HiWox Privacy Policy

HiWox website is owned by HiWox, which is a data controller of your personal data.

We have adopted this Privacy Policy, which determines how we are processing the information collected by HiWox, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using HiWox website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

Before the legal detail: here's what HiWox does and doesn't do with your data.

• We collect your wellness data (physical, nutritional, mental, and other assessment data) only to build and improve your personalized 90-day plan.

• Your data is shared only with your assigned HiWox Captain and in-house consultants directly supporting your program — never sold to advertisers.

• You can access, correct, or request deletion of your data at any time.

• We only share data with partner gyms, clinics, or labs when it's necessary to deliver a specific service you've opted into, and only with your consent.

The full policy below explains this in complete legal detail, including your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who This Policy Covers

This Privacy Policy applies to all users of the HiWox platform, including the HiWox mobile app, website (hiwox.com), and any wellness assessment, program, or service delivered by HiWox, its Captains, in-house consultants, or partner network. By using HiWox, you agree to the practices described in this policy.

2. What Data We Collect

To build your personalized 90-day wellness plan, HiWox collects data across the following categories:

Personal identification data: Name, contact number, email address, age, gender, and city.

Wellness assessment data: Information collected across our nine wellness dimensions — physical (measurements, activity levels, body composition), nutritional (food habits, hydration), mental (stress, mood, focus), emotional, social, occupational, financial (spending behavior, financial stress indicators), environmental (living and sleep environment), and purpose/personal growth (goals and motivations).

Usage and technical data: App interaction data, device information, and log data collected automatically when you use the HiWox app or website.

Communication data: Records of your interactions with your HiWox Captain and in-house consultants, including check-ins and support conversations.

Optional data: Baseline photos, if you choose to provide them as part of your assessment.

3. Why We Collect This Data

We process your data only for the following specified purposes, consistent with the DPDP Act's requirement that data be collected for clear, stated reasons:

• To conduct your comprehensive wellness assessment and generate your wellness score across all nine dimensions

• To create, personalize, and adjust your 90-day wellness plan and daily/weekly rituals

• To enable your HiWox Captain and consultants to provide accountability, follow-up, and plan adjustments

• To track your progress and generate your transformation report

• To connect you with relevant partner providers (gyms, clinics, labs) where you've opted into a specific service

• To improve the HiWox platform and wellness intelligence system over time

• To communicate with you about your program, including reminders and check-ins

We do not use your wellness data for advertising or sell it to third parties for marketing purposes.

4. Legal Basis for Processing (Consent)

Under the DPDP Act, HiWox processes your personal data primarily on the basis of your explicit, informed consent, collected at the time of onboarding through a clear and specific consent notice — separate from our Terms of Service, as required by law. You may withdraw consent at any time, and withdrawal is as easy as giving it. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, but may affect our ability to continue delivering your personalized program.

5. Who We Share Your Data With

Your data is shared only as necessary to deliver the HiWox program:

• Your HiWox Captain: Has access to your assessment data and progress to provide onboarding, accountability, and support.

• In-house consultants: Access relevant data to interpret your assessment, design your plan, and review progress.

• Partner network (gyms, clinics, hospitals, diagnostic labs): Receive only the specific data necessary to deliver a service you've opted into — for example, a lab referral shares only what's needed for that test, not your full wellness profile.

• Service providers: Third-party providers who support our technical infrastructure (such as cloud hosting) under contractual data protection obligations, consistent with DPDP requirements for Data Processors.

We do not share your data with advertisers, data brokers, or any party for purposes unrelated to delivering your HiWox program, without your separate, explicit consent.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. In line with DPDP Rules, we also retain certain processing logs for a minimum period as mandated by law. Once your data is no longer needed for these purposes and you have not engaged with HiWox for the applicable period, we will securely erase it, except where retention is required for legal compliance.

7. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of the personal data HiWox holds about you and how it's being processed

• Correct and update inaccurate or incomplete data

• Request erasure of your data, subject to legal retention requirements

• Withdraw consent at any time, through the same ease as providing it

• Nominate another individual to exercise these rights on your behalf in case of death or incapacity

• Grievance redressal: Raise a complaint with our Grievance Officer, who will respond within a reasonable period, and in no case later than 90 days

To exercise any of these rights, contact us at [privacy@hiwox.com] or through the in-app support option.

8. Data Security

We implement reasonable technical and organizational safeguards to protect your data against unauthorized access, alteration, disclosure, or destruction, in line with the security standards required under the DPDP Rules. This includes secure data storage, access controls limiting who within HiWox can view your data, and encrypted data transmission.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under applicable law.

9. Children's Data

HiWox services are not directed at individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor without verifiable parental or guardian consent, we will take steps to delete that data promptly.

10. Cookies and Website Data

Our website may use cookies and similar technologies to understand site usage and improve user experience. You can control cookie preferences through your browser settings. This data is used only for website functionality and analytics, not for advertising targeting.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify users of material changes through the app or via email, and the "Last updated" date at the top of this policy will reflect the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact:

Grievance Officer, HiWox Email: support@hiwoxcare.in