Privacy Policy
Last updated: 20 August 2026
This Privacy Policy explains how personal data is collected, used, stored and protected through this website, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Anayah is currently pre-launch. This website provides information about what is being built and allows visitors to join a waitlist. This Policy applies only to that activity and will be revised before any product or service is launched.
1. Data Fiduciary
For the purposes of the DPDP Act, the Data Fiduciary is Nyssa Desai. No company has yet been incorporated; this Policy will be updated to reflect the entity once registration is complete.
All communication regarding this Policy, including requests and grievances, should be sent to privacy@anayahlife.com.
2. Personal Data Collected
2.1 Where you join the waitlist, the following personal data is collected:
- Your email address;
- Your response, if provided, to an optional question regarding your circumstances (whether you have a diagnosis, suspect a condition, or are generally interested);
- The date and time on which you provided consent;
- The source through which you arrived at this website, such as a search engine or referring link.
2.2 Where you browse this website only, anonymous usage statistics are collected, comprising pages viewed, approximate geographic region, and device type. This data is aggregated, does not use cookies, and cannot be used to identify you.
2.3 The following are not collected at any point: symptoms, medical history, test results, clinical records, your name, telephone number, postal address, date of birth, government identifiers, or payment information.
3. Nature of the Optional Question
Where you choose to answer the optional question described at 2.1(b), your response is stored in association with your email address and constitutes information relating to your health.
This question may be skipped. The waitlist functions without it. You may subsequently request deletion of this response alone while remaining on the waitlist.
4. Purposes of Processing
Personal data is processed for the following purposes only:
- To notify you when Anayah becomes available;
- To understand the composition of the waitlist, so that the service developed is relevant to those who have expressed interest.
Personal data will not be processed for any other purpose without obtaining fresh consent.
5. Legal Basis
Processing is carried out on the basis of your consent, given by affirmative action at the point of submission, in accordance with Section 6 of the DPDP Act. Consent is limited to the purposes specified at Clause 4.
You may withdraw consent at any time, with the same ease as it was given, by writing to the address at Clause 1. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
6. Disclosure and Data Processors
Personal data is not sold, rented, licensed, or disclosed for commercial or marketing purposes.
The following Data Processors process personal data on behalf of the Data Fiduciary, under contract and solely for the purposes at Clause 4:
- Supabase, for database hosting;
- Vercel, for website hosting;
- Plausible Analytics, for the anonymous usage statistics described at 2.2.
Personal data may be disclosed to a third party only where required by applicable law.
7. Retention
Personal data is retained until the earlier of:
- Anayah becoming available and the notification at 4(a) having been sent;
- Receipt of a deletion request from you; or
- The expiry of twenty-four months from the date of collection, where Anayah has not become available. In this event, personal data will be erased and you will be notified.
8. Rights of the Data Principal
Under the DPDP Act you have the right to:
- Access a summary of the personal data held about you and the processing undertaken;
- Correction of inaccurate or incomplete personal data;
- Erasure of your personal data, in whole or in part;
- Withdraw consent, as described at Clause 5;
- Nominate another individual to exercise your rights in the event of your death or incapacity;
- Grievance redressal, as described at Clause 10.
Requests should be sent to the address at Clause 1. Receipt will be acknowledged within seven days and requests will be given effect within thirty days.
9. Security Safeguards
Reasonable security safeguards are maintained to prevent personal data breaches. The database is access-controlled and readable only by the Data Fiduciary. The website is served over an encrypted connection. Advertising trackers are not used.
In the event of a personal data breach, affected Data Principals and the Data Protection Board of India will be notified in accordance with Section 8(6) of the DPDP Act.
10. Grievance Redressal
Any grievance concerning the processing of your personal data should be addressed in the first instance to privacy@anayahlife.com.
Where a grievance is not resolved to your satisfaction, you may make a complaint to the Data Protection Board of India, established under the DPDP Act.
11. Children
This website is intended for persons aged eighteen years and above. The DPDP Act requires verifiable parental consent for the processing of a child's personal data, and this website does not currently have the means to obtain it.
Persons under the age of eighteen should not join the waitlist. Where the Data Fiduciary becomes aware that personal data of a person under eighteen has been collected, it will be erased.
12. Amendments
This Policy may be amended from time to time. Where an amendment materially affects personal data already collected, notice will be given to affected Data Principals before the amendment takes effect. Other amendments will be reflected by the date at the head of this Policy.