Data & Privacy Policy

Tvarvi Private Limited ("Tvarvi", "we", "us") operates the Tvarvi app and website, an integrative care platform for women with PCOS. For the personal data we process about you, Tvarvi is the Data Fiduciary. You are the Data Principal.

Grievance Officer & Data Protection contact: Aditya Bhardwaj, Grievance Officer & Data Protection Contact - aditya@tvarvi.com, +91 99920 30855.

Account details: your name, email address and mobile number, provided when you sign in (Google, Apple, email or phone) and when we verify your identity.

Profile information: age, height, weight, city, pincode, address and profession you enter to personalise your care and arrange sample collection.

Health information: menstrual cycle dates, daily sleep/energy/stress check-ins, symptom assessments, PCOS score, medications, uploaded documents, lab results, and notes shared with your care team. This is sensitive personal data and we treat it accordingly.

Care & appointment data: consultations you book, the practitioners assigned to you, and your progress through your care plan.

Payment data: we use Razorpay to process payments. Your card/UPI details go directly to Razorpay - Tvarvi does not store them. We keep a record of the transaction (amount, item, status).

Technical & usage data: device and app information needed to operate and secure the service, analytics (see Cookies below), and - with your permission - a push-notification token.

We use your information to:

• deliver and personalise your care plan, cycle insights, diagnostics and reminders;

• enable consultations with your care team (gynaecologist, nutritionist, diagnostics, counselling psychologist, yoga);

• arrange at-home sample collection and return your results;

• process payments for services you choose;

• communicate with you about your care (service messages), and - only if you opt in - send tips and offers;

• keep the service secure, prevent misuse, and comply with law.

Free PCOS check: when you sign in with Google to see your result, your answers and score are saved to your account so you can see your result anytime, and are used for that alone. If you go on to give the required consent for Tvarvi care, your latest result becomes part of the health information your care team sees.

We process your health information on the basis of the consent you give at sign-up and in the app. It is essential to providing care - if you withdraw it, we can no longer provide the service (see Your rights).

We do not sell your personal or health information, and we do not use it for third-party advertising.

We share your health data only with your care team, and no one else. In this policy, your “care team” means the Tvarvi practitioners assigned to you and our lab partner, Thyrocare, which collects and tests your sample (see below).

We share your profile and relevant health information with the Tvarvi practitioners assigned to you - your gynaecologist, nutritionist, counselling psychologist, yoga instructor and diagnostics coordinator - so they can deliver coordinated care. You consent to this by category at sign-up, and we tell you the name of each practitioner when they are assigned to you (visible under Profile → Consent & data).

When you book a lab test, we share your name, contact number, address, pincode and the requested tests with Thyrocare, our NABL-accredited diagnostics partner, so they can collect your sample at home and process it. Thyrocare returns your results to Tvarvi. This consent is part of the required tick you give at sign-up or when you book your Assessment; if you joined before it was included, we ask you once when you book a home test.

Service providers (Data Processors) who process data on our behalf under contract: Google Firebase (authentication, database, hosting), Razorpay (payments), and messaging/analytics providers listed below. They may only use your data to provide their service to us.

We may disclose information if required by law, regulation or valid legal process, or to protect the rights and safety of our users and the public.

Your data is stored on Google Firebase infrastructure and transmitted over encrypted connections. We apply reasonable security practices and procedures as required by the SPDI Rules, and restrict access to those who need it to provide your care. Some of our processors (e.g. Google) may store or process data on servers outside India; where they do, we rely on their contractual and security commitments to protect it.

We keep your information for as long as your account is active or as needed to provide your care. When you delete your account:

• You are signed out, and for 14 days you can restore your account simply by signing back in.

• After 14 days your account is closed and your app activity data (usage analytics, device and notification data, marketing preferences, the list of friends you invited) is deleted.

• Your health records (lab reports, consultation notes, prescriptions, care plans, chats with your care team, health logs, consent history and the referral code you joined with) are kept securely and locked for 3 years, as medical-records rules require. We email you 48 hours before they are permanently deleted.

• Payment records, including any Tvarvi referral credit, are kept for 8 years, as tax law requires, and then deleted.

Access & correction: view and update your profile in the app any time, or ask us to correct information by emailing the Grievance Officer.

Manage consent: review and change your consents - including turning off marketing/WhatsApp - from Profile → Consent & data. Withdrawing consent is as easy as giving it.

Withdrawing essential consent: health-data, care-team and lab-partner sharing (the required tick) are essential to the service. If you withdraw them, we can no longer provide care - this is done by deleting your account.

Deleting your account: from Profile → Delete account. You can restore it by signing back in within 14 days; after that, your data is kept and deleted as described under Data retention.

Nomination: under the DPDP Act you may nominate another individual to exercise your rights in the event of death or incapacity - contact the Grievance Officer to do so.

Grievances: contact our Grievance Officer (above). If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

We send you service messages (appointment confirmations, results, care updates) as part of providing the service. Separately, and only if you opt in, we send educational content, product updates and offers by email and/or WhatsApp. These are optional and off by default - you can opt in or out any time from Profile → Consent & data or via the unsubscribe link in our emails.

We use Google Analytics 4 and Microsoft Clarity to understand how the site is used and improve it. These set cookies/identifiers and collect usage data. You can control cookies through your browser settings. We do not use these for third-party advertising.

Tvarvi is intended for adults (18+) seeking PCOS care and is not directed to children. We do not knowingly collect data from children.

We may update this policy from time to time. We will post the updated version here with a new "last updated" date, and - where the change is material - ask you to review your consents again.

Questions about your privacy? Email aditya@tvarvi.com or write to Tvarvi Private Limited, 242/2, Old Delhi Road, Gurgaon, Haryana 122007.