Auroksha is operated by Polytechnique Solutions LLP ("we", "us"), H.No 8-7-154, Flat No. 203, Providence Plaza, HAL Colony, Old Bowenpally, Secunderabad, Telangana – 500011, India. This policy is published under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is written to meet the Digital Personal Data Protection Act, 2023. By creating an account you consent to the processing described here; you can withdraw that consent at any time by deleting your account (see Your rights).
What data do we collect?
Account and profile
- Your name, email address, password (stored only as a bcrypt hash), and date of birth
- An optional phone number, and whether you have opted in to WhatsApp updates on it
- Optional blood group and allergies you add to your profile
- A profile picture, if you sign in with Google or upload one
- Your family vault's name, its members, and any dependents you add (their name, relationship, date of birth, blood group and allergies)
Health records and documents
- Medical records you enter — medications, prescriptions and visits, lab reports, hospital admissions, diagnoses and conditions
- Documents you upload (prescriptions, lab reports, certificates, insurance papers) and their file names
Billing, consent and technical data
- Your plan, payment amounts, payment and order references from Razorpay or Google Play, and GST tax invoices (your name and email appear on the invoice)
- A record of when you accepted this policy and the Terms, and that you confirmed you are 18 or older
- Server logs: IP address, time, and the address requested, used for security and troubleshooting
We do not collect location data, contacts, device advertising IDs or behavioural analytics.
What is encrypted on your device — and what is not
Encrypted before it leaves your device (we cannot read it)
Every medical record field, every uploaded document file and its file name are encrypted in your browser or the app using AES-256-GCM before they are sent to us. The server stores and returns ciphertext only. Documents uploaded before October 2026 were stored unencrypted; they are encrypted automatically on your device the next time you unlock your vault.
Vault PIN & Recovery Code
Your medical records are encrypted under a random data key that is itself wrapped by two independent keys: one derived from your 6-digit Vault PIN, and one derived from a 24-character Recovery Code shown to you once when you set up your vault. Both are derived via PBKDF2-SHA256 (600,000 iterations) with a per-user random salt, entirely on your device or in your browser — the server only ever stores the wrapped (encrypted) data key, never your PIN, your Recovery Code, or the encryption key itself in the clear. One vault, and one PIN, is shared by everyone in a family. The derived key is held only in memory for your session and is never sent over the network.
Not end-to-end encrypted (stored securely, readable by our systems)
- Your account and profile details listed above, including date of birth, blood group and allergies, and the same details for dependents — we need these to run your account and family
- For each document: its type, size, and upload date (not its contents or name)
- Billing records, consent records and server logs
These are protected by HTTPS in transit, access controls on our servers, and an audit log of every action taken by our administrators. Administrators cannot view your blood group or allergies, and cannot read any encrypted record or document.
Account security
Passwords are hashed using bcrypt. Sessions are stored server-side, tied to HTTP-only, SameSite=Lax cookies. All traffic uses HTTPS (TLS); HTTP is redirected to HTTPS.
How we use your data
- To provide the service: store and show your records, run your family vault, and let you share or print them
- To manage your subscription, take payments, and issue GST tax invoices
- To send service messages you need — welcome, trial and renewal reminders, payment receipts — by email, and by SMS or WhatsApp if you gave a phone number (WhatsApp only if you opted in)
- To keep the service secure and fix problems
- To meet legal obligations, such as tax record-keeping
We do not sell, rent or trade your data, use it for advertising, or use your health records to train AI models.
Service providers who process data for us
We share only what each provider needs to do its job:
- DigitalOcean — hosts our servers, database and file storage (your encrypted records and documents are stored there).
- Google — Google Sign-In, if you choose it (your name, email and profile picture); Google Play Billing, for in-app purchases on Android; Gmail, to send our service emails; and Gemini AI, only when you choose "Auto-fill with Gemini AI" for a document — that one document is then sent, unencrypted, to Google to read and pre-fill the form. You are asked each time, and every acceptance is recorded. If you decline, nothing is sent.
- Razorpay — processes web payments. We never see or store your card or bank details.
- Fast2SMS — delivers SMS and WhatsApp messages (your name and phone number).
Some of these providers may process data outside India, under their own security and confidentiality terms. We disclose data to government authorities only when Indian law requires it.
How long we keep data
- Account, profile, health records and documents: for as long as your account exists. When you delete your account, or reset your vault, they are deleted from our live systems immediately.
- Backups: our hosting backups are kept for up to 30 days, so deleted data disappears from every backup within 30 days of deletion.
- GST invoices and the payments behind them: kept for 72 months after the due date of the annual GST return for that year, as the CGST Act, 2017 requires — even after you delete your account. Only what the invoice needs (your name, email, plan and amounts) is kept.
- Records of your consent: for as long as your account exists.
- Server logs: 180 days, as CERT-In requires. Administrator audit log: 1 year.
Your rights
- Access and portability: view everything in the app, and export a full backup from Profile.
- Correction: edit any record or profile detail yourself at any time.
- Erasure and withdrawing consent: delete your account from Profile → Delete Account in the app or on auroksha.com, or at auroksha.com/delete-account (which also works if you can't log in). This deletes your account, health records, vault keys, family memberships and every uploaded file immediately; only the tax records described above are kept. If you've lost both your Vault PIN and your Recovery Code, a Vault Reset deletes your records and files so you can start again.
- Nomination: you may nominate someone to exercise these rights on your behalf if you die or become incapacitated, by writing to our Grievance Officer.
- Grievances: contact our Grievance Officer (below). If you're not satisfied with the response, you may approach the Data Protection Board of India once it is operational.
Children
You must be 18 or older to create your own Auroksha account. A parent or guardian can keep a child's records by adding them to their family as a dependent; by doing so, the parent or guardian consents to that processing on the child's behalf and is responsible for it. We don't knowingly let anyone under 18 hold their own account.
Cookies & session management
Auroksha uses a single session cookie (ak_session) to keep you signed in. It is HTTP-only, SameSite=Lax, and valid for 7 days from last activity. We use no tracking, advertising or third-party cookies.
If something goes wrong
If we become aware of a breach affecting your personal data, we will report it to CERT-In within 6 hours, and notify you and the Data Protection Board as the law requires, telling you what happened and what you can do.
Grievance Officer
Navneet Ponnala, Competent Authority
Polytechnique Solutions LLP
H.No 8-7-154, Flat No. 203, Providence Plaza, HAL Colony, Old Bowenpally, Secunderabad, Telangana – 500011, India
Email: info@polytechnique.in (subject: "Grievance")
We acknowledge every grievance within 48 hours and resolve it within one month. Write from your registered email address so we can verify it's you.
Changes to this policy
When we change this policy in a way that matters, we update the date below and ask you to read and accept the new version the next time you use Auroksha.
Last updated: 3 October 2026 · Effective: 3 October 2026