and regulatory obligations. Certain information may need to be retained where retention is legally required or reasonably necessary for legitimate purposes such as fraud prevention, security, dispute resolution, accounting, or compliance.
We implement reasonable technical, administrative, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.
Depending on the nature of the information and the Services, these measures may include access controls, authentication mechanisms, encryption or secure transmission technologies, logging, monitoring, backups, and other security controls.
However, no electronic transmission, storage system, or method of security can be guaranteed to be completely secure.
Subject to applicable law, you may have rights to:
Users may exercise applicable account and data deletion rights directly through the Orvo Patient App using the account, profile, or settings section.
Users may also contact Orvo at [email protected] for assistance with privacy or data-related requests.
Certain requests may be subject to legal, regulatory, healthcare, contractual, or security requirements.
Users may request deletion of their Orvo account and associated personal information directly through the Orvo Patient App. The account deletion option is available within the account, profile, or settings section of the app.
When a user submits an account deletion request through the Orvo Patient App, Orvo will process the request in accordance with applicable law, regulatory requirements, and our data retention practices described in this Privacy Policy.
Account deletion may result in the deletion or anonymization of personal information associated with the account, subject to information that we are required or permitted to retain under applicable law, regulatory obligations, legitimate business purposes, security requirements, dispute resolution, accounting requirements, or other lawful purposes.
Healthcare and medical records may be subject to separate retention requirements. Where a medical record is maintained by or on behalf of a doctor, clinic, hospital, or other healthcare provider, certain records may need to be retained even after a user’s Orvo account is deleted. Such records may remain available to the applicable healthcare provider where required or permitted by law.
Deleting the Orvo application from your device does not constitute an account deletion request and does not automatically delete information stored on our systems.
Users may also contact us at [email protected] for assistance with account or data deletion requests.
Our websites and web-based Services may use cookies and similar technologies to:
You may be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of some Services.
Mobile applications may use similar technologies or device-level identifiers for functionality, security, analytics, and diagnostics.
Our Services are not intended to be used independently by children where applicable law requires parental or guardian involvement.
Where healthcare services are provided to a minor, information may be provided or managed by a parent, guardian, or authorized healthcare provider as permitted by applicable law.
We do not knowingly collect children’s personal information for unrelated purposes.
Our Services may integrate with or contain links to third-party services, websites, payment providers, communication providers, healthcare systems, or other services.
Third-party services operate under their own terms and privacy policies. Orvo is not responsible for the privacy practices of third parties that operate independently of Orvo.
Depending on the infrastructure and service providers used to operate Orvo, personal information may be processed or stored in locations other than the location where you access the Services.
Where information is transferred or processed outside India or your jurisdiction, we take reasonable steps to ensure that such processing is conducted in accordance with applicable law and appropriate contractual or security safeguards.
We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal requirements, or privacy practices.
When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.
Where required by applicable law, we may provide additional notice or obtain consent for material changes.
If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the handling of your personal information, please contact us:
Orvo Technologies Private Limited
Email: [email protected]
Website: orvo.app
For requests concerning access, correction, deletion, or other privacy rights, please include sufficient information to help us verify your identity and process your request.
By using the Orvo Services, you acknowledge that you have read and understood this Privacy Policy.
Where processing requires your consent, Orvo will seek such consent through appropriate mechanisms. You may withdraw consent where permitted by applicable law; however, withdrawal of consent may affect our ability to provide certain Services or features.
Effective Date: 3 October 2023
Last Updated: 28 August 2026