Built around your family's trust.

1. Who we are

Oreyov Eldercare is a product of Oreyov Technologies, an Indian software company building thoughtful apps for everyday families. When this policy says "we", "us", or "Oreyov", we mean Oreyov Technologies.

By using the Oreyov Eldercare app or service, you agree to the practices described in this policy. If you do not agree, please do not use the service.

2. Information we collect

We collect only the information needed to make Oreyov work well for you. This falls into a few categories:

Account information

• Name of the elder and each connected family member
• Phone number used for account creation and emergency contact
• Email address (optional, used for sign-in and important notifications)
• Relationship between elder and family members (e.g., parent, spouse)

Location information

• Real-time GPS location of the elder's phone while the app is active
• Historical location trail showing the elder's daily journey
• Saved places (home, doctor, temple, etc.) configured by the family

Device information

• Device model, operating system, and app version (for support and bug fixes)
• Battery level (so we can notify family when the elder's phone is running low)
• Network connection status (Wi-Fi or mobile data)

Usage information

• Buttons pressed in the app (e.g., when SOS is tapped or a trip is ended)
• Smart check-in responses from the elder ("I'm okay" confirmations)
• Time spent at each saved place during a trip

3. How we use this information

We use the information collected only for the following purposes:

• Showing the elder's live location to authorized family members
• Sending check-in alerts when the elder has been stationary too long
• Delivering one-tap SOS notifications to all guardians during emergencies
• Providing turn-by-turn directions for "Home in One Tap" and "Direction to Elder"
• Tracking planned trip progress and notifying family at checkpoints
• Improving the app's performance, reliability, and safety features
• Communicating important account or service updates

4. Location tracking & consent

Location is the heart of Oreyov Eldercare — and the most sensitive data we handle. Here's exactly how it works:

Explicit consent required

The Oreyov app on the elder's phone requests Always Allow Location permission during setup. Without this consent, location features will not work. The elder (or their authorized caregiver during setup) must grant this permission for the service to function.

Visible tracking indicator

While Oreyov tracks location, the elder's phone shows a small persistent indicator confirming the app is active. This is to ensure tracking is never hidden or covert.

Pause anytime

The elder can pause location sharing at any time from their phone's settings. When paused, family members receive a clear notification that sharing has been paused — never a misleading message.

Stored securely, used minimally

Location data is encrypted in transit (TLS) and at rest. We retain trip-history location data for up to 90 days for the family to review, after which it is automatically deleted unless the user explicitly chooses to keep it longer.

5. Family & guardian sharing

Oreyov is built around family circles. Each elder has one or more connected guardians (family members or caregivers) who can see their location and receive alerts.

• Only people explicitly invited and added to a family circle can see an elder's data.
• Invitations require a verified phone number to accept.
• The elder (or the family circle owner) can remove any guardian at any time.
• When a guardian is removed, their access to the elder's data is revoked immediately.

We do not allow strangers, third-party services, or government agencies to view family circle data unless required by valid Indian legal process (see "Third-party services" below).

6. How we protect your data

We use industry-standard security practices to keep your family's data safe:

• Encryption in transit: All data sent between the app and our servers uses TLS 1.2 or higher.
• Encryption at rest: Location, account, and identity data are encrypted in our database using AES-256.
• Access controls: Only authorized Oreyov engineers can access production data, and only when required for support or debugging.
• Audit logs: Every internal access to sensitive data is logged and reviewed.
• Vulnerability testing: We perform regular security reviews and welcome responsible disclosure from researchers.

No system is perfect. If we ever experience a data breach affecting your personal information, we will notify you and the relevant authorities promptly, as required by Indian law (including the Digital Personal Data Protection Act, 2023).

7. How long we keep your data

• Account information: Kept while your account is active. Deleted within 30 days of account closure.
• Location history: 90 days, then automatically deleted.
• Check-in & alert logs: 180 days.
• SOS event records: Retained for 12 months for safety review.
• Anonymized usage analytics: Retained indefinitely for product improvement (cannot be linked back to individuals).

You can request earlier deletion of your data at any time (see Section 9).

8. Third-party services

To deliver the Oreyov experience, we rely on a small number of trusted third-party services. We share only the minimum data needed with each:

• Map providers (Google Maps or equivalent) — to display maps and directions. Location data is sent only for the duration of the active session and is not stored by us through these services.
• Cloud hosting (e.g., Google Cloud, AWS) — to store account and location data securely. All data is encrypted and remains under Oreyov's control.
• SMS & notification providers — to send phone-number-based invitations and alerts.
• Payment processors (Razorpay, Stripe, or equivalent) — only if you subscribe to a paid plan. We never store full card numbers on our servers.

We may also disclose information if required by valid Indian legal process (a court order, subpoena, or government request that meets legal standards). We will not voluntarily share data beyond what the law requires.

9. Your rights and choices

Under Indian law (including the Digital Personal Data Protection Act, 2023) and good privacy practice, you have the following rights:

• Access: Request a copy of the personal data we hold about you or your family member.
• Correction: Ask us to correct any inaccurate information.
• Deletion: Request that we delete your account and associated data.
• Data portability: Receive your data in a standard, machine-readable format.
• Withdraw consent: Stop location tracking, leave a family circle, or close the account at any time.
• Complaint: Lodge a complaint with the Data Protection Board of India if you believe your rights have been violated.

To exercise any of these rights, contact us at the email below. We typically respond within 7 business days.

10. Minors and elder consent

Minors (under 18): Oreyov Eldercare is not designed for children. We do not knowingly collect data from anyone under 18. If you believe a minor has used the app without consent, please contact us and we will delete the account immediately.

Elders with cognitive conditions: Oreyov recognizes that some elders may have conditions affecting their ability to give full digital consent. In such cases, a family member or legal guardian should set up and oversee the account. The elder must still be informed that location tracking is active on their phone, and visible indicators must remain enabled. Oreyov supports — and never replaces — open communication and consent within the family.

11. Changes to this policy

If we make significant changes to this policy, we will notify users by email and through the app at least 14 days before the changes take effect. The "Last Updated" date at the top of this page always shows the most recent revision.

Continued use of the service after a policy update means you accept the new terms.