Privacy Policy & Security Architecture

1. Our Core Commitment to Women's Privacy

WAFFA Health Technologies ("WAFFA", "we", "our", or "us") operates a dedicated women's wellness ecosystem. We recognize that menstrual cycles, reproductive health, mental wellness, and medical records represent some of the most sensitive personal data.

WAFFA will never sell, lease, or monetize your personal health information to third-party data brokers, advertisers, employers, or insurance agencies.

2. Technical & Security Infrastructure

3. Data We Collect & How It Is Used

• Account & Auth Information: Mobile phone number (used solely for SMS OTP authentication), optional display name or anonymous nickname, age bracket, and language preference.
• Health Tracker Logs: Cycle dates, ovulation indicators, symptoms, mood entries, sleep hours, water intake, and pregnancy milestones. This data is processed locally and in your encrypted vault to generate personalized health insights.
• Consultation Data: Text messages, voice notes, audio/video consultation records, and digital prescriptions generated by registered medical practitioners.
• Emergency SOS Data: GPS coordinates dispatched only upon explicit activation of the SOS button to your designated trusted contacts.

4. Doctor-Patient Confidentiality

All registered medical practitioners and certified specialists on WAFFA are legally bound by Indian Telemedicine Practice Guidelines, the Code of Medical Ethics Regulations, and professional confidentiality agreements. Only the doctor you consult has temporary clinical access to your shared consultation notes and medical history.

5. Anonymous Mode & Community Privacy

When participating in peer support rooms or submitting sensitive health/legal queries, users can enable Anonymous Mode. WAFFA masks your real identity with an auto-generated handle to ensure you can seek help without social stigma.

6. Data Ownership & Right to Erasure

You retain complete ownership over your health data. At any time, you can:

• Export your entire health and consultation history in PDF format.
• Request permanent account deletion and complete erasure of your health logs from our active databases.

7. Compliance & Regulatory Framework

WAFFA adheres strictly to the Digital Personal Data Protection (DPDP) Act, India, the Information Technology Act 2000, and the Telemedicine Practice Guidelines 2020 issued by the Ministry of Health and Family Welfare (MoHFW).