Privacy Policy

Data Controller: Srav Health Pte. Ltd., 2 Venture Drive, 608526, Singapore

Email (privacy/data rights): priyanka@sravhealth.com

Email (support): priyanka@sravhealth.com

If you are in the EEA/UK, Srav Health acts as a data controller for your personal data. We may appoint an EU/UK representative where required.

This Policy covers personal data processed when you:

• browse our website or use the Srav Health app;
• create an account, complete assessments, receive a Personalized Plan;
• attend clinical consultations (video or in-person) with your care team, including any recordings or transcriptions made with your consent;
• receive clinical notes, protocols, diagnostic recommendations, or supplement prescriptions from your practitioners;
• have your health information shared between your care team members (lead practitioner, supporting practitioners, care coordinator, and reviewing GP) for the purpose of coordinated care;
• join programs (self-paced, coach-supported, group circles);
• attend events (webinars/workshops);
• message or book practitioners;
• track symptoms, habits, or cycle data through the app;
• receive emails, nudges, reminders, or participate in research/feedback.

We collect personal data that you provide directly, data generated by your use, and limited data from third parties.

We process personal data for:

We use cookies and SDKs to operate and improve the Platform. Categories:

• Strictly necessary (login/session, security).
• Functional (preferences, timezone).
• Analytics (e.g., GA4, privacy-safe configuration).
• Marketing/attribution (e.g., Meta Pixel, Firebase/Branch for deep links).

You can manage preferences via our Cookie Banner/Settings and your device settings. Some features require essential cookies.

We share data only with:

• Processors who help us deliver the service. Our current sub-processors are:

  Processor	Purpose	Data accessed	Data location
  Xano	Backend & database	All patient data — assessments, clinical notes, messages, protocols	US (AWS)
  Stripe	Payments	Email, name, payment metadata	US
  Vimeo	Consultation recording storage	Video/audio recordings of sessions	US
  Metered	Video call relay (TURN servers)	Encrypted media streams, IP addresses only — no access to content	Global (nearest node)
  Resend	Transactional email & OTP	Email addresses, names	US
  Calendly	Session scheduling	Name, email, appointment times	US

  This list is updated when sub-processors change. You may request the current list at any time by contacting priyanka@sravhealth.com.
• Your care team— your lead practitioner, supporting practitioners, care coordinator, and the reviewing GP all have access to your clinical notes, assessment data, and treatment protocol as part of coordinated care. You consent to this sharing during onboarding. Access is logged and role-based.
• Event co-hosts where clearly disclosed at registration.
• Legal authorities where required by law or to protect rights/safety.

We do not sell your personal data. We do not allow third parties to use your health data for ads.

We may process/store data in Singapore and other countries where we or our processors operate. Where required, we use safeguards (e.g., SCCs under GDPR) to protect your data across borders.

We keep data only as long as needed to provide the service and for legitimate business/legal purposes, then delete or anonymize it. Typical guidelines:

• Account & plan data: while account is active and for a reasonable period after closure (e.g., 12–24 months) unless you request earlier deletion where applicable.
• Transactions: 7 years (tax/audit).
• Support tickets: up to 24 months.
• Events/program chat: per program/event lifecycle, then archived/anonymized.

Depending on your location (PDPA/GDPR and similar), you may have rights to:

• Access your data;
• Correct inaccurate data;
• Delete your data (subject to legal holds);
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent at any time (this doesn't affect prior processing).

To exercise rights, contact priyanka@sravhealth.com. We may need to verify your identity. We will respond within 30 days (or the statutory period). You can also contact your local data protection authority.

The Platform is for users 18+. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to delete it.

We use administrative, technical, and organizational safeguards, including encryption in transit, role-based access, audit logs, and least-privilege access. No method is 100% secure; please use strong, unique credentials and keep them confidential.

Incident response: If we detect a data breach that poses risk to you, we will notify you and/or authorities as required by law.

Biometric authentication:If you choose to use Face ID to sign in, this is handled entirely by your device's operating system. The app does not access, collect, store, or process any biometric or face data.

Your website and app access use one shared account. Actions on one surface (e.g., enrollment, bookings, plan updates) may be reflected on the other.

If you engage a practitioner:

• They may view your relevant information (with your explicit consent) to support care;
• They are independent providers and must comply with Srav Health's policies and applicable law;
• Messaging and notes should remain within Srav Health for privacy.

You can revoke practitioner access by ending your care relationship (subject to legal/clinical retention norms).

Many events are recorded. If you register, you may receive access to a replay for a limited period. We ask participants not to share links publicly. Event chat/Q&A may be visible to co-hosts and used to improve content.

Our Platform may link to third-party sites. We are not responsible for their privacy practices. Please review their policies.

We may update this Policy from time to time. We will change the "Last Updated" date and, where required, notify you of material changes. Continued use of the Platform means you accept the updated Policy.

Questions or requests about this Policy or your data:

Srav Health Pte. Ltd.
Email: priyanka@sravhealth.com
Address: 2 Venture Drive, 608526, Singapore

For support: priyanka@sravhealth.com