Legal & Privacy

Privacy Policy

Effective date: 16 September 2026

Applications covered

1. Our role

For data collected directly by SilicoSoft for our own purposes, such as website enquiries, customer support, security and service administration, SilicoSoft may determine why and how that information is processed.

For enterprise deployments, the subscribing hospital, employer, educational institution or other customer generally determines the business purpose of processing. In those cases, SilicoSoft normally processes data on that organisation's instructions as its technology/service provider.

2. Personal data that may be processed

CategoryExamplesTypical purpose
Identity and contact dataName, identifiers, email, phone, organisation, designation, patient/student/employee details.Registration, account administration, communication and workflows.
Healthcare dataPatient registration, appointments, clinical/diagnostic information, reports, treatment and hospital workflow data.SilicoMed and healthcare functions where enabled.
Workforce and HR dataEmployee profile, attendance, roster, leave, payroll-related records, work allocation, performance and documents.Asarfi HRMS and HR workflows.
Education dataStudent profile, admission, attendance, academics, examinations, fees and institutional records.Education Management Software workflows.
CRM, field-sales and visit dataEmployee/field-user profile, agencies, visit plans, visit codes, visit dates, targets, products, remarks, Start/Stop GPS and turnaround times.ArogyaVeer CRM, field-sales, visit and DSR workflows.
ArogyaVeer attendance dataPunch In/Out times, GPS coordinates, periodic live location while punched In, and low-resolution front-camera attendance selfies.Attendance verification, workforce accountability and authorised manager visibility.
Ambulance and transport dataPatient/contact information, pickup and destination details, ambulance/crew assignment, trip status, emergency details and timestamps.RakshaRath ambulance coordination.
Location dataPickup location, vehicle/device location or route information where the relevant feature is enabled.Ambulance dispatch, routing and location-dependent functions.
Account and technical dataLogin events, OTP/authentication status, IP address, device type, app version, crash, security and audit logs.Security, reliability and troubleshooting.
Files and permissionsCamera, photos/files, notifications, location or other device permissions where required by a feature.Only for the relevant enabled feature.

3. Product-specific notices

Education Management Software

May process student admission and profile information, attendance, academics, examinations, fees, faculty/staff information and related institutional records where those modules are enabled.

SilicoMed™ — Hospital Management System

May process patient registration, appointment, clinical, diagnostic, pharmacy, billing, insurance/TPA, discharge, document, authentication and operational information where those functions are enabled. Health information must be handled only for authorised healthcare and related operational purposes.

ArogyaVeer™ — Marketing CRM Management / CRM & Sales Booster Field App

ArogyaVeer is a field-sales CRM used by employers to manage agency visits, visit plans, products and field attendance for authorised employees. It may process employee ID, name, email, phone, role, unit/territory, device/session information, visit/DSR records, attendance Punch In/Out data, GPS coordinates, periodic live location and attendance selfies.

Location: Location is required for the field app. Visit Start/Stop captures GPS at the time of the action. After Punch In, ArogyaVeer sends periodic location updates approximately every 3 minutes, including while the app is in the background, so authorised reporting managers/Admin can view live field presence. Punch Out stops continuous attendance location tracking. Android may use foreground/background location with a persistent notification; iOS may request Always location access during an active Punch In.

Camera and selfies: The front camera is used for Punch In and Punch Out attendance selfies. Selfies are compressed to low-resolution JPEGs, are used as operational proof of presence, are not used for advertising or facial-recognition matching in the current version, and are retained for 60 days before automatic deletion from server storage.

Biometrics: Optional MPIN/Face ID/fingerprint unlock is performed by the device operating system. Biometric templates are not uploaded to ArogyaVeer servers; only the preference that biometric unlock is enabled may be stored.

Visibility and sharing: Attendance live location and operational records may be visible to authorised Admin and reporting-tree managers according to the organisation’s configuration. ArogyaVeer does not share this data with advertisers or data brokers.

Audience: ArogyaVeer is intended for authorised adult workforce users and is not directed to children.

Asarfi HRMS™ — Human Resources Management

May process employee identity, employment, department/designation, attendance, roster, leave, payroll-related records, work allocation, documents, performance, authentication and technical information. If the product is renamed in the future, this policy will continue to apply to its successor or renamed HRMS product unless a replacement policy states otherwise.

RakshaRath™ — Ambulance Management

Designed to connect patients, ambulances and hospitals. It may process patient/contact details, ambulance requests, pickup/destination details, ambulance and crew assignment, trip status, timestamps, emergency information and location data where necessary for dispatch, routing, tracking or hospital coordination.

4. How we use personal data

We do not sell personal data.

5. Consent and device permissions

Where consent is required, the relevant notice should identify the data requested and the purpose before collection. Device permissions such as camera, files, notifications or location should be requested only where a product feature requires them and can be controlled through device settings.

For ArogyaVeer specifically, denying Location blocks field-app use by design. Continuous attendance location can be stopped by Punching Out. Camera access is required only for attendance Punch In/Out selfies where that module is enabled.

6. Sharing and service providers

We may process or share information only as reasonably necessary with the subscribing organisation, authorised hosting/cloud/database providers, messaging providers, security providers, integrations enabled by the customer, professional advisers or authorities where required by law. Third-party SDKs and processors used in a production app must be reflected in the relevant app-store disclosures.

7. Retention and deletion

Retention depends on customer instructions, healthcare/employment/education obligations, audit requirements, legal obligations and backup cycles. Where deletion is permitted, data should be deleted, anonymised or securely disposed of when no longer required.

For ArogyaVeer, attendance selfies are retained for 60 days and then deleted automatically. Attendance location pings/sessions are retained according to the employer’s configured operational need; visit Start/Stop GPS is retained with the visit record; login/session audits follow the applicable security policy; and account profiles are retained while active and thereafter according to the employer’s policy.

Account or data-deletion requests may be submitted through an in-app deletion mechanism where available or through our Privacy & Data Deletion Request page.

8. Security

We use reasonable technical and organisational safeguards including authentication, access controls, role-based permissions, audit logs, monitoring, backups and secure communications appropriate to the service and risk.

9. Children and minors

Education and healthcare products may be used in contexts involving children or minors. The responsible institution or lawful guardian must provide any consent or authorisation required by applicable law. SilicoSoft does not knowingly use children's personal data for behavioural advertising.

10. Digital Personal Data Protection framework

SilicoSoft is aligning its products and processes with the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 as applicable provisions come into force, including purpose-specific notices, consent/withdrawal mechanisms where applicable, reasonable safeguards, grievance handling and applicable Data Principal rights.

11. App-store disclosures

Apple App Store privacy disclosures and Google Play Data Safety declarations must match each actual production build, including permissions, SDKs, integrations, data collection, data sharing and deletion practices.

12. Contact and grievance redressal