Newmi Care
Get App

Newmi Care

Privacy Policy

Privacy Notice under the Digital Personal Data Protection Act, 2023

Version 1.1 · Effective from 01-Apr-2025 · Last updated 12-10-2026

This Privacy Policy explains what personal data Newmi collects, why, who we share it with, how long we keep it, and how you can control it. It applies to the Newmi website, the Newmi app, Ask Nimi (in the app, on the web and on WhatsApp), teleconsultations, and Newmi clinics. It is written to meet the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Digital Personal Data Protection Rules, 2025 and the Information Technology Act, 2000.

A Hindi version is available at /policies/privacy/privacy-hindi. You can also ask for this policy in any language listed in the Eighth Schedule to the Constitution of India by writing to contact@newmi.in.

In short

  • •We use your data to give you care and run your account. We never sell it.
  • •Your health information is shared only with the people needed to care for you, such as your doctor, lab or pharmacy.
  • •Ask Nimi is an AI assistant, not a doctor. Your chats are stored securely and used to support your care.
  • •Marketing, research, and using your chats to improve Ask Nimi are optional. You can say no and still use Newmi.
  • •You can see, correct or delete your data, or withdraw consent, at any time: Settings → Privacy in the app, or contact@newmi.in.

1. Who we are

Newmi Care is operated by KA Healthcare Private Limited ("Newmi", "we", "us"), CIN U85300HR2021PTC096690. Our corporate office is at The Office Pass, 11th Floor, Tower B, Unitech Cyber Park, Sector 39, Gurugram 122002, Haryana.

For your personal data, Newmi is the Data Fiduciary under the DPDP Act. That means we decide why and how your data is processed, and we are responsible for it.

2. Who this policy covers

It covers anyone who uses our services ("you"): patients, Ask Nimi users, people who fill in forms on our website, and members covered through an employer, insurer or partner programme. If you register a family member, such as a parent or child, you confirm that you are allowed to share their data, and this policy applies to them as well. Doctors and staff who work with Newmi are covered by separate notices.

3. What we collect

We collect only what we need for the purposes in Section 4.

Category
Examples
Where it comes from
Identity and contact
Name, mobile number, email, age or date of birth, gender, city and PIN code, preferred language
You, at sign-up or booking
Health information
Symptoms, medical and menstrual history, pregnancy and contraception history and preferences, sexual and reproductive health information, medicines, allergies, vitals, consultation notes, prescriptions
You, your Newmi doctor, assessments
Assessments and diagnostics
Answers to health assessments (for example PMOS, menopause, contraception), lab orders and reports, scans
You, our partner labs and diagnostic centres
Ask Nimi conversations
Your messages, voice notes, files you upload, Ask Nimi's replies, and the topics discussed
You, when you chat
Care follow-up
Appointment history, reminders, follow-up call notes, feedback
Newmi care team
Programme and coverage
Employer, insurer or programme name, member or policy ID, eligibility
You, or your employer or insurer when you are enrolled through them
Payments
Amount, transaction ID, payment status. We do not store full card or UPI credentials; our payment gateway handles those.
You, payment gateway
Device and usage
Device type, operating system, app version, IP address, approximate location (city level), pages and features used, crash logs
Collected automatically (see Cookies below)

Cookies and similar technology. Our website uses cookies and similar technologies to support website functionality, understand visitor usage and measure advertising performance. Tools used include Google Analytics 4 for website analytics, Microsoft Clarity for understanding website interactions, Google Ads for advertising measurement, and Google Tag Manager to manage website tags.

What we do not collect. We do not need your Aadhaar number, and we do not ask for it. If you choose to link your ABHA ID, we process it only to share records with your consent under the Ayushman Bharat Digital Mission.

4. Why we use it

We use your data only for the purposes below. If we want to use it for something new, we will ask you first.

Purpose
Data used
Basis
Create and manage your account; verify you
Identity and contact, device
Your consent (required for the service)
Ask Nimi: answer your questions, give health information, help you assess symptoms and options (including contraception), and connect you to a doctor when needed
Ask Nimi conversations, health information, assessments
Your consent (required for Ask Nimi)
Consultations, prescriptions, clinic visits and care plans
Health information, assessments, diagnostics
Your consent (required for care)
Book labs and diagnostics, and deliver medicines
Identity and contact, prescriptions, test orders
Your consent (required for that service)
Follow-up: reminders, check-in calls or messages about your care
Contact, care follow-up
Your consent (you can turn this off)
Process payments, invoices and refunds
Payments, identity
Your consent; legal and tax obligations
Verify coverage and settle claims with your employer, insurer or programme
Programme and coverage, invoices. Health details only where your insurer needs them for a claim you make.
Your consent
Keep the service safe: detect fraud and misuse, fix errors, keep security logs
Device and usage
Your consent; legal obligations (security logs)
Meet legal duties: medical record-keeping, tax, lawful requests from authorities
As required by law
Legal obligation (DPDP Act, Section 7)
Medical emergency: help if your life or health is at immediate risk
Identity, contact, health information
DPDP Act, Section 7(d)
Improve Ask Nimi and our care quality using your conversations and assessments
Ask Nimi conversations, assessments (de-identified where possible)
Optional consent
Research and programme reports using de-identified data
De-identified health and usage data
Optional consent. Aggregated statistics that cannot identify anyone are used without it.
Offers, newsletters and health campaigns from Newmi
Contact, preferences
Optional consent

About Ask Nimi. Ask Nimi is an artificial-intelligence (AI) assistant built on Newmi's NIVRIT platform. It gives general health information. It is not a doctor, and it does not diagnose or prescribe. Your messages are processed by AI models run for us by AWS, India Region under contracts that bar them from using your data for their own purposes, including training their models. Members of Newmi's clinical team may review conversations to keep care safe and accurate, or when you ask to speak with a doctor.

Do not use Ask Nimi in an emergency. Call 112.

Automated suggestions. Ask Nimi may suggest next steps, such as "see a doctor". It never denies you a service or makes a medical decision without a qualified healthcare professional.

5. Your consent and choices

We ask for consent in clear, separate steps. Required consents are needed to provide the service you asked for. Optional consents are off unless you switch them on, and saying no does not affect your care.

  • •Required: your account and care (Section 4, first six purposes).
  • •Optional: (a) use my chats and assessments to improve Ask Nimi; (b) use my de-identified data for research; (c) send me offers and newsletters.

You can withdraw any consent as easily as you gave it: Settings → Privacy in the app, or writing to contact@newmi.in. Withdrawal applies from then on and does not undo lawful processing before it. If you withdraw a required consent, we will stop that service and tell you what that means for your care. Records the law requires us to keep will still be kept (Section 7).

You can also give, manage or withdraw consent through a Consent Manager registered with the Data Protection Board of India, once these are available.

6. Who we share it with

We never sell your personal data. We never share your health information with your employer; employers and programme sponsors see only aggregated reports that cannot identify you. We share data only as listed below, and only as much as each party needs.

Who
What they get
Why
Your treating doctors and the Newmi care team (employed or partner doctors)
Health information you share, assessments, reports
To treat you
Partner labs and diagnostic centres
Name, contact, address, test orders
To collect samples and share reports
Partner pharmacies (for example Tata 1mg)
Name, contact, address, prescription
To dispense and deliver medicines
Partner clinics and hospitals you are referred to
Referral note, relevant health information
Continuity of care, only with your agreement
Your insurer, TPA or programme sponsor
Eligibility, claim and invoice data; health details only as needed for your claim
To verify coverage and settle claims
Technology providers acting for us: cloud hosting (AWS, India), AI model providers (OPEN AI), WhatsApp Business (Meta), SMS and email services (MSG91 & Microsoft), payment gateway (Cash free)
Only what they need to run their service for us
Under contracts that require security and confidentiality and forbid using your data for their own purposes
Government, courts and regulators
What the law requires
Legal obligation
A buyer or successor of Newmi
Your data, with this policy's protections
Merger or restructuring; we will tell you first

On request, we will give you the names of the organisations we have shared your data with (Section 11).

WhatsApp. If you use Ask Nimi on WhatsApp, Meta handles message delivery under WhatsApp's own terms, and a copy of the chat stays on your phone. On a shared phone, you can delete the chat in WhatsApp. Our reminders never mention your health condition or contraception in notification previews.

7. How long we keep it

We keep personal data only as long as the purpose needs it or the law requires, and then delete it or make it permanently anonymous.

Data
How long we keep it
Medical records (consultations, prescriptions, reports)
At least 3 years from the last consultation, as medical regulations require, or longer if a law, claim or dispute requires it
Ask Nimi conversations
12 months from your last message, unless they form part of your medical record, in which case as above
Account and contact data
Until you delete your account. If your account is inactive for 3 years, we will tell you at least 48 hours before deleting it.
Payment and invoice records
8 years, as tax and accounting law requires
Security and access logs
At least 1 year, as the DPDP Rules require
Marketing preferences
Until you opt out, plus a record so we do not contact you again

8. How we protect it

We use reasonable security safeguards. These include encryption of data in storage and in transit; access limited by role to people who need it; multi-factor login for staff; masking of identifiers where possible; activity logs; regular backups; and contracts that require our vendors to protect data in the same way. Staff with access to health data are bound by confidentiality.

If there is a breach. If a personal data breach affects you, we will tell you promptly. We will explain what happened, the likely impact, what we are doing about it, and what you can do to protect yourself. We will also report it to the Data Protection Board of India as the law requires, with full details within 72 hours.

9. Data stored or processed outside India

Your data is stored in India — Amazon Web Services (AWS), Mumbai Region. Some technology providers, such as AI model or messaging providers, may process it outside India. We transfer data abroad only as permitted under Section 16 of the DPDP Act, never to countries the Government of India restricts, and only under contracts that protect it as this policy does.

10. Children

Our services are for adults aged 18 and over. A parent or lawful guardian can register a child and manage the child's care; we then obtain verifiable consent from that parent or guardian, as the DPDP Rules require. Newmi's doctors and clinics may process a child's data without that consent only where the law allows: to provide health services to the child, to the extent needed to protect her health. We do not track children's behaviour or show them targeted advertising. If we learn that we hold a child's data without valid consent, we will delete it.

11. Your rights

You have the right to:

Right
What you can do
Access
Get a summary of the personal data we hold about you, how we use it, and who we have shared it with.
Correct and update
Fix inaccurate or incomplete data.
Erase
Ask us to delete data we no longer need. Records the law requires us to keep are deleted when that period ends.
Withdraw consent
Withdraw consent at any time (Section 5).
Nominate
Nominate someone to exercise these rights for you if you die or become unable to act.
Raise a grievance
Raise a grievance and get a response (Section 12).

To use these rights, go to Settings → Privacy in the app/website, or email contact@newmi.in from your registered email or phone number. We may need to verify your identity first. Under the DPDP Act, you must not give false information or file frivolous complaints.

12. Questions and complaints

Our Grievance Officer handles privacy questions and complaints.

Detail
Information
Name and designation
Aditi Mittal, COO
Email
contact@newmi.in
Phone
8929345355, (Mon-Sat: 10am-7pm)
Address
KA Healthcare Private Limited, The Office Pass, Tower B, 11th Floor, Unitech Cyber Park, Sector 39, Gurugram - 22, HR

We will acknowledge your complaint within 24 to 48 hours and resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India [link to the Board's portal].

13. Changes to this policy

We will post any update here with a new version number and effective date. If a change affects how we use your data, we will tell you in the app or by email or SMS before it takes effect, and ask for fresh consent where the law requires it. Previous versions are available on request.