Privacy Policy
Last Updated: 1 January 2026.
This Privacy Policy (“Policy”) describes how MEDORAYA HEALTH PRIVATE LIMITED, operating the YTAL brand (“we,” “us,” “our,” or the “Company”), collects, uses, discloses, processes, stores, protects, and transfers personal and sensitive information (“Personal Data” or “Data”) when you use our services, including our websites, mobile applications, web dashboards, APIs, SDKs, integrations, and related platforms and all other services (collectively, the “Services”).
This Policy applies to users worldwide, including individuals and organizations located in India.
Who We Are & Scope
We are a Private Limited company incorporated in India with registered address at HOUSE NUMBER 27 FLOOR 1ST, BLOCK-F PKT 3 SEC 11, ROHINI SEC-11, DELHI, NORTH WEST DELHI - 110085, DELHI, INDIA. This Policy applies to all users of our Services, including patients, caregivers, clinical professionals, hospital staff, insurers, researchers, government entities, enterprise customers, and others.
Consent and Acceptance of This Privacy Policy
By accessing, registering for, or using the Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. Where required by applicable law, your consent shall be treated as explicit consent for the processing of sensitive personal data, health data, and consumer health data.
Information We Collect
We collect and process health data and other sensitive personal data only with your explicit consent or as otherwise permitted under applicable law. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice.
Personal Information
- Name, username, email address, phone number, date of birth, address, account login credentials, profile details, billing/contact information, device information, usage data, IP address, cookies, language settings, and general location information.
- Precise geolocation information, including GPS location, where authorized by you, such as to identify clinical trial sites near your location.
Healthcare Data & Sensitive Personal Information
- Medical history, diagnoses, treatments, medications, symptoms, lab results, clinical notes, EMR data, oncology-related data, wearable sensor data, care plans, caregiver notes, clinician annotations, demographic information relevant to your condition or treatment, family disease history, genetic information, and insurance-related health information.
Third-Party and Other Data
- Data provided by hospitals, insurers, researchers, organizations, integration partners, cloud providers, analytics providers, AI services, communications with us, marketing preferences, and other information permitted by applicable law.
How We Collect Data
- Directly from you when you register, log in, complete forms, or interact with our Services.
- Automatically when you use our Services, including through cookies and analytics.
- From your organization, healthcare provider, hospital, insurer, enterprise partner, identity provider, platform integration, AI/ML service, or other reliable sources.
Purposes for Data Use
- To provide account creation, authentication, support, clinical care coordination, telehealth functions, records access, notifications, alerts, health summaries, clinical decision support, and AI-driven services.
- To operate, analyze, maintain, personalize, improve, and expand our Services, including research, quality improvement, analytics, product development, forecasting, and strategic planning.
- To promote, advertise, and market our Services to you, subject to applicable consent requirements.
- To comply with laws and regulatory requirements, enforce our Terms of Service, protect safety, defend legal rights, and meet administrative obligations.
- For research and AI/analytics, including training, evaluation, or improvement of AI/ML models and population health research, with reasonable de-identification or anonymization where feasible and required by law.
Legal Basis for Processing
Where applicable, we rely on consent, performance of contract, legal compliance, and legitimate interests to process Personal Data.
Sharing and Disclosure of Data
We may share data with cloud infrastructure providers, AI or analytics providers, advertisement providers, email/SMS platforms, payment processors, research partners, related companies, professional advisors, healthcare organizations, hospitals, insurers, clinical teams, enterprise administrators, government or judicial authorities, and other service providers where necessary to operate the Services or comply with law.
Cross-Border Transfers
Your information may be processed and stored outside your home country where we or our partners operate. When doing so, we apply appropriate safeguards and contractual protections.
Data Retention
We retain your data for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business purposes.
Links to Other Websites
The Services may contain links to third-party websites not operated or controlled by us. This Policy does not apply to those third-party sites, and we suggest contacting those sites directly for their privacy practices.
Security
We implement reasonable security measures appropriate to the sensitivity of the data. However, no system, internet transmission, or email transmission is 100% secure or error-free. In the event of a personal data breach, we may notify affected users and relevant authorities as required by applicable law.
Your Rights
- Request withdrawal of consent, restriction or limitation of processing, information about processing and sharing, access or download of your information, correction of inaccuracies, and nomination of another individual to exercise rights in the event of incapacity or death where permitted by law.
For requests, contact us at hello@ytal.ai.
Children
Our Services are not directed at children under the age of eighteen (18). If we learn that we have collected data from a minor without valid consent, we will delete it.
Automated Decision-Making and AI Use
Our platform may use AI/ML tools, including third-party models, to support decision-making, clinical recommendations, analytics, personalization, and service enhancement. AI outputs may support human workflows but should not replace qualified clinical judgment.
Cookies and Tracking Technologies
We may use cookies and other technologies to collect usage data, support login sessions, improve service performance, and analyze trends.
Other Terms and Conditions
Your access to and use of the Services is subject to the Terms of Service at https://ytal.ai/terms-of-service.
Changes to this Policy
We may update this Policy from time to time. The updated version will be posted with a new “Last Updated” date. Your continued access to or use of the Services after any update constitutes your acceptance of the updated Policy, subject to applicable law.
Contact Us
SANCHIT SHARMA
Email: hello@ytal.ai
Address: HOUSE NUMBER 27 FLOOR 1ST, BLOCK-F PKT 3 SEC 11, ROHINI SEC-11, DELHI, NORTH WEST DELHI - 110085, DELHI, INDIA.
Grievance
Grievance Officer: SANCHIT SHARMA
Email: hello@ytal.ai
We will address grievances in accordance with applicable law.