✕ Close

Privacy Policy

Nereus Technologies Private Limited ("Nereus", "Company", "we", "our", or "us") is committed to protecting personal data and processing such data responsibly, transparently, and securely in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), rules issued thereunder, and other applicable laws in force in India. For the purposes of the DPDP Act, Nereus Technologies Private Limited acts as a Data Fiduciary in relation to personal data processed under this Privacy Policy.

Notice to Individuals

By providing your personal data to the Company, you acknowledge that you have been informed of:

• the categories of personal data being collected;
• the purposes for which such personal data will be processed;
• the categories of persons with whom such personal data may be shared;
• the rights available to you under applicable law;
• the procedure for withdrawal of consent;
• the contact details of the Grievance Officer; and
• the manner in which you may contact the Company regarding privacy-related concerns.

Where consent forms the basis of processing, consent may be withdrawn at any time in accordance with this Policy.

Information We Collect

A. Personal Data

• Full name
• Email address
• Mobile number
• Date of birth or age
• Gender
• Emergency contact information
• Demographic information
• Registration and account details

B. Physiological Data

• Height, weight, body measurements
• Training history and injury history
• Rehabilitation information voluntarily disclosed
• Fitness and physical condition information voluntarily disclosed

C. Biomechanical Data

• Motion analysis data, wearable sensor data
• Gait analysis, posture analysis, mobility measurements
• Force and movement metrics, performance assessment information

D. Survey Data

• Feedback forms, product evaluations, research questionnaires, customer experience responses

E. Recordings

• Photographs, video recordings, audio recordings, screen recordings

F. Technical Data

• Device information, browser information, IP address, website usage information, application logs, security and audit logs

G. Medical Records and Clinical Information

Where separately authorised, the Company may collect, access, and process medical records and clinical information from healthcare providers, including inpatient and outpatient records, laboratory and pathology reports, diagnostic and imaging records, prescriptions, surgical records, rehabilitation and physiotherapy records, and other health-related information.

Purposes of Processing

• Performance assessment and reporting
• Movement and rehabilitation analysis
• Clinical validation and scientific research
• Product development and testing
• Customer support and appointment management
• Fraud prevention, information security, regulatory compliance
• Legal obligations and dispute resolution
• Development, training, and validation of AI/ML systems using anonymised datasets

Legal Basis of Processing

Processing is carried out on the basis of consent provided by the individual, compliance with legal obligations, or other lawful grounds under applicable law.

Data Sharing and Disclosure

Personal data may be shared with healthcare professionals, physiotherapists, research institutions, academic collaborators, technology vendors, cloud hosting and analytics providers, professional advisors, auditors, and governmental or regulatory authorities where legally required. The Company takes reasonable measures to ensure recipients are subject to appropriate confidentiality and security obligations.

Cross-Border Processing

Personal data may be processed or stored through authorised service providers or infrastructure located inside or outside India, subject to applicable legal requirements and appropriate contractual and technical safeguards.

Data Retention

• Participant Registration Records — 3 years
• Assessment Records — 7 years
• Research Data — 7 years
• Video and Audio Recordings — 2 years
• Security and Audit Logs — minimum 1 year
• Anonymised and Aggregated Data — may be retained indefinitely where permitted by law

Data Security

The Company maintains encryption controls, access controls, authentication mechanisms, audit logging, security monitoring, backup systems, vendor risk assessments, employee confidentiality obligations, and incident response procedures.

Artificial Intelligence and Machine Learning

The Company may use anonymised, aggregated, or de-identified datasets for AI and ML research, development, testing, and validation. Where reasonably practicable, personally identifiable information shall not be used in AI training datasets.

Your Rights

Subject to applicable law, you may request access to, correction or deletion of your personal data, withdraw consent, submit grievances, or nominate another individual to exercise rights on your behalf. Requests may be submitted to info@nereustechnologies.com. The Company shall acknowledge requests within seven (7) business days and respond within thirty (30) days.

Withdrawal of Consent

Consent may be withdrawn at any time by contacting info@nereustechnologies.com. Withdrawal shall not affect the lawfulness of processing undertaken before such withdrawal.

Children's Data

The Company's services are intended for individuals aged 18 years and above. The Company does not knowingly collect personal data from children without complying with applicable legal requirements.

Grievance Officer

Aahana Nagarali
info@nereustechnologies.com

Changes to this Policy

Updated versions shall be published on the Company's website and shall become effective upon publication unless otherwise stated.

Contact

Nereus Technologies Private Limited
D-510, Sterling Residency, Dollars Colony
RMV Extension II Stage, Bengaluru – 560094, Karnataka, India
info@nereustechnologies.com · www.nereustechnologies.com