HEALTH DATA & AI CONSENT

1. About this document

This document is issued by AVDAUSON HEALTHTECH PRIVATE LIMITED, a company incorporated under the Companies Act, 2013, (the "Company", "we", "us" or "our"). The Company owns and operates the "Aarog" / "Aarog Health Records" mobile applications and the website www.aaroghealthrecords.com (together, "Aarog"). "Aarog" is a brand of the Company and is not a separate legal entity.

This document explains the consents we ask for in the Aarog app before we process your health information, and how you can change your mind. It should be read with our Privacy Notice, which explains in full how we handle personal data.

You give consent only through the consent screens in the app – by ticking an unticked box or tapping "I agree" or "Allow". Downloading, browsing or using Aarog does not by itself count as consent. The exact wording of each consent screen is reproduced in section 9.

2. Why we need consent

Health information is sensitive personal data. Indian law requires us to get your consent, in writing or electronically, before we collect and use it, and to tell you clearly what we will do with it. We also ask for your separate, explicit permission before sharing any of your information with a third-party AI provider.

3. The health information covered

Depending on the features you use, this consent covers:

• documents you upload – prescriptions, laboratory and imaging reports, scans, bills, discharge summaries, vaccination records, medical certificates and insurance documents;
• details you enter – vitals (such as blood pressure, blood sugar, temperature and pulse), medicines, allergies, blood group, conditions, surgical history, notes and reminders;
• Medical ID information and emergency contacts;
• AI inputs and results – documents you send for analysis, messages you type in Aarog AI chat, and the details and summaries Aarog AI produces; and
• the same kinds of information about family members whose profiles you manage.

You do not have to upload any particular document. You choose what to add.

4. What each consent is for

Refusing any optional consent does not stop you using the core app.

5. AI features and OpenAI

Aarog AI uses OpenAI OpCo, LLC ("OpenAI") as our Data Processor. OpenAI processes data outside India, currently in the United States.

• What is sent: only what the feature needs – the document you select, or the text you type and any record you choose to attach. We do not send your name, mobile number or email unless they appear inside a document you choose to analyse.
• What OpenAI may do with it: use it only to provide the feature to us. Under our agreement, OpenAI may not use your data to train its models. OpenAI may keep data for up to 30 days for abuse monitoring, and longer only where the law requires, and then deletes it.
• When we ask: before the first time any information is sent – separately for document analysis and for chat.
• AI results: labelled "AI-extracted – please verify" until you confirm them. If Aarog AI is not confident, it says so instead of guessing. No reminder is created from an AI result until you confirm it.
• Not medical advice: Aarog AI does not diagnose, prescribe or give medical advice.

6. Family members and children

When you add health information about a family member, the consent or authority must come from that person, or from their parent, guardian or caregiver, as explained in our Family Member, Caregiver & Children's Data Policy. You will be asked to send an invitation or make a declaration in the app when you create the profile.

7. Withdrawing consent

You can withdraw any consent at any time in Settings > Privacy > Consents or Settings > Privacy > AI features, or by writing to our Grievance Officer. Withdrawing is as easy as giving consent.

• We stop the related processing within 48 hours.
• We erase the related data within 30 days, unless the law requires us to keep it (see our Data Retention Policy).
• Withdrawal does not affect processing done before it.
• If you withdraw the core health data consent, we will help you export your records and then close your account.

8. Records of your consent

We keep a record of each consent and withdrawal – what you agreed to, the version of this document, the date and time, and the device – for as long as your account exists and for 3 years after that, so that we can show what you agreed to.

9. Wording of the in-app consent screens

Screen 1 – Sign-up

"I am 18 years or older, I agree to the Terms of Use and End User Licence Agreement, and I have read the Privacy Notice." (unticked checkbox)

Screen 2 – Core health data consent (before your first record is saved)

"Aarog will store and organise the health records and details you add for you and your family, keep them secure on servers in India (some file delivery and the optional AI features involve processing outside India, as explained in our Privacy Notice), show them to you and to people you choose to share with, and send the reminders you set. We keep them until you delete them. You can withdraw this consent at any time in Settings > Privacy. Grievance Officer: Arpan Gupta, support@aaroghealthrecords.com, +91 98781 23696."

Buttons: "I agree" / "Not now"

Screen 3 – Optional choices (all switched off by default)

• "Let Aarog AI read and summarise documents I choose (uses OpenAI, outside India)"
• "Let me chat with Aarog AI (uses OpenAI, outside India)"
• "Suggest reminders from follow-up dates in my documents"
• "Share app-usage statistics (never my health records) to help improve Aarog"
• "Send me news and offers"

Screen 4 – Just before the first Aarog AI chat

Aarog AI – Permission Required

Aarog AI uses OpenAI, a third-party AI service provider, to generate responses to your questions. When you use Aarog AI, the message you type may be sent to OpenAI to generate a response.

Aarog does not send your account information to OpenAI as part of this AI chat request.

☐ I understand and consent to sending my messages to OpenAI for AI processing.

Buttons: "Allow and Continue" / "Not Now"

Screen 5 – Just before the first AI document analysis

Aarog AI – Permission Required

Aarog AI uses OpenAI, a third-party AI service provider outside India, to read and summarise the document you select and to extract details such as medicine names, doses, dates and amounts. When you use this feature, the document you select is sent to OpenAI. Any personal details printed on that document, such as your name, are sent with it.

Nothing is created from the results until you check and confirm them.

☐ I understand and consent to sending the documents I select to OpenAI for AI processing.

Buttons: "Allow and Continue" / "Not Now"

10. Changes to this document

If we change what a consent covers, we will tell you in the app at least 15 days in advance and ask for your consent again. We will not apply the change to you until you agree.

Grievance Officer and contact

If you have a question, complaint or request about this document or about your personal data, please contact our Grievance Officer:

• Name: Mr. Arpan Gupta
• Designation: Grievance Officer, AVDAUSON HEALTHTECH PRIVATE LIMITED
• Email: support@aaroghealthrecords.com (please write "Grievance" in the subject line)
• Phone: +91 98781 23696 (Monday to Saturday, 10:00 a.m. to 6:00 p.m. IST, except public holidays)
• Registered office: AVDAUSON HEALTHTECH PRIVATE LIMITED, 206, Tower 6, Millenium Garden, Zirakpur, Punjab 140603, India

How we handle your grievance. We will acknowledge your grievance within 24 hours and give you a ticket number. We will resolve it within 15 days of receipt. If a law that applies to your grievance sets a shorter period, we will follow that period. If we need more information from you, we will ask within 3 working days.

If you are not satisfied. You may ask for a review by our founder, Mr. Anurag Verma, by writing to support@aaroghealthrecords.com with "Review request" in the subject line. After using this grievance mechanism, you may approach the Data Protection Board of India under the Digital Personal Data Protection Act, 2023, once the relevant provisions are in force. You may also use any other remedy available to you under law, including the Consumer Disputes Redressal Commissions.

Our full Grievance Redressal Policy is available at www.aaroghealthrecords.com/grievance.