Your health data is yours.
We built Arkaayu so that you can always answer three questions: where your data is, who can see it, and how to take it back.
Stored in India
Your Arkaayu account and health readings are stored on servers located in India.
Encrypted in transit
Data travelling between the app, our servers and our database is encrypted (HTTPS/TLS).
Passwords never stored
We keep only a one-way hash of your password. Two-step sign-in with an emailed code is available.
Consent for every share
Clinics and apps can read your data only after you approve them on an Arkaayu screen that lists exactly what they get.
Read-only partners
Connected apps and clinics can read approved data. They cannot change or delete anything.
We don't sell your data
We do not sell your personal data and we do not use your health data for advertising.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask us for a summary of your data and who we shared it with, ask us to correct or erase it, withdraw consent, nominate someone to act for you, and raise a grievance.
Report a security issue
If you believe you have found a vulnerability in Arkaayu, please write to security@arkaayu.com with the steps to reproduce it. Please do not access other people's data, run denial-of-service tests or publish the issue before we have fixed it. We will acknowledge your report within 3 working days and keep you updated.