Privacy Policy

Prixini Private Limited (“PRIXINI,” “we,” “us,” or “our”) operates the PRIXINI website at prixini.com and the PRIXINI mobile applications for iOS and Android (together, the “Services”). PRIXINI is an AI-powered longevity, preventive-wellness, and biological-intelligence platform.

We built PRIXINI around a simple belief: understanding your body should not cost you your privacy. This Privacy Policy describes how we handle your personal information, including sensitive health information, and the rights you can exercise over it. Please read it together with our Terms of Service, Health Data Policy, Cookie Policy, Medical Disclaimer, and AI Disclaimer.

Prixini Private Limited is a company incorporated under the Companies Act, 2013, with its registered office in Lucknow, Uttar Pradesh, India. For the personal data we process about you, we act as the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), and as the data controller under the EU/UK General Data Protection Regulation (“GDPR”) where it applies.

This policy applies to information we process through the Services and through related communications (email, notifications, and support). It does not apply to third-party products, services, or websites that we do not control, even where we link to them or integrate with them. Those third parties have their own privacy practices, and we encourage you to review them.

Because PRIXINI is evolving, this policy is written to cover current features and reasonably anticipated future features (such as wearable integrations and additional AI capabilities). We will update it as our Services change.

We collect only what we need to provide and improve the Services. Most sensitive information is provided voluntarily by you and only when you choose to use a feature that requires it. The categories below describe what we may collect.

4.1 Information you provide

4.2 Information generated by the Services

As you use PRIXINI, we generate derived information, including your Biological Age, Longevity Score, health and wellness metrics, trends over time, personalized missions, and AI-generated insights, recommendations, and educational content. These outputs are estimates — see Sections 15–18.

4.3 Information collected automatically

When you use the Services, we automatically collect technical information such as device information, app version, operating system, browser information, language, time zone, IP address, approximate location derived from IP, crash logs, performance metrics, session and usage analytics, and notification preferences.

4.4 Location

We infer approximate (country/region-level) location from your IP address. We collect precise device location only if you explicitly enable it, and you can disable it at any time in your device settings.

4.5 Future wearable & health-platform data

In the future, and only with your explicit permission, PRIXINI may connect to platforms and devices such as Apple Health, Google Fit, Google Health Connect, smart watches, smart scales, and fitness trackers. This could include metrics such as heart rate, sleep, steps, exercise, and calories. You will control these connections and can revoke them at any time. Data obtained through Apple Health or Google Health Connect will never be used for advertising or sold, and will be used only to power the features you enable.

We use your information to operate, secure, and improve the Services, specifically to:

• Create and manage your account and authenticate you;
• Calculate your Biological Age, Longevity Score, and other wellness metrics;
• Generate AI insights, recommendations, personalized missions, and educational content;
• Show trends and progress over time;
• Personalize your experience and notification preferences;
• Provide customer support and respond to your requests;
• Fix bugs, monitor performance, and improve product quality;
• Detect, prevent, and respond to fraud, abuse, and security incidents;
• Send you service-related and, where permitted, product communications;
• Comply with legal obligations and enforce our Terms.

Under the DPDP Act, we process your personal data primarily on the basis of your consent, and for certain “legitimate uses” permitted by law. Where the GDPR applies, we rely on one or more of the following legal bases:

• Consent — for health information, image analysis, marketing, and optional integrations. You may withdraw consent at any time (see Section 11).
• Contract — to provide the Services you request and manage your account.
• Legitimate interests — to secure the Services, prevent abuse, and improve our product, balanced against your rights.
• Legal obligation — to comply with applicable laws, including tax, accounting, and lawful requests.

Where we rely on consent, withdrawing it will not affect the lawfulness of processing carried out before withdrawal.

PRIXINI uses artificial intelligence, including machine-learning and generative models, to analyze the information you provide and generate insights, scores, and recommendations. This processing is automated.

We may use de-identified data to improve the quality and safety of our AI over time. You can contact us to ask questions about automated processing that significantly affects you.

We share information only as needed to run the Services and only with parties bound by appropriate confidentiality and data-protection obligations:

We require our service providers to protect your data and to use it only for the purposes we specify.

We apply reasonable security safeguards designed to protect your information, consistent with the DPDP Act and the “reasonable security practices” expected under the Information Technology Act, 2000 and its rules. These measures include:

• Encryption in transit (HTTPS/TLS) and encryption at rest where applicable;
• Access controls, authentication, and role-based access to limit who can see your data;
• Rate limiting, monitoring, and logging to detect and prevent abuse;
• Backups and infrastructure hardening on reputable cloud platforms;
• Regular security reviews and an incident-response process.

We retain your information for as long as your account is active or as needed to provide the Services, and thereafter only as necessary to comply with legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements.

• Active accounts — retained while you use the Services.
• Inactive accounts — may be flagged, and associated data may be deleted or de-identified after an extended period of inactivity.
• Legal records — certain records (e.g., transaction and tax records) may be retained for periods required by law.
• Backups — residual copies may persist in secure backups for a limited period before being overwritten.

You can request deletion at any time (see Section 11 and our Health Data Policy).

Depending on where you live, you have rights over your personal data. We honour these rights for all users where practicable, and specifically as required by the DPDP Act, the GDPR, and the CCPA.

• Access — obtain a summary of the personal data we process about you;
• Correction — correct inaccurate or incomplete data;
• Deletion / erasure — request deletion of your data and account;
• Export / portability — receive a copy of your data in a portable format;
• Withdraw consent — withdraw consent for processing at any time;
• Restrict / object — request restriction of, or object to, certain processing;
• Nominate — (DPDP Act) nominate an individual to exercise your rights in the event of death or incapacity;
• Non-discrimination — (CCPA) exercise your rights without discriminatory treatment. We do not sell personal information, so no “do not sell” action is required, but you may still contact us.

To exercise any right, email privacy@prixini.com. We may need to verify your identity before acting. You also have the right to lodge a complaint with the Data Protection Board of India or your local supervisory authority.

Our website uses cookies and similar technologies for essential functionality, preferences, security, and analytics. You can manage these through your browser and our consent controls. For full details, see our Cookie Policy.

PRIXINI is not intended for children under 18. We do not knowingly collect personal data from children without verifiable parental or guardian consent. Under the DPDP Act, processing a child’s personal data requires verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

If local law sets a different age of majority or digital consent, we comply with that higher standard where applicable. If you believe a child has provided us data without proper consent, contact privacy@prixini.com and we will take appropriate action.

We use reputable cloud infrastructure that may store or process your information on servers located outside your country, including outside India, where permitted by applicable law. When we transfer personal data internationally, we use appropriate safeguards designed to protect it consistent with this policy and applicable data-protection laws.

If you choose to upload body photos, face photos, or other images, we may analyze them using AI to generate wellness-related estimates. Image analysis can be inaccurate. Results can be affected by lighting, camera quality, angle, image quality, and underlying medical conditions, among other factors. Image-based outputs are informational only and are not a diagnosis.

If you upload blood reports or lab reports, our AI attempts to read and interpret them to provide educational context and insights. These interpretations are AI-generated and may contain inaccuracies, including misreadings of values, units, or reference ranges. They are not a diagnosis and are not a substitute for interpretation by a licensed physician. Always consult a licensed physician about your results.

The Services rely on third parties such as Apple, Google, cloud and database providers, analytics providers, and payment processors. Your use of certain features may also be subject to those third parties’ terms and privacy policies. We are not responsible for the privacy practices of third parties we do not control.

If you have a concern or complaint about how we handle your personal data, you may contact our Grievance Officer, who is designated to address grievances under the DPDP Act and the Information Technology Act, 2000 and applicable rules:

We aim to acknowledge and address grievances within the timelines required by law.

We may update this Privacy Policy from time to time to reflect changes to our Services, technologies, or legal requirements. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Services after an update means you accept the revised policy.

Questions about this policy or your data? We’re here to help.

• Privacy: privacy@prixini.com
• Support: support@prixini.com
• Grievance Officer: grievance@prixini.com
• Prixini Private Limited, Lucknow, Uttar Pradesh, India