Privacy notice — Save with Jan Aushadhi

Effective ⚠ TO BE COMPLETED BEFORE PUBLISHING · Version 1.0

In short

• The app works without an account. If phone login is switched on, we hold your number and nothing else about you.
• Your phone is given a random device number. Area counts are kept against it — never a name, a number, or anything you search.
• Your exact location never reaches our servers. Distance to a Kendra is calculated on your phone.
• We store a pincode and a city. We do not store your address.
• What you search is never passed to an advertising network.
• Personalised advertising is off until you turn it on.
• You can wipe everything the app holds about you, from inside the app.

1. Who we are

Save with Jan Aushadhi ("the app") is published by Valuecreate Ventures LLP, CIN ⚠ TO BE COMPLETED BEFORE PUBLISHING, registered at ⚠ TO BE COMPLETED BEFORE PUBLISHING, India. In this notice "we" and "us" mean Valuecreate Ventures LLP. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described below.

We are an independent information service. We are not affiliated with, endorsed by, or operated by the Pradhan Mantri Bhartiya Janaushadhi Pariyojana (PMBJP), the Pharmaceuticals & Medicines Bureau of India (PMBI), or the Department of Pharmaceuticals.

2. What the app is for

The app tells you whether a Jan Aushadhi medicine exists with the same salts at the same strengths as a medicine you have been prescribed, what each costs, and where the nearest Jan Aushadhi Kendra is. It is an information service. It does not sell, dispense, deliver or prescribe medicines, and it is not a substitute for professional or medical advice.

3. What we collect, and why

3.1 If you never sign in

The app is fully usable without an account. In that state we collect:

3.2 Location

Location is asked for once, when you first open the app after the intro screens. You can refuse and type a pincode instead, or skip it entirely — search works either way, and you can change it any time in settings.

It is used for two things: to work out how far each Kendra is from you, and — counted against the device number in clause 3.5, at city level only — to see which areas need more Kendras mapped.

• Your coordinates are not sent to our servers, and we do not store them. The list of Kendras is on your device, and the distance to each one is computed on your device.
• Coordinates are held in your phone's local storage so that the list survives a restart. Clearing app data, or "Clear my data" in settings, removes them.
• If you give a pincode instead, we resolve it to an approximate centre point to sort the list. In that case we store the pincode and the city — never a street address, building, or exact position.
• The app will tell you when a pincode-based distance is approximate, and will offer the more accurate route. That prompt is a suggestion; you can decline it indefinitely.

3.5 The device number

When the app is installed, your phone generates a random number that identifies the installation, not you. It carries no name, no phone number, and nothing you search — search records are stored without it, precisely so the two cannot be joined.

What we keep against it is an area count: that an installation in a given city opened the Kendra locator. That tells us where to add Kendras and where the app is being used, and nothing more.

Reinstalling the app produces a new number and breaks the link to the old one. "Clear my data" in settings wipes what is on the phone but does not change the device number, and the app says so on that screen.

3.3 If phone login is enabled

Phone login is a setting we control centrally. In some releases and regions it is switched off entirely, and no account exists. Where it is switched on, before we send you a code you must separately agree to two things:

1. Required — these terms and this notice. Without this we cannot create an account.
2. Optional — sharing your mobile number with registered Jan Aushadhi Kendra partners so they can help you get your medicines. The app works fully without this. You can withdraw it at any time in your profile, with immediate effect.

Where login is enabled we collect:

We do not collect your name, email address, date of birth, gender, government identifier, prescription images, or any health record. We do not ask you what condition you have, and we do not infer it for any purpose other than showing you the result you asked for.

3.4 The one-time code SMS

If your phone grants the permission, the app reads the single SMS containing the login code so you do not have to type it. It reads only the code out of that one message, from our sender ID, and it does not read any other message on your phone. You can refuse the permission and type the four digits yourself.

4. Search terms, and why they are sensitive

A medicine name can imply a health condition. We treat search terms accordingly:

• Search terms are never passed to an advertising network, ad SDK, or any third party for advertising purposes.
• Advertising in the app is contextual — it is chosen by the screen you are on, not by what you searched.
• When a search returns nothing, we log the term without any identifier so we can add the medicine. That log is not joined to your number, your device identifier, or your location.
• We do not build a profile of your conditions, and we do not sell, rent or licence search data.

5. Advertising

The app carries advertising and sponsored Kendra placements. This is how it stays free.

• Personalised advertising is off by default. It turns on only if you switch it on in settings, and you can switch it off again at any time.
• With it off, advertising is contextual only, and no identifier is shared with an ad network for profiling.
• Every advertisement is labelled "Advertisement". Every paid Kendra placement is labelled "Sponsored · प्रायोजित" at the same size as the text around it.
• There is no advertising on a medicine comparison screen, inside a Learn article, or on a Kendra's own page.
• Sponsorship buys position in a list and nothing else. Real distance is shown on every listing, and you can re-sort by distance in one tap. A sponsored listing is never described as the nearest unless it is.

6. Who we share data with

We do not sell your personal data.

About Kendra partners. A Kendra partner is an independent business. Once your number has been shared with one at your request, that copy is in their records and under their control. Withdrawing consent stops any further sharing immediately, and we will tell them to stop contacting you, but we cannot retrieve a number they already hold. This is the one part of a deletion that is not reversible, and we would rather say so plainly than bury it.

7. Where data is stored

Data described in clause 3.3 is stored on servers in India operated by our hosting provider on our behalf, encrypted in transit and at rest. Location coordinates are not stored on any server.

8. How long we keep things

• Coordinates: not retained by us at all.
• Device number and area counts: 24 months, then deleted.
• Account data: until you delete your account.
• Consent records: retained after deletion only to the extent needed to prove that consent was properly obtained, then deleted.
• Unmatched search terms: retained without identifiers, aggregated, for catalogue planning.
• Diagnostics: 90 days.

9. Your rights

Under the DPDP Act you may:

• ask what personal data we hold about you and who we have shared it with;
• have inaccurate data corrected or completed;
• withdraw a consent you gave, as easily as you gave it;
• have your data erased, unless we are required to keep it;
• nominate someone to exercise these rights if you die or become incapable;
• complain to us and, if we do not resolve it, to the Data Protection Board of India.

How to use them. In the app: Profile → and the relevant control. Consent withdrawal and account deletion are available there directly. Or write to ⚠ TO BE COMPLETED BEFORE PUBLISHING. We respond within 30 days.

Deleting your account. You can start deletion inside the app, from your profile. There is also a page at https://savewithjanaushadhi.valuecreateventures.com/delete-account that works without signing in, for people who have already uninstalled the app. Deletion removes your number, your pincode and city, and your consent record. Clause 6 explains the one part we cannot undo.

Clearing everything on the device. Settings → Clear my data wipes recents, saved state, coordinates and preferences from the phone in one tap. It works whether or not you have an account.

10. Children

The app is not directed at children. If phone login is enabled, you must be 18 or older to create an account. We do not knowingly process the personal data of a child without verifiable parental consent, and we do not use children's data for advertising or tracking. If you believe a child has created an account, write to ⚠ TO BE COMPLETED BEFORE PUBLISHING and we will remove it.

11. Security

Data in transit is encrypted with TLS. Data at rest is encrypted by our hosting provider. Access to production data is limited to named staff who need it, over multi-factor authentication. We log administrative access. No system is perfectly secure; if a breach affects your personal data we will notify you and the Data Protection Board of India as the DPDP Act requires.

12. Prices, availability and accuracy

Prices, product codes, pack sizes, Kendra addresses and opening hours come from published sources and from our partners, and they change. The app shows you when its price data was last updated. We correct errors when we find them, but we cannot guarantee that a price or a stock position is current at the moment you reach a counter. Nothing in the app is medical advice, and no result is a prescription.

13. Changes to this notice

If we change how we handle your data we will update this notice, change the version at the top, and tell you in the app before the change takes effect. Where the law requires fresh consent, we will ask for it rather than assume it.

14. Contact

Valuecreate Ventures LLP, ⚠ TO BE COMPLETED BEFORE PUBLISHING General: ⚠ TO BE COMPLETED BEFORE PUBLISHING Grievance Officer: ⚠ TO BE COMPLETED BEFORE PUBLISHING, ⚠ TO BE COMPLETED BEFORE PUBLISHING