TERMS OF USE

1. About these Terms

This document is issued by AVDAUSON HEALTHTECH PRIVATE LIMITED, a company incorporated under the Companies Act, 2013, (the "Company", "we", "us" or "our"). The Company owns and operates the "Aarog" / "Aarog Health Records" mobile applications and the website www.aaroghealthrecords.com (together, "Aarog"). "Aarog" is a brand of the Company and is not a separate legal entity.

These Terms of Use ("Terms") are a binding agreement between you and the Company. They govern your use of the Aarog mobile applications, the website and related services (the "Services").

You accept these Terms by ticking the box and tapping "Create account" (or a similar button) when you sign up. That electronic acceptance is valid under section 10A of the Information Technology Act, 2000. If you do not agree, please do not create an account. You may browse the public pages of our website without an account.

These Terms should be read with the documents listed in section 34, including our Privacy Notice.

2. What Aarog is – and is not

Aarog is a technology service that helps you store, organise, understand, remember and share your own and your family's health records, and set reminders.

Aarog is not a hospital, clinic, laboratory, pharmacy, doctor, telemedicine platform, insurer, ambulance or emergency service. Aarog does not diagnose, prescribe or treat, and nothing in Aarog is medical advice. Any decision about health or treatment must be taken with a qualified healthcare professional. Please read our Medical, AI & Emergency Disclaimer.

3. Who can use Aarog

You must be at least 18 years old and able to enter into a binding contract under Indian law to create an Aarog account. Children cannot have their own account. A parent or lawful guardian may manage a child's profile from their own account, as set out in section 7.

The Services are offered for use in India.

4. Definitions

• Account means your registered Aarog account.
• Aarog AI means the optional AI-assisted features described in section 11.
• Caregiver means a person who manages the profile of an adult who cannot make decisions, as permitted in our Family Member, Caregiver & Children's Data Policy.
• Family Member means any person whose profile you create or manage in Aarog.
• Health Data means any health or medical information uploaded to, entered in or generated by the Services.
• Medical ID means the emergency information card described in section 13.
• Nominee means a person you name in the app to exercise your rights if you die or become unable to.
• Shared Link means a link or QR code you create to share selected records.
• User Content means anything you upload or enter in the Services.

5. Your account and its security

You agree to give accurate information, keep it up to date, and keep your login details, OTPs, MPIN and device secure. Please do not share them with anyone, and tell us immediately at support@aaroghealthrecords.com if you think someone else has used your account.

You are responsible for activity in your account, except to the extent it results from our failure to maintain reasonable security practices. We may suspend access temporarily if we reasonably believe your account has been compromised, to protect you and other users.

6. Your responsibilities

You agree to:

• upload or share only information that you are legally entitled to upload or share;
• make sure the information you enter is accurate to the best of your knowledge, and correct it when it changes;
• use Aarog only for lawful, personal purposes; and
• comply with these Terms and applicable law.

7. Family members, caregivers and children

You may manage profiles for family members only as permitted by our Family Member, Caregiver & Children's Data Policy. In short:

• an adult family member must either accept your invitation in the app or have asked you to manage their records, and they can take over, limit or remove your access at any time;
• you may act as a caregiver for an adult who cannot make decisions only if you are their lawful guardian, hold a valid power of attorney covering health matters, or are their nominee; and
• you may create a child's profile only if you are an adult and the child's parent or lawful guardian, and you confirm this in the app.

When you create or manage a family member's profile, you confirm that the authority or consent you declare is true. If a family member tells us you no longer have authority, we may pause your access to their profile while we review the matter, as described in that Policy.

8. Your content and our licence

You keep all rights you have in the records and information you upload. We claim no ownership. Some documents may also be subject to the rights of the hospital, laboratory or doctor who issued them, and uploading them to Aarog does not change those rights.

You allow us to host, store, copy, encrypt, back up, organise, index, display, process (including with AI features you switch on) and transmit your User Content, only to provide the Services to you and to the people you choose to share with, and to comply with law. This permission is free of charge and non-exclusive, and it ends when you delete the content, subject to our Data Retention Policy.

We do not routinely review User Content. We will remove or restrict User Content only where required by law or a lawful order, or where it clearly breaches section 9. Where we can lawfully do so, we will tell you and give you a chance to export your records first.

9. Acceptable use

You must not, directly or indirectly:

• use Aarog for any unlawful, fraudulent or unauthorised purpose, or in breach of any court order;
• upload forged, fabricated or altered medical documents, impersonate anyone, or enter false emergency information;
• access, or try to access, another person's account or data without authority;
• bypass authentication or security features, or exploit any vulnerability (please report vulnerabilities to support@aaroghealthrecords.com instead);
• upload malware, overload or disrupt our systems, or scrape or harvest data;
• copy, modify, reverse engineer, decompile or disassemble the software, except as permitted by section 52 of the Copyright Act, 1957 or other applicable law;
• upload material that infringes anyone's copyright, trade mark or other rights, or that is obscene, defamatory, threatening or otherwise unlawful; or
• resell, sublicense or commercially exploit the Services without our written consent.

10. Medical disclaimer

Aarog helps you store, organise and understand your health information. It does not give medical advice, a diagnosis, treatment or a prescription. When Aarog AI explains a medical term or summarises a report, it is helping you read your document; it is not giving you a medical opinion. Always rely on the original document and on your doctor.

Do not start, stop or change any medicine because of something you see in Aarog. Reminders are based on information you or your doctor provided and do not tell you whether a medicine or dose is right for you. Aarog records the vitals you enter; it does not measure them or tell you whether a reading is normal for you.

Use of Aarog does not create a doctor–patient or any other healthcare relationship between you and the Company. Any interaction with a healthcare professional is between you and that professional.

11. Aarog AI

11.1 What Aarog AI does

Aarog AI may include the Aarog AI chat, document analysis, extraction of information from prescriptions, reports and bills, document categorisation, report summaries and reminder suggestions. It can explain medical words and test names in simple language, summarise what a document says, pull out details such as medicines, doses, dates and amounts for you to check, help you prepare questions for your doctor, and find records you have stored.

Aarog AI does not diagnose, tell you what illness you have, recommend or change treatment or medicines, or decide whether you need care. If you describe signs of an emergency, it will tell you to call 112 or go to the nearest hospital.

11.2 Third-party AI provider and your permission

Certain Aarog AI features use OpenAI, a third-party artificial intelligence provider that processes data outside India. Before any of your information is sent to OpenAI, we will show you an in-app notice identifying OpenAI, the information to be sent and the purpose, and we will ask for your explicit permission – separately for document analysis and for chat.

Acceptance of these Terms or the Privacy Notice does not by itself give that permission. If you do not give permission, we will not send that information to OpenAI, and the rest of Aarog will keep working. You may withdraw permission at any time in Settings > Privacy > AI features. Details are in section 7 of our Privacy Notice.

11.3 AI results may be wrong

AI-generated information – including summaries, extracted details, classifications, answers and explanations – may contain errors or omissions, may misread a document (especially a handwritten prescription), and may not reflect everything in the original record. AI results are labelled for your review, and no reminder is created from an AI result until you confirm it. When Aarog AI is not confident, it will say so instead of guessing.

AI-generated information is for organisation and understanding only. It must not be relied on as a diagnosis, medical opinion, treatment recommendation, prescription or emergency guidance. Please check it against the original document and, where appropriate, with a qualified healthcare professional.

12. Health data and service providers

We treat health information as sensitive and protect it with reasonable technical and organisational measures. Health information may be stored and processed using our infrastructure and trusted service providers – such as cloud hosting, database and storage, document processing, AI, authentication and security, and messaging providers – who act on our instructions under written contracts.

We do not sell your health records, and we do not allow any third party to use them for advertising or unrelated purposes. Our current providers are listed at www.aaroghealthrecords.com/sub-processors. How we collect, use, share, keep and delete personal data is explained in our Privacy Notice.

13. Medical ID, Emergency Card and SOS

Medical ID and Emergency Card. Your Medical ID shows the information you choose, such as blood group, allergies, conditions, medicines, insurance and emergency contacts, so it can be found quickly. You decide what it contains and whether it can be seen via a Medical ID QR code or Share ID (a time-limited public link). Anyone who has your phone or card can see what you put on it, so include only what you are comfortable sharing. Keep it up to date; Aarog does not check it.

Emergency contacts. Please tell people before you add them as emergency contacts.

14. Sharing records with doctors and others

You choose which records to share, with whom, and for how long. When you create a Shared Link or Doctor QR, you set the records included, the expiry (default 24 hours, maximum 7 days), and whether the recipient can download. You can revoke a share at any time and see when it was opened.

Once a recipient views or downloads a record, they hold their own copy, and Aarog cannot control what they do with it. Doctors and hospitals who receive your records handle them under their own professional and legal duties. Aarog does not verify the identity or qualifications of recipients.

15. Reminders and vitals

Reminders depend on your phone's notification settings, battery and connection, so Aarog cannot guarantee that every reminder arrives on time. Please do not rely on Aarog as the only way to remember critical medicines or appointments. Vitals you record are stored as entered; Aarog does not check them for accuracy. We recommend that you keep your own copies of important medical documents.

16. App lock and sessions

For your safety, Aarog locks after 15 minutes of inactivity and signs you out after 90 days without use. You unlock with your phone's biometrics or your MPIN. Please do not stay signed in on a shared phone. If your phone is lost, use "Sign out of all devices" or contact us.

17. Subscriptions, fees and payments

Aarog is currently free to use. In future, some features may be offered on a paid subscription. Prices, taxes (including GST) and what is included are shown before you pay, and you will be asked to confirm the purchase through a clear action.

A subscription renews automatically only if you choose auto-renewal, and we (or Apple or Google, for store purchases) will remind you at least 3 days before renewal and before a free trial turns into a paid plan. You can cancel at any time in the App Store or Google Play (for store purchases) or in Settings > Subscription (for purchases made directly from us). Cancelling stops the next renewal, and you keep access until the end of the paid period.

Refunds follow our Refund & Subscription Policy and, for purchases through the App Store or Google Play, the store's rules, without affecting your statutory rights. If we remove a paid feature during your subscription, we will give you 30 days' notice and a pro-rata refund on request.

18. Licence to use Aarog

Subject to these Terms, we give you a limited, personal, non-exclusive, non-transferable, revocable licence to download, install and use the Aarog app on devices you own or control, only for managing your own and your family members' health records for personal, non-commercial purposes. Our End User Licence Agreement contains further terms about the software. The software is licensed, not sold.

19. Intellectual property

All rights in Aarog – including the software, source code, databases, design, user interface, text, graphics, logos and the "Aarog" name and marks – belong to the Company or its licensors. Nothing in these Terms transfers any of these rights to you, except the licence in section 18.

20. Third-party services and app stores

Aarog relies on third-party services such as app stores, cloud hosting, SMS, email, notification and payment providers. Their services are governed by their own terms. We choose them carefully and bind those who process your data by contract (section 12), but we are not responsible for interruptions caused solely by them.

Apple and Google are not parties to these Terms and are not responsible for the Services, except as their own store terms provide.

21. Changes to the Services

We improve Aarog continually and may add, change or remove features. Where a change materially affects you, we will tell you in advance where reasonably practicable. If we discontinue the Services, we will give you at least 30 days' notice and a way to export your records.

22. Suspension and termination

By you. You may stop using Aarog and delete your account at any time (section 23).

By us. We may suspend or restrict your access if we reasonably believe that you have materially breached these Terms, your account has been compromised, fraud or unlawful activity is taking place, or continued access poses a serious risk to you, other users or the Services. Where appropriate, we will give you notice and a chance to respond before taking permanent action. We may terminate your account for a material or repeated breach, or where required by law.

Your records. Unless the law prevents it or it would create a security risk, we will give you 30 days after termination to export your records. During a suspension, we will let you export your records unless doing so would be unsafe.

Termination does not affect rights and obligations that arose before it. Sections 8, 19, 24 to 28, 31 and 33 continue after termination.

23. Account deletion and record retention

You can delete your account at any time in the app (Settings > Account > Delete account) or at www.aaroghealthrecords.com/delete-account. What we delete, what we keep and for how long are explained in our Account Deletion Policy and Data Retention Policy.

24. Warranties

We will provide the Services with reasonable skill and care. Apart from that, and to the extent permitted by law, the Services are provided "as is" and "as available", and we do not promise that they will be uninterrupted, error-free, compatible with every device, or that any record, reminder or AI result will be complete, accurate or medically appropriate. Nothing in these Terms limits any right you have under the Consumer Protection Act, 2019 or any other law that cannot be excluded by contract.

25. Limitation of liability

25.1 What we never limit. Nothing in these Terms limits or excludes our liability for: (a) fraud or wilful misconduct; (b) gross negligence; (c) our failure to implement and maintain reasonable security practices and procedures for your sensitive personal data; (d) death or personal injury caused by our negligence; or (e) any liability that cannot be limited under applicable law, including your rights under the Consumer Protection Act, 2019.

25.2 What we are not responsible for. Subject to 25.1, we are not liable for indirect or consequential loss or loss of profit, or for loss caused by: inaccurate information uploaded by you or others; medical decisions made by you or your healthcare providers; your failure to keep your login details or device secure; or events beyond our reasonable control (section 27).

25.3 Cap. Subject to 25.1, our total liability to you for all claims arising in any 12-month period is limited to the greater of (a) the fees you paid us in the 12 months before the claim arose and (b) INR 5,000.

26. Indemnity

You agree to compensate the Company for losses, damages and reasonable legal costs it actually incurs because of a third-party claim arising from: (a) your uploading or sharing information you had no right to upload or share; (b) your creating or managing a family member's profile without the authority you declared; or (c) your fraud or wilful breach of these Terms. This does not apply to the extent the loss was caused by our own breach or negligence. We will tell you promptly about any such claim and let you take part in its defence.

27. Events beyond our control

We are not liable for delay or failure caused by events beyond our reasonable control, such as natural disasters, epidemics, war, terrorism, civil unrest, government action, widespread internet, power or telecommunications failures, or cyberattacks that occur despite our reasonable security safeguards. We will tell you about the event and resume the Services as soon as reasonably possible.

28. Confidentiality

We keep your information confidential as described in our Privacy Notice. You agree not to disclose any non-public information about the Company's software, security architecture or systems that you come across, except where the law requires it.

29. Communications

We send service messages (OTPs, security alerts, reminders you set, policy updates and legal notices) by SMS, email, push or in-app notification. Security and legal notices cannot be switched off while your account is active.

We send promotional messages by SMS, email, WhatsApp or push only if you opt in, and you can opt out at any time in Settings > Notifications. Our SMS messages use DLT-registered headers as required by TRAI regulations. Notifications on your lock screen do not show health details unless you switch on "Show details on lock screen".

30. Privacy

How we collect, use, share, keep and delete personal data is explained in our Privacy Notice. If these Terms and the Privacy Notice differ on how personal data is handled, the Privacy Notice applies.

31. Disputes, governing law and courts

31.1 Talk to us first. Please raise any dispute with our Grievance Officer first. We will try to resolve it within 15 days.

31.2 If you are a consumer. Nothing in these Terms stops you from approaching a Consumer Disputes Redressal Commission under the Consumer Protection Act, 2019, including the Commission where you live or work. You do not have to use arbitration.

31.3 Arbitration for other disputes. Any other dispute not resolved under 31.1 within 30 days may be referred to arbitration by a sole arbitrator appointed by agreement or, failing agreement within 30 days, under the Arbitration and Conciliation Act, 1996. The seat and venue will be SAS Nagar (Mohali), Punjab. Proceedings will be in English and may be held online.

31.4 Courts. Subject to 31.2 and 31.3, the courts at SAS Nagar (Mohali), Punjab have exclusive jurisdiction.

31.5 Law. These Terms are governed by the laws of India.

32. Changes to these Terms

We may update these Terms. For material changes – new purposes, new kinds of data, new recipients of health information, fewer rights for you, or new charges – we will tell you in the app and by email at least 15 days before the change takes effect, and ask you to accept the updated Terms in the app. Where a change needs your consent, we will not apply it to you until you agree. Minor changes, such as clarifications or new contact details, take effect when published. Earlier versions are available from our Grievance Officer on request.

33. General

• Assignment. You may not transfer your rights under these Terms. We may transfer ours as part of a merger, acquisition or restructuring, provided your rights are not reduced and we tell you in advance.
• Waiver. If we do not enforce a right, that is not a waiver of it.
• Severability. If a court finds any part of these Terms invalid, the rest continues to apply, and the invalid part is changed only as much as needed.
• No partnership. These Terms do not create a partnership, agency or employment relationship.
• Headings. Headings are for convenience only.
• Language. If we provide these Terms in another language, the English version applies if they differ, to the extent permitted by law.

34. Documents that make up our agreement

These Terms, the Privacy Notice, the End User Licence Agreement, the Health Data & AI Consent, the Family Member, Caregiver & Children's Data Policy, the Data Retention Policy, the Account Deletion Policy, the Medical, AI & Emergency Disclaimer, the Cookie Policy and the Refund & Subscription Policy together form our agreement with you. If they conflict, the following order applies: (1) the specific consent you gave in the app; (2) the Privacy Notice, for anything about personal data; (3) these Terms; (4) the other documents.

Grievance Officer and contact

If you have a question, complaint or request about this document or about your personal data, please contact our Grievance Officer:

• Name: Mr. Arpan Gupta
• Designation: Grievance Officer, AVDAUSON HEALTHTECH PRIVATE LIMITED
• Email: support@aaroghealthrecords.com (please write "Grievance" in the subject line)
• Phone: +91 98781 23696 (Monday to Saturday, 10:00 a.m. to 6:00 p.m. IST, except public holidays)
• Registered office: AVDAUSON HEALTHTECH PRIVATE LIMITED, 206, Tower 6, Millenium Garden, Zirakpur, Punjab 140603, India

How we handle your grievance. We will acknowledge your grievance within 24 hours and give you a ticket number. We will resolve it within 15 days of receipt. If a law that applies to your grievance sets a shorter period, we will follow that period. If we need more information from you, we will ask within 3 working days.

If you are not satisfied. You may ask for a review by our founder, Mr. Anurag Verma, by writing to support@aaroghealthrecords.com with "Review request" in the subject line. After using this grievance mechanism, you may approach the Data Protection Board of India under the Digital Personal Data Protection Act, 2023, once the relevant provisions are in force. You may also use any other remedy available to you under law, including the Consumer Disputes Redressal Commissions.

Our full Grievance Redressal Policy is available at www.aaroghealthrecords.com/grievance.