Privacy Policy

WellAura Tech Pvt Ltd ("WellAura", "we", "us", "our") is an Indian wellness technology company that operates the B'Well Wellness Navigator platform, including the Total Wellness Index® (TWI) assessment, AI-guided wellness coaching, and institutional wellness programs for individuals, families, corporates, campuses, and schools.

Questions about this policy or your personal data can be sent to hello@wellaura-tech.com or by post to our office in India. This policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian laws.

Information you provide

• Account & profile data — name, email address, phone number, age, and organization details you provide when registering or contacting us.
• Assessment responses — your answers to TWI® wellness assessment items and related wellbeing check-ins.
• Communication data — messages, inquiries, and feedback you send through our forms, email, or WhatsApp.
• Family & dependent data — information about family members or dependents added to family plans, or minors enrolled through school programs with appropriate consent.

Information collected automatically

• Usage data — pages visited, features used, and approximate device and browser information.
• Cookies & similar technologies — used to keep you signed in, remember preferences, and understand how the platform is used. You can control cookies through your browser settings.

Payment information

When you make a payment, it is processed by our trusted payment gateway partners (such as Razorpay) under their own privacy and security standards. We do not collect or store your card numbers, UPI PINs, or banking credentials on our systems — we receive only transaction confirmations and payment status.

• To create and maintain your account and deliver the services you subscribe to.
• To generate your TWI® assessment results, wellness reports, and AI-guided coaching recommendations.
• To operate, secure, troubleshoot, and improve the platform.
• To respond to your inquiries and provide customer support.
• To process payments, prevent fraud, and maintain business records as required by law.
• To send service updates and — only with your consent — newsletters and offers, which you can opt out of at any time.

When you use B'Well through an employer, college, or school, your sponsor sees anonymized, aggregated insights only — for example, overall wellness trends across a group. Sponsors do not receive your raw answers, individual scores, or personally identifiable wellbeing data, except where you explicitly choose to be identified (such as when you opt in to a counselling program) or where we are legally compelled.

We share personal data only in these limited circumstances:

• Service providers — cloud hosting, communications, analytics, and payment processing partners who act on our instructions and protect your data.
• Professional partners — with your explicit request or opt-in, we may connect you with counsellors, psychologists, or healthcare professionals from our verified partner network.
• Legal requirements — where disclosure is required by law, regulation, or valid legal process, including obligations to protect the safety of users or others.
• Business transfers — in the event of a merger, acquisition, or asset sale, with notice to you where required.

We do not sell your personal data or wellness information to anyone.

We protect your information using industry-standard safeguards, including encryption in transit and at rest, role-based access controls, and privacy-by-design architecture. Our infrastructure is hosted primarily in data centres in India. No method of transmission or storage is completely secure, but we work continuously to protect your data against unauthorized access, alteration, disclosure, or destruction.

We retain your personal data only as long as needed to provide the services, comply with legal obligations, resolve disputes, and enforce agreements. Assessment and report data is retained so you can track progress over time; you may request deletion of your account and associated data at any time, subject to legal retention requirements.

Under the DPDP Act and our commitment to transparency, you may:

• Access a summary of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, subject to legal retention requirements.
• Withdraw consent for marketing communications at any time.
• Nominate another individual to exercise your rights where applicable.

To exercise any of these rights, email hello@wellaura-tech.com. We will verify your request and respond within the timelines prescribed by law.

School and campus wellness programs involve minors. We process children's data only with the consent of parents or legal guardians (or the school acting under its own consent framework), collect the minimum data necessary, and apply enhanced protection measures. Parents may review, correct, or request deletion of their child's data at any time.

Our website may link to third-party sites and services. We are not responsible for their privacy practices, and we encourage you to review their policies before sharing any information.

In accordance with the DPDP Act, we have designated a Grievance Officer to address privacy concerns and data-principal requests. You can reach the Grievance Officer at hello@wellaura-tech.com. We aim to acknowledge complaints within 7 days and resolve them within 30 days.

We may update this policy from time to time. The "Last updated" date at the top of this page shows the latest revision, and material changes will be communicated through the platform or by email. Continued use of our services after changes take effect constitutes acceptance of the updated policy.