This policy explains what Manjiva stores, who it is sent to, and what you can do about it. It is written to meet India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. Manjiva is the Data Fiduciary; you and your patient are Data Principals.
Only what you provide to run your family's dashboard:
We do not collect location, contacts, or advertising identifiers. We do not use tracking cookies. The only cookie we set is the one that keeps you signed in.
We do not sell your data. We do not use it for advertising. We do not use your health records to train AI models.
These are the companies that touch your data, what they see, and where they process it. We do not share your data with anyone else.
| Who | What they process | Where |
|---|---|---|
| Anthropic (AI provider) | The health records relevant to whichever AI feature you use | United States |
| Render (hosting + database) | Everything stored in the app | Outside India |
| Cloudflare R2 (file storage) | The report files you upload | Outside India |
| Razorpay (payments) | Your name, email and payment details. No health data. | India |
| Resend (email) | Your email address and the message text — sign-in codes, reminders, digests | Tokyo, Japan |
| Meta / WhatsApp | Only if you link a WhatsApp number: the report photos you send that way | Outside India |
| Google / Apple / Mozilla push services | Only if you turn on medicine reminders: the reminder text and your device token | Outside India |
Transfers outside India. Most of the above process your data outside India. This is permitted under section 16 of the DPDP Act; the Government has not restricted transfers to any of these countries. If that changes, we will move or stop the affected processing.
Records are stored in a hosted Postgres database and uploaded files in object storage, both encrypted at rest by the provider and reachable only over encrypted connections. Passwords are stored only as bcrypt hashes and can never be read back.
In practice that means: your family's data is reachable only from your family's account; sign-in is rate-limited against guessing; the session cookie is HTTPS-only; the app sends a strict content-security policy; and share links are random, unguessable and expire on their own.
Only the members of your family account whom you invite. Doctor briefs and shared summaries are links that expire — 72 hours for a doctor brief, 7 days for a shared summary — and anyone holding the link can view it until it does, so send them only to people you mean to.
All of these work from inside the app. You do not have to email anyone or wait for us.
By creating an account you consent to your family's health information being stored and processed as described here. You may withdraw that consent at any time as described in section 6, and withdrawing it is as easy as giving it.
About the patient. The account is usually held by a caregiver, but the records are the patient's, and under the DPDP Act the patient is the Data Principal — not the caregiver. So we ask you to record who agreed: the patient themselves, or you as their lawful guardian. Please ask them. If the patient asks us to stop, we will act on their instruction, not the account holder's.
This policy is published in English. A Hindi version is available on request from support@manjiva.com.
If you stop using Manjiva and want your data gone, delete it in the app or write to us and we will do it.
Manjiva is operated as a sole proprietorship by Prachi Sharma. We think you should know exactly what that means in practice, rather than having to assume.
From inside the app, the operator can see: which families have signed up, how many members each has, which plan they are on, when they last used the app, and which features they have tried. Families are identified by an account number, not by the patient's name. She can also read messages you send through Help & support, together with basic technical details about your device that are attached to those messages and shown to you before you send them.
From inside the app, the operator cannot see: your uploaded reports, lab results, medicines and reminders, symptom logs, appointments, doctor briefs, or your conversations with Manjiva. There is no screen anywhere in the app that shows another family's health records.
The honest part: Manjiva is run by one person, and that person necessarily holds the keys to the database and file storage that your records live in — this is true of every service of this kind. What we commit to is how that access is used: we do not read your records out of curiosity, and we open them only when you have asked for help with a specific problem and it cannot be solved any other way, or where the law requires it. If we ever need to look at your records to help you, we will tell you.
If you would rather we did not hold your information at all, you can ask us to delete your family at any time (see section 6) and it is removed along with the uploaded files.
A data breach. If your personal data is ever exposed, we will tell you directly and without delay, describing what happened, what was affected, and what you should do. We also report to the Data Protection Board of India and to CERT-In within the timelines the law sets.
A complaint. Write to our Grievance Officer, Prachi Sharma, at support@manjiva.com or the phone number on our Contact page. We acknowledge within 48 hours and resolve within 30 days. If you are not satisfied, you can escalate to the Data Protection Board of India.
Manjiva is built for adult caregivers and is not intended for use by anyone under 18. If a patient whose records you keep here is a child, you may only add their records as their parent or lawful guardian.
If we change anything that affects your rights, or add a new company to the list in section 3, we will tell you in the app before it takes effect, and update the date at the top of this page.
Manjiva is operated as a sole proprietorship by Prachi Sharma.
Data protection questions, grievances and deletion requests: support@manjiva.com
Noida, Uttar Pradesh, India
Phone support and grievance contact: Contact Us