Privacy Policy

DroobiSmit Pte Ltd ("Lillia"), having its registered office at 160 Robinson Road #20-03 Singapore (068914). Any service availed by users (hereinafter referred to as “You”, “Your” or “User”) through the Platform is conditioned upon your acceptance of the terms and conditions contained in Terms of Use as available on the Platform (defined below) and this privacy policy ("Privacy Policy ").

Droobi LLC, Qatar and Medvital Healthcare India Private Limited are the wholly owned subsidiaries of Lillia.

Lillia, Droobi LLC, Qatar and Medvital Healthcare India Private Limited are collectively referred to as Lillia group of companies (“Company” or “We” or “Us” or “Our”).

Lillia provides websites, mobile-enabled applications, and mobile applications that offer health and wellness services. These include but are not limited to:

• Websites: [www.lilliacare.ai , www.droobihealth.com] , ("the Websites");

• Mobile Applications: [Lillia - Metabolic Health , Droobi Health] (the “Mobile Applications”), for both iPhone and Android

All of Lillia’s Websites and Mobile Applications are collective referred to as the (“Platform”)

The Platform allows our healthcare practitioners to view patients' health-related information; communicate with members of the healthcare team and Company’s staff; access to diabetes related educational content; and access to the App features related to behavioural change. This Privacy Policy applies to the entire Platform. For users based in Qatar, India, and Singapore, the processing of Your personal information will be governed by this Privacy Policy and the specific data protection laws applicable in Your jurisdiction.

This Privacy Policy describes how the Company collects and uses the personal information you provide, and other information that is collected from your use of the Platform. It also describes the choices available to you regarding our use of your personal information and how you are able to access and update this information.

We are strongly committed to respecting your online privacy and recognize the need for appropriate protection and management of any personal information collected and/or collated by us including information you provide on the Platform , is subject to privacy under relevant applicable laws. Residents of specific jurisdictions may have additional rights under their local laws, which may be detailed in a Supplementary Privacy Policy available on our Platform.

1. Platform Privacy Policy

By accessing or using Our Platform or by otherwise giving Us Your information, You confirm that You have the capacity to enter into a legally binding contract and have read, understood, and agreed to the practices and policies outlined in this Privacy Policy.

You hereby consent to Our collection, use, sharing, and disclosure of Your information as described in this Privacy Policy.

We may modify, add or delete from, this Privacy Policy from time to time, and Your continued access to, or use of the Platform, will be deemed to be an acceptance of the said changes.

We collect and use health information to provide personalized support, including management and prevention guidance tailored to individuals living with chronic conditions. This allows us to deliver relevant recommendations, resources, and care strategies that align with each user’s unique health needs. Additionally, we use this information to perform data analytics aimed at continuously improving our Platform.

Our use and disclosure of an individual's personal information (including health information) is limited as required by applicable law. We do not sell or rent personal information about visitors to the Platform.

2. Security

The Platform has security measures in place that are intended to help protect against the loss, misuse, unauthorized access or alteration of information under our control. These measures include encryption of data during transmission using the Secure Socket Layer (“SSL”) system, encryption of data at rest, access controls, continuous monitoring, disaster recovery process, using a secured messaging service, and a secured transfer of data to the Platform. Despite these measures, the confidentiality of any communication or material transmitted to or from us via the Platform by internet, text message, or email cannot be guaranteed. At your discretion, you may contact us at the mailing address or telephone number listed in the "Questions, complaints, and contacts" section at the end of this Privacy Policy.

The design and development of our Platform are founded upon integral principles of data protection. In line with the principle of “Privacy by Design,” we proactively embed privacy safeguards and conduct data protection impact assessments before introducing any new features or services that involve personal information.

3. License limitation, sharing and confidentiality

Lillia is, unless otherwise stated, the owner of all the copyright, trademark, patent, trade secret, database and other proprietary rights to the information including without limitation, the Platform. Without limitation of the foregoing, we assert ownership of a copyright in the entire Lillia system, including without limitation, the Platform , as a collective work and/or compilation, and in the selection, coordination and arrangement of the information and content therein.

4. Chat Confidentiality

The Company will only use information for quality and monitoring purposes for the management and prevention of chronic diseases. All the information shared (either logged in or via chat feature) on the Platform will remain confidential. Any review or discussion, or use of this information is strictly prohibited.

5. AI Features and Safety Disclaimer

Certain features of the Platform utilise artificial intelligence (“AI”) technologies to generate responses, suggestions, and insights (“AI Outputs”). By using these features, you acknowledge and agree that AI Outputs are probabilistic in nature, generated based on patterns in data, and are not deterministic. Consequently, AI Outputs may not always be accurate, complete, reliable, unbiased, or current, and must not be treated as a substitute for professional advice, judgment, medical advice, diagnostic advice, treatment, or expertise from qualified professionals.

While Lillia seeks to enhance the performance of its AI systems, we make no representation or warranty that AI Outputs will be accurate, appropriate, reliable, or error-free. Users are expected to exercise discretion and independent judgment when relying on or acting upon AI Outputs, and must not base important decisions, particularly those related to physical or mental health emergencies, solely on such outputs. In such situations, users must seek immediate assistance from qualified professionals or emergency services.

You expressly acknowledge the inherent limitations of AI, including the possibility that AI Outputs may be inaccurate, incomplete, outdated, or otherwise unsuitable for your intended use. All AI Outputs are provided strictly on an “as-is” basis, without any warranties or representations of any kind, whether express or implied, regarding their accuracy, reliability, completeness, or fitness for purpose. You bear sole responsibility for any decisions made or actions taken in reliance upon AI Outputs. The use of such features requires the exercise of critical judgment and user discretion, and you agree to independently verify any information upon which you intend to rely with a qualified professional.

Certain AI features may also be powered by third-party providers, in which case the terms and policies of such providers may additionally apply. Lillia disclaims any responsibility or liability for the independent practices, operations, or content of such third-party providers. You agree and consent that any information provided may be processed by AI for further AI Output.

To the fullest extent permitted by applicable law, Lillia, its affiliates, officers, directors, employees, and agents shall not be liable for any claims, losses, damages, or harm, whether direct, indirect, incidental, consequential, special, punitive, or otherwise, arising out of or in connection with your use of, or reliance on, any AI features or AI Outputs. This limitation of liability expressly includes, without limitation, any damages resulting from misuse of AI, misplaced reliance on its perceived capabilities, or any failure by you to exercise reasonable and prudent judgment.

6. Website and mobile application visitor data

In addition to web logs, described below, Lillia routinely gathers data from Platform , such as how many people visit the Platform, the web pages or mobile screens, what workflow they follow, how long they stay on each page, the exchange of messages between the users etc. The data is collected on an aggregate, anonymous basis, which means that no information is personally identifiable information is associated with the data. This data collected helps the Company to improve content and overall usage. The information is not shared with any other organizations for their independent use.

The Platform does not endorse a browser's signal or header request to track the user's activity

7. Children’s Privacy

We do not knowingly collect or process personal information from any person under eighteen (18) years of age (“Child”) without first obtaining prior verifiable consent from a parent or legal guardian. If You are a parent or guardian and You create an account for a Child, You agree to the practices described in this Privacy Policy on the Child's behalf as per applicable law.

If You are a parent or guardian and Your Child has provided us personal information, please contact us at connect@lilliacare.ai so that We can investigate and delete any such information.

8. Collecting and using and disclosing personal information

As disclosed in this Privacy Policy , we do not collect any personally identifiable information about users to the Platform, unless voluntarily provided.

Information collection, use, and disclosure
We collect the following personal information from you:
- Contact information such as name, email address, education information, identification card number, mailing address, and phone number
- Age or date of birth
- Unique identifiers such as user name, bank account details, employment details, income details, biometric data, and password
- preferences information such as preferred first name and the types of emails you'd like to receive from Lillia
- Health or medical information (obtained automatically from health records)
- Health record number (obtained automatically from health records)

We collect various data from a connected HUAWEI Health, Apple Health, Google Health Connect, Wearables that connect to Apple Health and Google Health Connect, FreeStyle Libre, Sinocare, Tracky including steps, distance, ascent and altitude, calories, medium- and high-intensity activities, active hours, daily activity summaries, exercise goals, activity records, and general activity. Additionally, it monitors health data such as body fat, heart rate, stress levels, sleep patterns, blood glucose, blood pressure, SpO2 (oxygen saturation), body temperature, heart health, pulmonary function, reproductive health, and historical data, including reading historical data. Lillia reserves the right to update and expand the list of supported sources from time to time. Any such additions shall automatically fall within the scope of, and be governed by, the terms of this Privacy Policy.

We use and disclose your information to:
- Communicate your health information, or the health information of someone you are caring for, to health care providers treating you.
- Communicate to you the health information of others you are authorized to act on behalf of, on the Platform.
- Respond to any queries sent to Lillia health educators via chat feature.
- Monitor your user account
- Respond to your health-related questions and concerns
- Conduct data analytics based on de-identified patient health information

In addition to the above, We also use Your Information, including Personal information, for the following purposes:
- For Our internal operational purpose such as record keeping, accounting and compliance with applicable taxation laws;
- For the purposes of recording information including dates, times and locations at which Our Platform has been accessed by using various tracking technologies and thereby improve Our Platform and Your experience by providing You with relevant information based on the above. Your disabling of tracking technologies on the Platform by changing settings on Your smartphone and/or web browser may result in Your inability to use the Platform fully or at all;
- For providing You with regulatory updates which We believe are relevant for You;
- To invite You for seminars, webinars and workshops conducted by Us which We believe may be of interest to You;
- To investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, or as otherwise required by law;
- To respond to any queries that You may have, and to communicate information to You, including notifications of any alerts, any updates to the Platform; and
- To contact You from time to time to record Your valuable feedback on Our Platform, as they currently stand, and/or any potential services that may be offered in the future.

If You wish to opt out of receiving communications such as information regarding the Platform and/or any regulatory updates provided by Us, You may do so by emailing Us at connect@lilliacare.ai

Our processing of Your personal information in the context of Your visit to, and use of Our Platform is based on Our legitimate interests to operate an internet website and blogs for general information and communication purposes, to optimize Our website and blogs, and to protect it from attacks.

We only collect and process Your personal information where We have a lawful basis to do so under applicable law. Our primary basis for processing Your data is Your consent, which You provide when registering on Our Platform and agreeing to this Privacy Policy.

We recognise that certain information, such as health and wellness data, is sensitive. We treat this data with the highest level of care and process it strictly to provide and improve Our personalised services, based on Your consent. We are committed to collecting only the data that is necessary for these specified purposes.

In certain situations, We may also process Your data for other legitimate uses permitted by applicable law, such as to comply with a legal obligation, respond to a medical emergency, or protect the vital interests of an individual. If we need to use Your data for a purpose not covered by Your original consent, We will notify You and request Your permission again.

9. Data Breach Notification

In the unlikely event of a data breach or security incident, We have a clear incident response plan. We will immediately work to contain the issue, assess the impact, and mitigate any harm. If a data breach occurs that could compromise Your privacy or personal information, We will inform You without undue delay.

In accordance with Our legal obligations, We will also report the breach to the relevant data protection authorities within the legally mandated timeframes under applicable law.

10. Server logs

All transactions are recorded on our servers. Logs of these transactions may contain the internet domain from which you access the Platform , the IP address which is automatically assigned to your computer when you get on the internet (a static IP address may be identifiable as being connected to you, while a dynamic address is usually not identifiable); the type of browser and operating system you use; the date and time you visited; the pages or the number of mobile screens used for viewing the Platform; and the address of the Website you linked from, if any.

All logs are stored securely, and may only be accessed by a designated Company’s employee on a need-to-know basis for a specific purpose. The Company uses server information to improve the design of the Platform; to identify popular features; to resolve user, hardware, and software problems; to make the Platform more useful to users for security purposes.

11. Disclosures

We may disclose personal information to any person on a need-to-know basis performing audit, legal, operational, or other services for us. We will use information that does not identify the individual for these activities whenever reasonably possible. Information disclosed to vendors or contractors for operational purposes may not be re-disclosed to others by such a vendor or contractor, except as permitted by Lillia and the applicable law.

We may also disclose your personal information:
- as required by law, such as to comply with a subpoena, or similar legal process
- as described in any applicable health data protection laws for protected health information
- when we believe in good faith that disclosure is necessary to protect our rights, protect you or others from threats of imminent harm, investigate fraud or other activity in violation of the law, or respond to a government request, by obtaining a written consent from you
- to protect the security and reliability of the Platform
- if the Company is involved in a merger, acquisition, or sale of all or a portion of its assets. You will be notified via email and/or a prominent notice on our Platform of any change in ownership or use of your personal information, as well as any modifications you may choose to make to your personal information; or
- to any other third party, with your prior specific consent to do so
- to specific people in your employer company like health care professionals, admin or any other person who is paying for your subscription of our Platform, by obtaining a written consent from you.

12. Other requests to limit use and disclosure of your personal information

Applicable laws may allow You to request that we limit Our uses and disclosures of Your personal information for treatment, payment, and health care operations purposes. We will consider all requests and, if we deny your request, we will notify you in writing. Applicable laws may require us to agree to your request to restrict disclosures to a health plan or insurer relating to specific health care services, if you have paid for those services in full.

13. International Data Transfers

To deliver Our services, Your personal information may be stored and processed on secure servers located outside your country of residence. As a global platform, we utilize infrastructure in various jurisdictions to ensure the performance and reliability of Our services.

When We transfer Your personal information across borders, We do so in compliance with applicable law. We will only transfer your data to countries that provide an adequate level of data protection or through the use of contractual safeguards and other mechanisms that ensure Your data receives a level of protection equivalent to that required in Your jurisdiction.

We remain accountable for Your data, regardless of where it is processed, and will adhere to any legal restrictions on cross-border data flows.

14. Data retention

We will retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our applicable legal obligations, resolve disputes, and enforce our agreements, and as otherwise required under applicable law.

15. Payment Information

The Company uses App store, Google Play Store, Razorpay and Dibsy for payments. All credit/debit cards details and personally identifiable information will not be stored, sold, shared, rented or leased to any third parties. If you make a payment for our products or services on our Platform , the details you are asked to submit will be provided directly to our payment provider via a secured connection. Merchant will not share any debit/credit card details to third parties. Merchant will take appropriate steps to ensure data privacy and security including through various hardware and software methodologies. However, the Company cannot guarantee the security of any information that is disclosed on the Platform.

The merchant is not responsible for the privacy policies of third party websites to which it links. If you provide any information to such third parties, separate rules regarding the collection and use of your personal information may apply. You should contact these third party entities directly if you have any questions about their use of the information that they collect.

16. Right to Access Your Information

You have the right to access your personal information and to be informed about how We are processing it. We are committed to providing You with transparency and control over Your information in accordance with applicable law.

To exercise Your right to access, please submit a written request to Our support team at connect@lilliacare.ai. For your protection, we will need to verify Your identity before processing Your request. Upon verification, We will provide You with a copy of Your data in a clear and commonly used electronic format.

17. Accessing or Modifying Your Information

You may update and correct your basic profile information at any time by accessing your account settings. If you wish to request access to or correct other personal information we hold about You, you may contact us at connect@lilliacare.ai

18. Erasure of Your Information

You have the right to request the erasure of Your personal information when it is no longer necessary for the purpose for which it was collected or otherwise processed. To exercise this right, please contact us at connect@lilliacare.ai

19. Withdrawal of Consent

You have the right to withdraw Your consent to the processing of Your personal information at any time. You may exercise this right by sending a clear written request to Our support team at connect@lilliacare.ai.

Upon receiving your request to withdraw consent, We will, within a reasonable time, cease the processing of Your personal information. We may continue to process Your data if required or authorised for another lawful purpose under applicable law.

20. Regarding the communication of Users' personal data to partners

Subject to your express consent below, Lillia may transmit your anonymized and de-identified data to its partners involved in the development of health tools. Your health or health monitoring data will be communicated to these partners only in an anonymized and de-identified form for the purposes of research, product development, studies and statistical analysis.

In addition, subject to your express consent below, your contact details, including your full name and email address, may also be communicated to partners if you wish to receive messages from them related to the news of their products and services.

21. Grievance Redressal and Lodging a Complaint

You have the right to file a complaint with the competent data protection authority if You believe Your personal information has been processed in violation of applicable law or Your rights.

We encourage You to first contact Our designated Grievance Officer at customersupport@lilliacare.ai with any questions, concerns, or reports of potential privacy breaches. The Grievance Officer will address all data protection and privacy-related issues promptly.

If Your concerns remain unresolved, You may approach the relevant data protection authority in Your jurisdiction. We will cooperate openly and transparently with such authorities.

22. Contact Lillia

If you have any questions about this Privacy Policy, our policies and practices concerning the Platform, your rights under this statement, and your dealings with the Website or the App please contact us at connect@lilliacare.ai

For further information please contact us by filling the form and provide the necessary details.