Privacy Policy

1. Information We Collect

We may collect the following types of personal and non-personal information:

• Personal Information: Name, email address, phone number, address, pet details (name, age, breed, medical history), and payment details (processed securely through Payment Gateway).
• Non-Personal Information: Browser type, IP address, time zone, and information about how you interact with our website.
• Device and advertising identifiers: When you use the GuavaSure app and when your device settings allow it, we may collect a device advertising ID. On iOS this is the Identifier for Advertisers (IDFA), after you allow tracking if Apple asks. On Android this is the Google Advertising ID. We use these identifiers for ads measurement and attribution, so we can understand whether our ads led someone to open or use the app.
• App activity: We may collect events such as app open, registration, and onboarding, along with similar product events that help us measure app use and advertising performance. We do not need to list every internal event name here.

2. How We Use Your Information

We use the information we collect to:

• Provide and improve our products and services.
• Process transactions and payments through Payment Gateway.
• Communicate with you regarding your bookings, purchases, or inquiries.
• Customize and personalize your user experience.
• Send updates, promotions, and important notifications (you may opt out anytime).
• Comply with legal and regulatory requirements.
• Measure advertising performance and attribute installs or in-app actions to campaigns (including campaigns run on Meta / Facebook and Instagram).

3. Payment Information and Payment Gateway

We use Payment Gateway as our third-party payment gateway. All payment transactions are processed securely through Payment Gateway and we do not store your full credit/debit card information on our servers. Payment Gateway adheres to PCI-DSS standards and uses industry-standard encryption to protect your data.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. However, we may share your data with:

• Service Providers: Such as hosting, analytics, and payment processors (e.g., Payment Gateway).
• Meta Platforms, Inc. (Facebook / Instagram): We may share device advertising IDs (when allowed) and app or website events with Meta for analytics and advertising performance. This helps us understand which ads work and improve campaigns. Meta processes this information under its own policies. This sharing may count as tracking on iOS when you have authorised App Tracking Transparency.
• Legal Authorities: When required to comply with the law or respond to valid legal requests.

5. Data Security

We implement appropriate security measures to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your data, but we cannot guarantee absolute security.

6. Data Retention

We retain personal information only for as long as it is needed to provide our services, fulfil the purpose for which it was collected, or comply with legal, regulatory, tax, accounting, and insurance record-keeping requirements, including those under the Digital Personal Data Protection Act, 2023 and applicable IRDAI and tax laws.

Typical retention periods are:

• Account and profile information: Retained while your account is active. After a verified deletion request, we delete or anonymize this data within 30 days, except where retention is required as described below.
• Policy, membership, claims, and KYC records: Retained for the duration of the relevant policy or membership and for up to 8 years after it ends, or longer if a claim, dispute, or legal proceeding is outstanding.
• Payment and transaction records: Retained as required by tax and financial regulations, typically up to 8 years.
• Pet health and identity data: Including medical history and biometric nose prints, retained while needed to provide services and for the same periods as related policy or claims records.
• Support communications: Retained as needed to resolve inquiries and for a reasonable period thereafter.
• Cookies, advertising IDs, and analytics: Retained according to your browser or device settings and our cookie and advertising practices, typically for a shorter period than account data. Advertising IDs stay on the device until you reset them. Our partners (such as Meta) may retain measurement data under their own policies.

When information is no longer required, we delete or anonymize it. Insurer partners and payment processors may retain records independently in accordance with their own legal obligations and privacy policies.

7. Cookies and Tracking Technologies

Our website may use cookies, pixels (including the Meta Pixel), and similar technologies to enhance your browsing experience, measure ads, and understand how people use our site. You can modify your browser settings to control or disable cookies.

In the GuavaSure app we may use the Meta SDK and similar tools for the same purposes: analytics and advertising measurement. These tools may collect advertising IDs and the app events described above, when your device settings allow it.

8. Advertising IDs and How to Limit Tracking

You can reset your advertising ID or limit tracking on your device. This does not stop the app from working. It only reduces our ability to measure ads on that device.

• iOS: Open Settings → Privacy (or Privacy & Security) → Tracking. You can turn off "Allow Apps to Request to Track" or deny tracking for GuavaSure. You can also reset your advertising identifier in Apple's privacy settings where Apple provides that option.
• Android: Open your device ads settings (often Settings → Google → Ads, or Settings → Privacy → Ads). You can reset your advertising ID, delete it, or opt out of ads personalisation, depending on your Android version.

If you deny tracking on iOS, we do not use IDFA for Meta ads measurement on that device. We may still receive limited, non-identifying app events that Apple or Meta allow without tracking permission.

9. Your Rights

You may:

• Access the information we hold about you.
• Request correction of any inaccurate or incomplete information.
• Request deletion of your account and personal information.
• Opt-out of marketing communications.

To exercise these rights, please contact us at: [email protected], or use the account deletion request form described below.

10. Account Deletion

You may request deletion of your GuavaSure account and associated personal information at any time. Submit a request through our account deletion form:

You may also email [email protected] from your registered email address or phone number. We will verify your identity before processing the request.

After verification, we delete or anonymize personal data that is not required to be retained by law, typically within 30 days. We may retain certain records (such as insurance policy, claims, KYC, and payment records) where required by applicable insurance, tax, or other laws, or to resolve disputes and prevent fraud. Deleting your GuavaSure account does not by itself cancel an active insurance policy issued by the insurer.

11. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, please contact us for immediate removal.

12. Third-Party Links

Our website and app may contain links to third-party websites or services, including Meta. We are not responsible for their privacy practices or content. Meta explains how it uses data in the Meta Privacy Policy.

13. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. We encourage you to review this page periodically. Continued use of our services after changes are made will indicate your acceptance of the updated policy.