Tuvy Privacy Policy
This policy covers the Tuvy app (families/patients), the Tuvy Provider app (care professionals), and the Tuvy web/ops services.
1. Who we are and what Tuvy does
Tuvy arranges and manages in-home elder care: families onboard a care recipient and track visits; vetted care professionals deliver visits and record health observations. Delivering that service requires us to process personal and health information.
2. Information we collect
We collect only what's needed to run the service. We do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites. From families / patients (Tuvy app):
- Contact information — names (subscriber, care recipient, responsible party,
emergency contacts), phone numbers, home address, and email (if provided).
- Health information — the care recipient's conditions, medications,
allergies, blood group, vitals, and health-journal check-ins.
- Sensitive information — the health data above, and a face photograph
enrolled for the care recipient. A face scan is required at the start of a home visit, and can be taken either on your own device or on the caregiver's handset when yours is unavailable; we record which device it came from. Today this scan confirms only that a face is present in the picture. It does not match the face against the enrolled photograph, and it does not detect whether the face is a live person rather than a photograph. We will update this policy before either changes.
- Precise location — the care recipient's home location (geo-coordinates) to
enable caregiver check-in.
- User content — photos, optional voice notes, and free-text you add to the
health journal or documents.
- Subscription information — your plan and status. **Payment card details are
entered on our payment providers' hosted checkout and are never collected or stored by the app.** From care professionals (Tuvy Provider app):
- Contact information — name, phone number, home/base address.
- Identity & credentials — government ID, professional qualifications, and a
face photograph enrolled at application. A face scan is required at the start of every visit. Today that scan confirms only that a face is present in the picture: it does not match against the enrolled photograph, and it does not detect whether the face is a live person rather than a photograph. We will update this policy before either changes.
- Financial information — bank account, IFSC, and PAN, used **solely to pay
you** (payouts).
- Precise location — including background location during an active visit
so families can see real-time arrival. We do not collect your location when no visit is in progress.
- Health information — the patient vitals/observations you record on a visit.
- User content — uploaded ID/credential documents and profile photo.
Automatically (both apps):
- Identifiers — a Tuvy account ID and a push-notification token (to send
you notifications).
3. How we use your information
Only for app functionality and delivering the care service:
- create and manage your account; match care recipients with caregivers; schedule,
verify, and track visits; record and share health updates within your care circle; process subscriptions and caregiver payouts; send service notifications; provide support; and meet legal, safety, and regulatory obligations. We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.
4. How we share information
- Within your care circle — a care recipient's information is shared with the
family members you invite and the assigned care professional, per the visibility you grant.
- Service providers (processors), under contract: Google Firebase / Google
Cloud (authentication, database, storage, push, hosting), Twilio (SMS one-time codes), and Razorpay / Stripe (payments and payouts). They process data on our behalf and are not permitted to use it for their own purposes.
- Clinical exports to a doctor — our operations staff can generate a PDF of a
care recipient's recorded vital signs so it can be given to a treating doctor, covering the last 90 days unless a different period is requested. Only operations staff can do this; care circle members and care professionals cannot. Every export is recorded — who produced it, for which care recipient, over what date range, and when — and the download link stops working after 48 hours. Once the file has been opened and saved by whoever receives it, that copy is outside Tuvy's systems and the protections described in this policy no longer apply to it.
- Legal & safety — where required by law or to protect the safety of a care
recipient or others.
- We do not sell data or share it with advertisers or data brokers.
5. International transfers
Tuvy operates from India and hosts data on Google Cloud. **Your information — including health information about the care recipient — is stored and processed on Google Cloud servers in the United States (region us-central1, Iowa),** not in India. This is true whether you use the service from India or elsewhere. We do this under appropriate contractual safeguards with Google Cloud as our processor. If you would prefer your data to be held in India, contact us at the address below.
6. Data retention
We keep information for as long as your account is active and as needed to provide the service, then delete or anonymize it, except where longer retention is required for legal, tax, safety, or dispute-resolution reasons. See account deletion below. A clinical export (section 4) is kept as a file in our storage so that the record of what was disclosed survives the disclosure; the record of the export itself is kept for two years alongside our other audit records. A copy that someone has already downloaded cannot be recalled or deleted by us.
7. Security
We protect data with encryption in transit and at rest, and **health information is additionally encrypted at the field level (AES-256-GCM)** before storage. Access is restricted by role-based controls. No system is perfectly secure, but we work to protect your information and to notify you of incidents where required.
8. Your rights and choices
Depending on your location (including India's DPDP Act and, where applicable, GDPR/UK GDPR), you may:
- Access, correct, or export your information;
- Withdraw consent or object to certain processing;
- Delete your account and data. You can do this yourself in the app:
- Tuvy: Profile → Delete account. - Tuvy Provider: Profile → Delete account. This permanently deletes your account and associated personal data (some records may be retained where legally required, as described above). To exercise any right, contact admin@tuvy.health. You may also raise a grievance with our Grievance Officer at the contact above.
9. Children
Tuvy is not directed to children. Care professionals and account holders must be 18 or older. Care-recipient information is provided by an authorized adult family member.
10. Changes to this policy
We'll post updates here and revise the "Last updated" date; material changes will be communicated in-app or by other appropriate means.
11. Contact
tuvy inc · admin@tuvy.health