Legal

Privacy Policy

Effective 10 July 2026 · BeAgeless Health Solutions Pvt Ltd

BeAgeless Health Solutions Pvt Ltd ("we", "us", "our") operates Biology By Design™ (the "Platform"). We respect your privacy and are committed to protecting your personal data, including sensitive health information. This Privacy Policy explains what we collect, how we use and protect it, and your rights, in line with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and its rules, and other applicable Indian law.

1. Scope & consent

This policy applies to personal data we collect through the Platform. By using the Platform and providing your information, you consent to the collection and use of your data as described here. Where we process sensitive personal data (such as health information), we do so on the basis of your explicit consent, which you may withdraw at any time (see Section 8).

2. Information we collect

Information you provide

  • Account details: name, email address, and phone number.
  • Profile & onboarding: details such as age, sex assigned at birth, life stage, goals, and symptoms you choose to share.
  • Health intake & Root Cause Analysis (RCA) data: health questionnaire responses and documents you upload, which may include blood, lab, microbiome, or genetic reports. This is sensitive personal data.
  • Content: posts, comments, notes, and other content you submit.
  • Communications: messages and support requests you send us.

Information collected automatically

  • Usage & device data: app activity, approximate log data, device/browser type, and similar technical information used to operate and secure the Platform.
  • Local storage: we use browser local/session storage and essential cookies to keep you signed in and to make the app function. We do not use these for third-party advertising.

Payment information

Payments are processed by our payment gateway, Razorpay. Your card, UPI, or bank details are collected and processed directly by Razorpay under its own privacy policy. We do not store your full card or bank account numbers. We receive limited transaction information (such as payment status and a reference ID) to confirm and service your purchase.

3. Sensitive personal data & health information

Health, lab, and genetic information you share is sensitive personal data and is treated with additional care. We collect and process it only with your explicit consent and only to provide the services you request (for example, to prepare your RCA report and personalise your experience). We do not sell this data, and we do not use it for advertising.

4. How we use your information

  • to create and manage your account and provide the Platform's features;
  • to process your intake and prepare and deliver your RCA report and other tools you use;
  • to personalise your dashboard, recommendations, and content;
  • to process payments and provide order confirmations, receipts, and support;
  • to communicate with you about your account, purchases, and service updates;
  • to maintain security, prevent fraud and abuse, and debug and improve the Platform;
  • to comply with legal obligations and enforce our terms.

5. How we share information

We do not sell your personal data. We share it only as follows:

  • Service providers (sub-processors) who help us run the Platform, under confidentiality and data-protection obligations, including:
    • Razorpay for payment processing;
    • Amazon Web Services (AWS) for cloud hosting, database, and storage (hosted in the AWS Mumbai, India region);
    • Amazon Cognito for account authentication;
    • Mux for video delivery of course content.
  • Legal & safety: where required by law, regulation, legal process, or to protect the rights, safety, and security of our users, the public, or BeAgeless Health Solutions Pvt Ltd.
  • Business transfers: in connection with a merger, acquisition, or reorganisation, subject to this policy.

6. Where your data is stored

Your data is stored and processed on secure cloud infrastructure hosted in India (AWS Mumbai / ap-south-1 region). Some sub-processors may process limited data outside India in accordance with applicable law and appropriate safeguards.

7. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Platform, and thereafter only as required to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymise it. You can request deletion as described below.

8. Your rights

Subject to applicable law, you have the right to:

  • access and obtain a copy of your personal data;
  • correct or update inaccurate or incomplete data;
  • erase your data / request deletion of your account;
  • withdraw consent to processing (including for sensitive data), which will not affect processing done before withdrawal;
  • nominate another person to exercise your rights in the event of death or incapacity, as provided under applicable law;
  • raise a grievance with our Grievance Officer.

You can manage your profile and submit data export or deletion requests from within the app (Profile → Privacy), or contact us at support@tanyamalikchawla.com. Withdrawing consent to essential processing may mean we can no longer provide some or all of the Platform.

9. Security

We use reasonable technical and organisational security measures, such as encryption in transit, access controls, and secure cloud infrastructure, to protect your data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, but we work hard to protect your information and to address any incident promptly and in line with the law.

10. Children

The Platform is not intended for anyone under 18 years of age, and we do not knowingly collect data from children. If you believe a child has provided us data, please contact us so we can remove it.

11. Cookies & tracking

We use only essential cookies and local storage needed to sign you in and operate the app. We do not use third-party advertising or cross-site tracking cookies.

12. Third-party links

The Platform may link to third-party sites or services with their own privacy practices. We are not responsible for those practices; please review their policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a revised effective date. Material changes will be notified through the Platform where appropriate.

14. Grievance Officer & contact

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer with any questions, requests, or complaints about your data:

  • Grievance Officer: Saurabh Saxena
  • BeAgeless Health Solutions Pvt Ltd
  • 774, Sector 21C, Faridabad, Haryana 121001, India
  • Email: support@tanyamalikchawla.com
  • Phone: +91 98101 18660

We will acknowledge and address your request within the timelines required by applicable law.