Consent Framework

1. PRINCIPLES OF CONSENT

• FREE: Core services are not conditioned on unnecessary consent.
• SPECIFIC: Each consent request identifies a specific purpose.
• INFORMED: Plain-language explanation provided before consent is sought.
• UNAMBIGUOUS: Active affirmative action required — tick-box or 'I Agree'. No pre-ticked boxes.
• WITHDRAWABLE: Consent may be withdrawn at any time via email to dpo@oplive.app.

2. CONSENT LAYER 1 — ACCOUNT REGISTRATION (ONE-TIME)

At registration, one-time consent is collected through an explicit affirmative screen covering:

• Consent to Terms & Conditions and Privacy Policy.
• Consent to process identity and contact data for account management.
• Consent to receive service communications (OTPs, reminders, booking confirmations).
• By booking a consultation through the Platform, the User expressly acknowledges and consents to OPLive App processing and securely sharing the Personal Data and health information necessary for the selected Registered Medical Practitioner ("RMP") to provide the requested healthcare service. Such processing shall be limited to the purposes for which the information was collected and as otherwise permitted by applicable law.

3. CONSENT LAYER 2 — HEALTH DATA AND TELECONSULTATION

A one-time, explicit consent covering health data processing and teleconsultation is collected at first booking. This consent covers:

• OPLive App and OPLive Dr collect informed consent before device OS permission to camera, microphone, location, storage, calendar.
• OPLive App collects informed explicit consent for healthdata, camera, microphone, location, storage upon registering and booking appointments for each patient.
• Consent to share health information with the RMP selected for consultations booked through OPLive App.
• Consent to participate in video, audio or chat consultations. The in-app disclosure described above is shown before the device operating system permission prompt is triggered, and the User must affirmatively accept it. Once granted, permissions are not re-requested for each session.
• The User acknowledges that OPLive App is solely a technology platform facilitating interaction between the User and the selected Registered Medical Practitioner. OPLive App does not provide medical advice, diagnosis, treatment, prescription, or clinical supervision, and all medical decisions remain the sole responsibility of the consulting Registered Medical Practitioner.
• Acknowledgement that teleconsultation is not for medical emergencies.

4. CONSENT LAYER 3 — MARKETING COMMUNICATIONS (OPTIONAL)

5. CONSENT WITHDRAWAL

• Marketing consent: Email support@oplive.app — effective within 48 hours.
• Health data / account data processing consent: Email dpo@oplive.app in website through oplive.app/account-deletion or in-app facility in Profile → Delete account to delete data/account — effective within 7 working days.
• Account deletion: Email support@oplive.app — effective within 30 calendar days.

Withdrawal of consent shall not affect the lawfulness of processing undertaken prior to withdrawal or any processing required under applicable law, regulatory obligations, contractual obligations, fraud prevention, dispute resolution, or the establishment, exercise, or defence of legal claims. Withdrawal of core processing consent may prevent OPLive App from providing certain services that necessarily depend upon such processing.

6. CONSENT REVIEW

OPLive App conducts periodic internal review of its consent framework to ensure ongoing compliance with the DPDP Act. Consent records shall be securely maintained for a minimum period of three (3) years after account closure or such longer period as may be required under applicable law.

7. MINORS

Accounts may be held only by persons aged 18 or above. Where the account holder books a consultation for a patient below 18 years of age, that account holder must be the patient's parent or legal guardian and must give a separate, purpose-specific consent naming the minor patient before the consultation is confirmed. This constitutes verifiable consent for the purposes of Section 9 of the Digital Personal Data Protection Act, 2023, and is recorded in the consent audit log described in Section 8. OPLive App processes the minor's data solely on the instructions of the parent or legal guardian, does not carry out behavioural monitoring or tracking of a minor patient, and does not direct advertising to a minor. Parents or guardians who become aware that a minor has provided personal information to OPLive App without their consent should contact OPLive App at support@oplive.app for assistance.

OPLive App collects the date of birth of each account holder at registration and of each patient added to an account, uses that information to identify minor patients, and reserves the right to seek additional verification of the guardian relationship where considered necessary.

8. CONSENT LOGGING

Captured at each consent point: User ID, consent type, consent text version, timestamp (IST), and method of consent. Consent logs shall be securely maintained in a tamper-evident manner for a minimum period of three (3) years after account closure or such longer period as required under applicable law. Such records may be used for compliance, audit, regulatory, dispute resolution, and legal proceedings.

9. AMENDMENT OF CONSENT FRAMEWORK

OPLive App reserves the right to amend this Consent Framework from time to time to reflect changes in applicable law, regulatory guidance, technological developments, or Platform functionality. Updated versions shall become effective upon publication on the Platform or such other notification as OPLive App may determine.