Intellectual Property

1. Introduction. Thrivana operates HabitNu in India under an exclusive license from HabitNu. We are committed to protecting your privacy and handling your data responsibly.

2. Scope. This policy explains how we collect, use, disclose, and safeguard personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA).

3. Data We Collect. We collect personal information, health and lifestyle data that you choose to share, and device and technical data 

4. How We Use Data. We use data to deliver programs, send reminders, personalize experience, analyze outcomes, and meet legal duties.

5. Consent. By using and registering for the Services on Website/App, you provide your consent to such sharing of the information provided by you. You may withdraw consent at any time by contacting our Data Protection Officer or deleting your account.

6. Storage and Retention. Data is stored in India. Data is encrypted in transit and at rest. Health data is retained up to five years after program completion. Account data is retained while the account is active and up to two years after closure. Backups are retained for ninety days.

7. Sharing. The information provided by you may be shared by us with any third party for providing the Services, record keeping purposes, internal procedures or for any other related purposes. We share data with authorized coaches and Indian service providers. We may disclose data to authorities as required by law. We do not sell or rent personal data for marketing.

8. Your Rights. You have the right to access, correct, erase, and withdraw consent. You may submit a grievance to the DPO.

9. Security. We use encryption, role‑based access, multi‑factor authentication, audits, and vulnerability assessments.

10. Contact. Data Protection Officer, Thrivana Health Pvt. Ltd., Bengaluru, India. Email: dpo@thrivana.in. Phone: +91‑XXXXXXXXXX.