Privacy Policy
Last updated: 26 September 2026
HeartMitra is operated by SGarg Ventures Private Limited.
This policy covers heartmitra.com and the HeartMitra app at app.heartmitra.com. In this policy, "we", "us" and "our" mean SGarg Ventures Private Limited.
1. Information we collect
We collect:
- Details you give when you sign up, such as your name and your phone number or email address.
- Health information you give us: your heart event (for example, a heart attack, stent or bypass), your medicines, your answers to daily check-ins about how you feel, and the activity you log, such as walks.
- Your language preference (Hindi or English).
- Technical information collected automatically when you use the site or app: your IP address, your device and browser type, and the pages or screens you use, as held in standard server logs.
- Anything you send us by email.
2. How we use your information
We use your information to:
- run your programme — set your starting level, build your daily plan, send medicine reminders, and move you between levels;
- show warning-sign guidance when a check-in needs it;
- reply to you;
- keep the service secure and working; and
- improve it.
We do not use your health information for advertising.
3. Your health information
We treat your health information as sensitive. We collect it only with your consent, and we use it only to provide the programme. We do not sell it. We do not share it with your doctor, employer or insurer unless you ask us to. HeartMitra does not prescribe medicines or give a diagnosis.
4. Consent and the law
We process personal data under India's Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000 and its rules. Your consent is the basis for processing. You can withdraw it at any time. Withdrawing may mean we can no longer provide the programme. Withdrawal does not affect any processing we did before it.
5. Who we share it with
We share personal data only in these cases:
- Service providers who help us run HeartMitra, such as hosting, messaging and email. They are bound to use it only on our instructions.
- Authorities, where the law requires it.
- A successor, if the business is merged or sold, under this policy's protections.
We do not sell personal data.
6. Cookies and third-party services
This website does not use advertising or analytics cookies. It loads fonts from Google Fonts, so your browser sends your IP address to Google when the page loads. You can read Google's privacy policy at policies.google.com/privacy. The app uses cookies or similar browser storage that it needs to keep you signed in.
7. How long we keep it
We keep your information for as long as your account is active and as long as we need it to provide the programme. After you delete your account or withdraw consent, we delete or anonymise it within a reasonable time, unless the law requires us to keep it longer.
8. How we protect it
We use reasonable security safeguards appropriate to the sensitivity of health information, and we limit access to the people who need it. No system is perfectly secure. If a breach happens, we will notify you and the authorities as the law requires.
9. Your rights
You can:
- access a summary of your data;
- correct or update it;
- have it erased;
- withdraw consent;
- raise a grievance; and
- nominate someone to exercise your rights if you die or become unable to.
To do any of these, email hello@heartmitra.com.
10. Children
HeartMitra is meant for adults aged 18 and over. We do not knowingly collect children's data. If you think a child has given us their data, contact us and we will delete it.
11. Contact and grievances
SGarg Ventures Private Limited. You can reach us at hello@heartmitra.com. We will acknowledge and resolve grievances within the time the law requires. If you are not satisfied, you may complain to the Data Protection Board of India.
12. Changes to this policy
We may update this policy. We will change the "Last updated" date above, and for significant changes we will tell you in the app or by email.