DPDP Act notice

This notice describes how Hormones River Media, the publisher of NursingAtoms, processes your personal data under the Digital Personal Data Protection Act 2023 (“DPDP Act”).

Data fiduciary

Hormones River Media is the data fiduciary for your personal data processed via NursingAtoms.
Grievance contact: privacy@nursingatoms.in

Personal data we process

• Email address and full name (account)
• Profile fields (role, specialty, experience level)
• Content you create on the platform (notes, saves, submissions)
• Audio captures from Voice-to-Research and Spark (private to your account)
• Basic usage logs (pageviews, feature-use)

Lawful basis for processing

• Your consent (DPDP §6) — for marketing communications, optional profile fields, and AI training opt-in (where applicable).
• Performance of contract — to provide the features of your account (sign-in, save, capture, etc.).
• Specified legitimate uses (DPDP §7) — for fraud prevention, security, and legal compliance.

Your rights as a data principal

Under the DPDP Act, you have the right to:

• Access your personal data we hold (§11). Request via privacy@nursingatoms.in or your profile page.
• Correction and erasure (§12). You can edit most fields directly; delete via your profile page or request via email.
• Withdraw consent at any time (§6(4)). The effect on prior lawful processing is preserved.
• Grievance redressal (§13). Email privacy@nursingatoms.in; we respond within 30 days. If unresolved, you may lodge a complaint with the Data Protection Board of India.
• Nominate another individual to exercise these rights in the event of your death or incapacity (§14).

Sensitive personal data

We do not process health data of patients via this platform. Recordings nurses make on Voice-to-Research or Spark are intended to be clinician observations only — patient identifiers are explicitly prohibited and a privacy acknowledgment is required before recording.

Where you optionally share data that the DPDP Act treats as sensitive (caste, religion, biometric, etc.) we process it only with your explicit consent and only for the purpose consented.

Retention

• Account data: until you close the account
• Audio captures: until you delete them. We also delete automatically after 12 months of account inactivity unless you renew consent.
• Usage logs: 18 months, then aggregated and anonymized

Cross-border transfers

Our infrastructure (Supabase Mumbai, Cloudflare R2) is hosted within India. Email is processed via Brevo (EU) under standard contractual clauses.

Contact and complaints

Data fiduciary: Hormones River Media, India
Grievance officer: privacy@nursingatoms.in
Indian regulatory complaint: Data Protection Board of India (constituted under DPDP Act 2023).