Privacy Policy
This Privacy Policy explains how NestOne Group Private Limited (“NestOne”, “we”, “us”, or “our”) — operating the OneMedPro brand and the OneMedPulse mobile application (the “App”) — collects, uses, shares, and protects your personal data when you use the App. We are committed to protecting your privacy and complying with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable Indian law.
1. Who we are
OneMedPulse is a medical-entrance exam preparation app (NEET UG / PG / SS practice, mock tests, and analytics) published by NestOne Group Private Limited under the OneMedPro brand.
Registered office: 974, 23rd Main, 25th A Cross, HSR Layout Sector 2, Bengaluru 560102
2. Information we collect
a) Information you provide
- Account details: name, email address, and mobile number (used for one-time-password sign-in and verification).
- Profile details: your chosen edition (Aspirant / Resident / Specialist), category, home state, target year and study goals, and — depending on edition — student or doctor profile fields you choose to add.
b) Information collected automatically
- Learning activity: practice and mock attempts, answers, scores, time spent, topic mastery, and progress used to power your analytics and recommendations.
- Device & log data: app version, device type/OS, and basic diagnostic logs needed to operate and secure the service.
c) What we do not collect
- We do not collect or store your payment card details. Any future purchases are processed by the Apple App Store or Google Play under their own terms.
- We do not collect sensitive data such as health records, biometrics, or government IDs.
3. How we use your information
- To create and secure your account and deliver one-time passwords (OTP) by SMS and email.
- To provide the core service — serving questions, grading tests, and generating your readiness analytics.
- To personalise practice recommendations and remember your preferences.
- To communicate important service, security, and account messages.
- To maintain, improve, and protect the App against abuse, fraud, and security threats.
4. Legal basis and consent
We process your personal data on the basis of the consent you provide when you sign up and use the App, and, where applicable, to perform our service to you and to comply with law. You may withdraw consent at any time (see “Your rights” below); withdrawal does not affect processing already carried out.
5. Children and minors
Many exam aspirants are minors. If you are under 18, you may use OneMedPulse only with the consent of a parent or legal guardian, and by using the App you confirm that such consent has been obtained. We do not knowingly process a child’s personal data without verifiable parental consent, and we do not use children’s data for tracking, behavioural monitoring, or targeted advertising. If you believe a minor has provided data without consent, contact us and we will delete it.
6. How we share your information
We do not sell your personal data. We share it only with trusted service providers who process it on our behalf under contract, and only as needed to run the App:
| Provider | Purpose |
|---|---|
| Supabase (hosting & database, region Mumbai, India) | Account, content, and learning-activity storage |
| MSG91 | Delivery of mobile OTP by SMS |
| Resend | Delivery of email OTP and service emails |
| Google (Sign-in with Google) | Optional sign-in; we receive your name and email only |
We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the service.
7. Where your data is stored and how we protect it
Your data is stored on infrastructure located in India (Mumbai region). We apply industry-standard safeguards, including encryption in transit, row-level access controls so users can access only their own data, and restricted administrative access. No method of transmission or storage is 100% secure, but we work to protect your data using reasonable technical and organisational measures.
8. Data retention
We retain your personal data for as long as your account is active or as needed to provide the service, and thereafter only as required to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where retention is legally required.
9. Your rights
Under the DPDP Act you have the right to access, correct, and erase your personal data; to withdraw consent; to nominate another individual to exercise your rights in the event of death or incapacity; and to raise a grievance with our Grievance Officer.
To exercise any right, email privacy@onemedpulse.com. You can edit most profile data directly in the App, and you can delete your account from within the App or by contacting us.
10. Grievance Officer
In accordance with the DPDP Act and applicable IT rules, you may contact our Grievance Officer for any concern regarding your personal data:
- Name: The Grievance Officer
- Email: grievance@onemedpulse.com
- Address: 974, 23rd Main, 25th A Cross, HSR Layout Sector 2, Bengaluru 560102
We will acknowledge and address grievances within the timelines prescribed by law.
11. Cookies and analytics
The App uses only the storage necessary to keep you signed in and to operate core features. We do not use third-party advertising trackers or sell behavioural data.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified in the App or by email. Continued use after an update constitutes acceptance of the revised Policy.
13. Contact us
Questions about this Policy or your data: privacy@onemedpulse.com · Support: support@onemedpulse.com