SRIT India Limited ("us", "we", or "OPLive App", which also includes its affiliates) is the author and publisher of the mobile applications 'OPLive App' (the patient-facing application) and 'OPLive Dr' (the practitioner-facing application) (together, the "Applications") and all related services (the "Services"). OPLive App is incorporated under the Companies Act, 2013, with its registered office at TC 24/3088/2, Ushasandya Building, Dotspace Business Centre, PMG TTC Road, Kowdiar Thiruvananthapuram Kerala 695003 India (CIN: U72200KA1999PLC025692). This Privacy Policy explains how we collect, use, share, disclose, and protect personal information about Users of the Services, including Practitioners and End-Users (jointly referred to as "Users"). Your use of the Services is subject to this Privacy Policy and our Terms of Use.
Explore our updated legal, compliance, and data governance policies governing the OPLive App healthcare platform.
For the purposes of the DPDP Act, 2023, SRIT India Limited acts as the Data Fiduciary — the entity that determines the purpose and means of processing your Personal Data.
OPLive App and OPLive Dr are separate applications with different data footprints, and each is the subject of its own store privacy declaration.
OPLive App (patients) collects identity and contact data, date of birth and gender, health and consultation data, appointment and booking records, payment transaction references, device and usage data, and consent records. It does not collect government identity documents, professional credentials or bank account details.
OPLive Dr (practitioners) collects identity and contact data, professional registration and qualification details, a masked government photo identity document, PAN, bank account details for settlement of fees, device and usage data, and consent records. It does not collect the practitioner's own health data. Practitioners access patient health data through OPLive Dr strictly for the consultation booked.
When you access the Services or register on OPLive App or OPLive Dr, we may collect the following categories of information:
As part of the Practitioner registration and onboarding process, OPLive App collects:
All information provided by Practitioners is used to facilitate their listing on OPLive App, to verify credentials, and to improve the Services.
When you use the Services, OPLive App automatically collects certain technical data, including:
OPLive App uses the information collected for the following purposes:
By using the Services and verifying your contact number with OPLive App, you consent to receiving transactional and service-related communications (through call, SMS, email, or other digital means) from OPLive App and/or its authorised representatives — such as one-time passwords, booking confirmations, appointment reminders, prescription notifications and grievance updates — even if your contact number is registered under the DND/NCPR list, as such communications are transactional in nature. Promotional and marketing communications are sent only where you have given a separate, specific opt-in under the Consent Framework, and that opt-in may be withdrawn at any time without affecting your use of the Services.
OPLive App shares relevant User information (including health data) with the Practitioner selected by the User, solely for the purpose of the specific consultation or appointment booked. This sharing is based on the User's consent.
OPLive App may share User data with third-party contractors and service providers who work on behalf of OPLive App to provide the Services, including cloud hosting providers, payment gateway providers, SMS and email communication providers, and analytics service providers. These third-party service providers have access to information needed to perform their specific functions but may not use it for other purposes. All third-party processors are required to comply with applicable data protection obligations.
OPLive App may use carefully selected third-party technology providers, including analytics, authentication, and measurement services, to operate and improve the Applications and understand technical performance.
We do not sell personal health information. Where third-party SDKs collect device identifiers or technical information, we disclose such collection and use in accordance with applicable law and platform requirements. We obtain user consent where required and configure applicable SDKs according to the user's privacy choices.
OPLive App may disclose your Personal Data where required by law, rule, regulation, law enforcement agency, governmental official, or legal authority, including the Data Protection Board of India established under the DPDP Act.
In the event of a reorganisation or sale of OPLive App's assets or business, User information may be transferred to the acquiring entity, subject to the same privacy protections described in this Privacy Policy.
OPLive App does NOT sell, rent, trade, or otherwise commercially exploit User Personal and Health Data. OPLive App maintains a strict 'No-Spam' policy.
User Personal Data collected through the Services is stored in electronic form on OPLive App's servers or on the servers of its contracted service providers. OPLive App takes all necessary precautions to protect your Personal Data both online and offline, and implements reasonable security practices and measures commensurate with the nature of its business.
OPLive App may transfer or process data with the assistance of cloud infrastructure or service providers. Any such transfers are subject to adequate contractual safeguards to ensure equivalent data protection standards, in compliance with the DPDP Act and applicable SPI Rules.
OPLive App has implemented best industry practices and security policies, rules, and technical measures to protect Personal Data from unauthorised access, improper use or disclosure, unauthorised modification, and unlawful destruction or accidental loss.
OPLive App implements reasonable security practices and procedures and maintains a documented information security programme containing managerial, technical, operational, and physical security control measures commensurate with the information collected and the nature of OPLive App's business.
All OPLive App employees and data processors who have access to and are associated with the processing of Sensitive Personal Data are obliged to respect the confidentiality of every User's Personal Information. Any third-party data processor to which OPLive App transfers Personal Data must agree to comply with equivalent data protection measures.
However, OPLive App shall not be held liable for any data loss or theft arising from unauthorised access to a User's own electronic devices or account credentials, loss or disclosure of a User's password, acts of government, or poor internet service quality — events that are beyond OPLive App's reasonable control. Nothing in this paragraph limits OPLive App's responsibility for the security of the systems under its control or its obligations under applicable data protection law.
You have the right to obtain confirmation of whether your Personal Data is being processed by OPLive App and to access a summary of such data. To make an access request, please contact dpo@oplive.app. OPLive App will respond within 30 days of receiving your request.
You have the right to ensure that your Personal Data maintained by OPLive App is accurate, complete, and current. If your information changes or you find inaccuracies, you may correct information by updating your account settings in the Applications or by contacting us at support@oplive.app. OPLive App will make good faith efforts to make requested changes in active databases as soon as reasonably practicable and in any event within 15 working days.
If you wish to cancel your account or request that OPLive App no longer use your information to provide you Services, please contact us at dpo@oplive.app or in website through oplive.app/account-deletion or in-app facility in Profile → Delete account to delete data/account (note: This is permanent deletion without recovery possible). OPLive App will retain your information for as long as your account is active and as needed to provide the Services, or as required by applicable law. Medical records shall be retained for the mandatory minimum retention period of five (5) years regardless of account cancellation requests.
You may withdraw your consent to processing of your Personal Data at any time by contacting dpo@oplive.app. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Please note that withdrawal of consent may result in OPLive App being unable to provide you with certain or all of its Services.
To opt out of non-essential marketing and promotional communications, please send an email to support@oplive.app with the subject line 'Marketing Opt-Out — [Your Registered Mobile Number]'.
If you have any grievance about how OPLive App collects, uses, or handles your Personal Data, please contact the Data Protection Officer at dpo@oplive.app. You may also raise a complaint with the Data Protection Board of India established under the DPDP Act, 2023, upon its operationalisation.
The Applications are not intended to be used by, and accounts may not be held by, persons below 18 years of age. A patient below 18 may receive a consultation only where the booking is made by that patient's parent or legal guardian from the guardian's own adult account.
Where a parent or legal guardian books a consultation for a minor patient, OPLive App obtains verifiable consent from that parent or legal guardian before the consultation is confirmed, in accordance with Section 9 of the Digital Personal Data Protection Act, 2023. Verification is carried out by confirming the guardian's identity against the verified account holder and by recording a separate, purpose-specific consent naming the minor patient. OPLive App processes the minor's data solely on the instructions of the parent or legal guardian and solely for the purpose of the consultation booked. OPLive App does not carry out behavioural monitoring or tracking of a minor patient, and does not use a minor's data for advertising or direct any advertising to a minor. Parents or guardians who become aware that a minor has provided personal information to OPLive App without their consent should contact OPLive App at support@oplive.app for assistance.
The Applications use temporary cookies to store certain non-sensitive information that is used by OPLive App and its service providers for technical administration, research and development, and user administration. OPLive App may allow authorised third parties to place cookies on the User's browser for optimising services. Cookies do not store Sensitive Personal Data or Information. You may adjust your browser to disable cookies, though this may limit certain application features. For full details of how OPLive App uses cookies and how to manage your preferences, please refer to the OPLive App Cookie Policy at www.oplive.app/cookie-policy.
OPLive App may update this Privacy Policy at any time. In the event there are significant changes in the way OPLive App treats User's personally identifiable information, or in the Privacy Policy itself, OPLive App will display a notice within the Applications or send Users an email notification as provided above, so that you may review the changed terms prior to continuing to use the Services. If you object to any changes and no longer wish to use the Services, you may contact support@oplive.app to deactivate your account.
You acknowledge that this Privacy Policy is a part of the Terms of Use of the Applications. Becoming a User of either Application signifies your: (i) assent to this Privacy Policy; and (ii) consent to OPLive App using, collecting, processing, and/or disclosing your Personal Information in the manner and for the purposes set out in this Privacy Policy.
For any questions about this Privacy Policy, OPLive App's information collection practices, or to exercise your rights as a Data Principal, please contact:
OPLive App will use reasonable efforts to respond promptly to any requests, questions, or concerns regarding your Personal Data.