This Privacy Policy ("Policy"), as amended from time to time, explains the policy regarding the collection, use, disclosure and transfer of your information by ANH Technologies Private Limited and/or its subsidiary(ies) and/or affiliate(s) doing business as ClaimTherapist (“ClaimTherapist”, “we”, “us”, or “our”) (collectively referred to as the "Company"), which operates various websites, including sub-sites, Platform, mobile applications, m-web Platform and other Platform (collectively referred to as "Platform") for delivery of insurance management facilities, information, products, offerings and content via any mobile or internet connected device or otherwise (collectively the "Services").

This Policy sets out the privacy practices of the Company with respect to the entire content of the Platform which includes this mobile application. The Platform is owned and operated by ANH Technologies Private Limited, a company incorporated in India under the Companies Act, 2013.

User (“User”) or You ("You") means any hospital who access or avail this Platform of the Company for the purpose of hosting, publishing, sharing, transacting, displaying or uploading information or views and the person/patient who has shared their information with the Company.

This Policy forms part and parcel of the Terms of Use and other terms on the Platform ("Terms of Use"). Capitalized terms which have been used here but are undefined shall have the same meaning as attributed to them in the Terms of Use. This policy is effective from the date and time a User registers with Platform and accept the terms and conditions laid out in the Platform. Please read this Privacy Policy and our Terms of Use carefully before using our Services.

This Privacy Policy may be subject to further changes including as may be warranted by change in law. Upon updating the Policy, we may revise the "Updated" date at the bottom of this Policy. We therefore request you to go through our Privacy Policy frequently to be updated with changes incorporated from time to time. Your continued engagement with us will imply your acceptance of such updates to this Policy.

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy, or our practices with regards to your information, please contact us at compliance@claimtherapist.com.

The Information about the User as collected by the Company is: (a) information supplied by Users and (b) information automatically tracked while navigation (“Information”). Information may also include Sensitive Personal Data (“SPDI”) defined under Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“the SPDI Rules”) which includes

• password;
• financial information such as Bank account or credit card or debit card or other payment instrument details;
• physical, physiological and mental health condition;
• sexual orientation;
• medical records and history;
• Biometric information;
• any detail relating to the above clauses as provided to the Company for providing Service; and
• any of the information received under above clauses by the Company for processing, stored or processed under lawful contract or otherwise.

By using the Platform or its Services, you consent to the collection, storage, use, transfer, share and distribution of the Information you provide (including any changes thereto as provided by you) for any of the services that we offer.

In this Policy, we seek to explain to you in the clearest way possible what Information we collect, how we use it and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this Policy that you do not agree with, please discontinue the use of our Platform and our services.

This Policy applies to all Information collected through our Platform (such as this mobile application), and/or any related services, sales, marketing or events (we refer to them collectively in this Policy as the "Services").

Please read this Policy carefully as it will help you make informed decisions about sharing your Information with us.

1. APPLICABILITY

The terms of this Privacy Policy are applicable to all individuals and entities that visit, access and/ or avail of our services via the Platform from whom we collect information, including healthcare providers, corporate clients and employees of corporate clients.

2. INFORMATION RECEIVED, COLLECTED AND STORED BY THE COMPANY

A. Information Supplied By Users

Registration data

We collect Information that you voluntarily provide to us when registering at the Services expressing an interest in obtaining information about us or our products and services, when participating in activities of the Services or otherwise contacting us.

The Information that we collect depends on the context of your interactions with us and the Services, the choices you make and the products and features you use. The Information we collect can include the following:

Publicly Available Personal Information

Personal Information means any information that relates to or identifies you and/or your family members and/or your dependents and may include first name, maiden name, last name, and nickname; ID; phone numbers; email addresses; birth, marriage, divorce, and death records; family member names and their related information; Insurance Policy; Insurance Claim; and other similar data.

Further, you would be required to give us certain Sensitive Personal Data or Information about you and/or your family members and/or your dependents. Sensitive Personal Data or Information shall mean such Personal Information which consists of information relating to

• Financial information such as bank account or any other payment instrument details;
• Physical, physiological and mental health condition;
• Medical records and history; and
• sexual orientation;
• Any detail relating to the above

We inform you that our Platform may collect certain Personal Information and/or Sensitive Personal Data or Information about you and/or your family members and/or your dependents such as medical and health records including but not limited to your prescription, test reports, past medical history, data held by a hospital or doctor etc.

Personal Information Provided by You

We collect data about app usage; data collected from surveys; insurance policy purchase history; financial information (bank account, claim history, invoices); and other similar data.

While using our Platform, you may also be required to give us access to few files available on your device. We may use your photo gallery or camera only to facilitate the uploading of documents or files in a certain flow but we will not access information without your express consent. You have the option not to provide us with consent or to subsequently revoke consent of your device's camera / file and folders for our use.

On receipt of express consent from the User, we collect certain information limited to User's name, email id and phone number provided by the User while installing and using the ClaimTherapist mobile app. We do not store any payment details including but not limited to net banking, Credit card or Debit card details.

Social Media Login Data

We may provide you with the option to register using social media account details, like your Google, Facebook, Twitter or other social media account. If you choose to register in this way, we will collect the Information described in the section called "Third Party Social Media Account Details” below.

All Information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such Information.

3. INFORMATION AUTOMATICALLY COLLECTED/ TRACKED WHILE NAVIGATION

Cookies

To improve the responsiveness of the Platform for our Users, we may use "cookies", or similar electronic tools to collect Information to assign each visitor a unique, random number as a User Identification (User ID) to understand the User's individual interests using the identified device. Unless you voluntarily identify yourself (through registration, for example), we will have no way of knowing who you are, even if we assign a cookie to your device.

The only information a cookie can contain is Information you supply. A cookie cannot read data off your device. Our advertisers may also assign their own cookies to your browser (if you click on their ads etc.), a process that we do not control. We receive and store certain types of Information whenever you interact with us via Platform or Service though your mobile/tablet/pad/handheld device etc.

We also use "Cookies" to allow you to enter your password less frequently during a session. Most "Cookies" are "Session Cookies", meaning that they are automatically deleted from your hard drive at the end of a session. You are free to decline our "Cookies" if your browser permits you to do so, although we strongly recommend that you allow them to ensure you have access to all of our services.

Log File Information

We automatically collect certain Information when you visit, use or navigate the Services. This Information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services and other technical information. This Information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Online Identifiers

We collect devices; tools and protocols, such as IP (Internet Protocol) addresses; cookie identifiers, or others such as the ones used for analytics and marketing; device's geolocation; applications; and other similar data.

Opting Out

Advertisements

To opt-out of interest-based advertising by advertisers on our Services visit http://www.aboutads.info/choices/.

4. INFORMATION FROM OTHER SOURCES

We may obtain Information about you from other sources, such as public databases, joint marketing partners, social media Platform (such as Facebook), as well as from other third parties, add it to our account Information and treat it in accordance with this Policy. Examples of the information we receive from other sources include: social media profile information (your name, gender, birthday, email, current city, state and country, User identification numbers for your contacts, profile picture URL, and any other information that you choose to make public); marketing leads and search results and links, including paid listings (such as sponsored links). We will inform you about the source of Information and the type of Information we have collected about you within a reasonable period after obtaining the data, but at the latest within one month.

Google Maps APIs

This mobile application, or Facebook application uses Google Maps APIs. You may find the Google Maps APIs Terms of Service here. To better understand Google’s Privacy Policy, please refer to this link.

By using our Maps API Implementation, you agree to be bound by Google’s Terms of Service. You agree to allow us to obtain or cache your location. You may revoke your consent at any time. We use Information about location in conjunction with data from other data providers.

Third Party Social Media Account Details

Our Services offer you the ability to register and login using your third party social media account details (like your Facebook or Twitter logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, e-mail address, friends list, profile picture as well as other Information you choose to make public.

We will use the Information we receive only for the purposes that are described in this Policy or that are otherwise made clear to you on the Services. Please note that we do not control, and are not responsible for, other uses of your Information by your third party social media provider. We recommend that you review their Policy to understand how they collect, use and share your Information, and how you can set your privacy preferences on their Platform and apps.

Any personally identifiable Information provided by you will not be considered as sensitive if it is freely available and/or accessible in the public domain like any comments, messages, blogs, scribbles available on social platforms like Facebook, Twitter etc.

Any posted/uploaded/conveyed/communicated by users on the public sections of the Platform becomes published content and is not considered personally identifiable Information subject to this Policy.

5. INFORMATION USED BY THE COMPANY

We use the Information collected via our Services for a variety of business purposes described below. We process your Information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

In case you choose to decline to submit personally identifiable Information on the Platform, we may not be able to provide certain services on the Platform to you. We will make reasonable efforts to notify you of the same at the time of opening your account. In any case, we will not be liable and or responsible for the denial of certain services to you for lack of you providing the necessary Information.

Account Creation and Login Process

If you choose to link your account with us to a third-party account (such as your Google or Facebook account), we use the Information you allowed us to collect from those third parties to facilitate account creation and login process for the performance of the contract. See the section above headed "Third Party Social Media Account Details" for further information.

Administrative Information

We may use your Information to send you the product, service and new feature information and/or information about changes to our terms, conditions and policies, and to operate and improve the Platform.

Insurance Claims

We may use your Information to fulfill and manage your healthcare service provider selection, admission, billing, claims, documents, and exchanges made through the Services.

Targeted Advertising

We may use your Information to develop and display content and advertising (and work with third parties who do so) tailored to your interests and/or location and to measure its effectiveness.

Request Feedback

We may use your Information to request feedback and to contact you about your use of our Services.

Protection of our Services

We may use your Information as part of our efforts to keep our Services safe and secure (for example, for fraud monitoring and prevention).

Enforcement of our Terms, Conditions and Policies

To enforce our terms, conditions and policies for Business Purposes, Legal Reasons and Contractual Reasons.

Manage User accounts

We may use your Information for the purposes of managing our account and keeping it in working order.

Deliver Services

We may use your Information to provide you with the requested service.

Third-Party Communication Services

We may use your information:

To contact the customer via phone, SMS, email or third-party communication services such as WhatsApp, etc.

To send promotional and marketing emails from ClaimTherapist or any of our channel partners via SMS, email, snail mail or third-party communication services such as WhatsApp, Facebook etc.

User Inquiries/Support

We may use your Information to respond to your inquiries and solve any potential issues you might have with the use of our Services.

Academic and Research Purposes

We may use your Information to perform academic/studies, clinical or other research and analysis for our understanding, information, analysis, services and technologies in order to provide all Users with improved quality of care; and to ensure that the content and advertising displayed are customized to your interests and preferences.

Legal Requirements

We may use your Information:

To respond to subpoenas, court orders, or legal processes, or to establish or exercise ClaimTherapist’s legal rights or defend against legal claims.

To investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of ClaimTherapist’s Terms of Use, breach of ClaimTherapist’s agreement with the User or as otherwise required by law.

Other Business Purposes

We may use your Information for other Business Purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Services, products, marketing and your experience. We may use and store this Information in aggregated and anonymised form so that it is not associated with individual end users and does not include personal Information. We will not use identifiable personal Information without your consent.

6. ACCESS

You may be given the privilege to upload and store medical and health records of your and/or your family members and/or your dependents on our Platform to which only you shall have access to by using your unique login credentials. This will help you have access to medical and health records of your and/or your family members and/or your dependents.

If you need to access your Sensitive Personal Data or Information, update or correct such information for any reason, you may do so by logging into the Platform and / or writing to us at support@claimtherapist.com, and your Sensitive Personal Data or Information will accordingly be updated / corrected.

In the event you wish to know the names and addresses of the third parties your Information has been disclosed to, you may request us for such information by writing to us at support@claimtherapist.com. We will make all reasonable efforts to revert to you within a reasonable period of time, with the information that you require.

7. MANNER OF COLLECTION OF INFORMATION

We collect Information in the following manner in order to facilitate the Services seamlessly. Users hereby consent to the collection of following information by ClaimTherapist:

Images / PDF / Files Access Permission

To upload and store necessary health documents. This is an action performed by the User.

Camera Permission

To capture a picture of records or upload such records and store it under User’s CT profile.

Storage Permission

To show/access User’s files uploaded by the User in Users phone.

SMS Permission

To support automatic OTP confirmation, so that you don't have to enter the authentication code manually.

Receive SMS Permission

This helps ClaimTherapist to send the User reminders, claim status related SMS.

Access Wifi State Permission

This helps ClaimTherapist to optimise Users' experience based on the Wifi's strength and signals.

Phone, Microphone Permission

This will allow Users to call and connect with ClaimTherapist’s health experts.

8. CONSENT

By providing us your and/or your family members and/or your dependents information, you hereby:

• consent to the collection, storage, disclosure, processing and transfer of such information for the purposes as disclosed in this Policy and
• represent that you have taken the necessary consents from such persons to provide us with such information. You are providing the information out of your free will. You have the option not to provide the data or Personal Information / Sensitive Personal Data or Information (as defined below) sought to be collected if you do not agree with this Policy. Medical records and history; and

You can stop all collection of information by the mobile application easily by uninstalling the mobile application from your device. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application.

Further, you will have the option to not provide your consent, or withdraw any consent given earlier, provided that the decision to not provide consent/withdrawal of the consent is communicated to us at support@claimtherapist.com.

9. INFORMATION SHARING

We may process or share data based on the following legal basis:

Consent: We may process your data if you have given us specific consent to use your Information for a specific purpose.

Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.

Performance of a Contract: Where we have entered into a contract with you, we may process your Information to fulfill the terms of our contract.

Provision of Services: We shall share such information with our full time employees and associates on a need to know basis for the purpose of enabling the Company to provide the necessary services to you;

With our empaneled healthcare providers on a 'need to know' basis for the purpose of enabling the Company to provide the necessary services to you; and

With our associates or affiliates should the Company decide to undergo restructuring in anyway or is acquired by any other entity and ensure that in such an event the other entity continues to follow this policy strictly.

Legal Obligations: We may disclose your Information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

Vital Interests: We may disclose your Information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process your data or share your Information in the following situations:

Healthcare Service Providers, Vendors, Consultants and Other Third-Party Service Providers

We may share your data with healthcare service provider, third party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such Information to do that work. We may allow selected third parties to use tracking technology on the Services, which will enable them to collect data about how you interact with the Services over time. This Information may be used to, among other things, analyze and track data, determine the popularity of certain content and better understand online activity. Unless described in this Policy, we do not share, sell, rent or trade any of your Information with third parties for their promotional purposes.

Business Transfers

We may share or transfer your Information in connection with, or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Third-Party Advertisers

We may use third-party advertising companies to serve ads when you visit the Platform. These companies may use Information about your visits to our Platform(s) and other websites that are contained in web cookies and other tracking technologies in order to provide advertisements about goods and services of interest to you.

Business Partners

We may share your Information with our business partners to offer you certain products, services or promotions.

10. TIME PERIOD OF STORAGE OF INFORMATION

We will only keep your Information for as long as it is necessary for the purposes set out in this Policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). No purpose in this policy will require us keeping your Information for longer than 2 years past the termination of the User's account.

When we have no ongoing legitimate business need to process your Information, we will either delete or anonymise it, or, if this is not possible (for example, because your Information has been stored in backup archives), then we will securely store your Information and isolate it from any further processing until deletion is possible.

11. INFORMATION SECURITY

We have stringent, strong, security measures undertaken to ensure against the loss, misuse or alteration of Personal Information and/or Sensitive Personal Data or Information about you and/or your family members and/or your dependents with us. We shall take all necessary precautions to safeguard your information and protect it from any unauthorized use. We have SSL Certificate issued by trusted certification authority and other safety measures in place to guard your information with us against any theft or unlawful usage or modification thereof. The Information Security Management System of the Company conforms to the ISO 27001:2013 standard.

However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your Information, transmission of the Information to and from our Services is at your own risk. You should only access the services within a secure environment.

12. SENSITIVE PERSONAL DATA

Business Partners

SPDI may be disclosed to government authorities mandated under law to obtain Information for the purpose of verification of identity or for prevention, detection, investigation without obtaining the consent of the Users.

Option to Withdraw Consent

The User can withdraw its consent by informing the Company in writing.

13. PRIVACY RIGHTS

If you are resident in the European Economic Area and you believe we are unlawfully processing your Information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you have questions or comments about your privacy rights, you may email us at compliance@claimtherapist.com.

14. ACCOUNT INFORMATION

If you would at any time like to review, rectify or change the Information in your account or terminate your account, you can:

• Log into your account settings and update your User account.
• Contact us using the contact information provided.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with legal requirements.

Email Marketing

You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list – however, we will still need to send you service-related emails that are necessary for the administration and use of your account. To otherwise opt-out, you may:

• Contact us using the contact information provided.

15. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Policy.

16. UPDATES

We may update this Policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Policy frequently to be informed of how we are protecting your information.

17. CONTACT

If you have questions or comments about this policy, you may email us at compliance@claimtherapist.com or by post to:

ANH Technologies Private Limited

Flat no. 406, Udyog Vihar Phase 3 Rd

Sector 20

Gurugram, Haryana 122016

India

18. REVIEW, UPDATE, DELETION OF DATA

Based on the laws of some countries, you may have the right to request access to the Information we collect from you, change that Information, or delete it in some circumstances. To request to. We will respond to your request within 30 days.

19. GOVERNING RULES AND LAW

If you choose to visit our Platform, your visit/use and any dispute over privacy is subject to this Policy and the Sites's terms of use. In addition to the foregoing, any disputes arising under this Policy shall be governed by the laws of India.

under this Policy shall be governed by the laws of India. This Policy is compliant with the provisions of all applicable Indian laws including but not limited to the Information Technology Act, 2000 and related Rules made thereunder including any modifications or amendments made thereto. ClaimTherapist may make necessary changes to this Policy consequent upon any changes or modifications in the law. It is hence imperative that you frequently read this Policy to keep yourself updated of any changes made by us.

20. MISCELLANEOUS

Indemnity: Users agree and undertake to indemnify ClaimTherapist in any suit or dispute by any third party arising out of disclosure of information by you to third parties either through our Platform or App or otherwise and your use and access of websites, applications and resources of third parties. ClaimTherapist assumes no liability for any actions of third parties with regard to your personal information or SPDI which you may have disclosed to such third parties.

Severability: Each clause of this Policy shall be and remain separate from and independent of and severable from all and any other clauses herein except where otherwise expressly indicated or indicated by the context of the Policy. The decision or declaration that one or more clauses are null and void shall have no effect on remaining clauses of this Policy.

21. QUESTIONS / GRIEVANCE REDRESSAL

Redressal Mechanism: Any complaints, abuse or concerns with regards to the use, processing and disclosure of Information provided by you or breach of these terms should immediately be informed to the designated Grievance Officers (the list of respective grievance officers is being provided in Terms of Use) in writing or through email signed with the electronic signature to heena.batra@claimtherapist.com or Heena Batra ("Grievance Officer").

This Policy is subject to changes. Please periodically review this page for the latest information on our privacy practices.