Privacy Policy
Last updated: January 2026
Introduction
Mamidi Health ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.
Information We Collect
We may collect information about you in a variety of ways:
Personal Data
We may collect personally identifiable information, such as your name, email address, phone number, and medical history when you register for our services, sign up for our newsletter, or contact us. This information is collected with your consent and is necessary for us to provide our services, including those related to genetic diseases.
Genetic Data
When you use our genetic analysis services, we collect and process genetic samples and related data. This is highly sensitive information that we handle with the utmost care and security.
Usage Data
We may also collect information on how our website is accessed and used. This usage data may include information such as your computer's Internet Protocol address, browser type, browser version, the pages of our website that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.
How We Use Your Information
We may use the information we collect from you for the following purposes:
- To provide and maintain our services
- To notify you about changes to our services
- To allow you to participate in interactive features of our services
- To provide customer support
- To gather analysis or valuable information so that we can improve our services
- To monitor the usage of our services
- To detect, prevent, and address technical issues
- To provide you with news, special offers, and general information about other services and events we offer
Data Security
The security of your data is important to us. We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. We use advanced encryption technologies and HIPAA-compliant infrastructure to handle your data.
However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Data Retention
We practice zero-day data retention for genetic analysis data. Your genetic data is processed in real-time and permanently deleted immediately after analysis is complete. We do not store genetic samples or analysis results on our servers beyond the active session.
Personal information (such as contact details) may be retained as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.
HIPAA Compliance
For users in the United States, we comply with the Health Insurance Portability and Accountability Act (HIPAA). We implement appropriate administrative, physical, and technical safeguards to protect the privacy and security of protected health information (PHI).
We maintain Business Associate Agreements (BAA) with our cloud service providers and follow strict protocols for handling health information.
GDPR Compliance
For users in the European Union, we comply with the General Data Protection Regulation (GDPR). We process your personal data based on the following lawful bases:
- Consent: When you submit information through our platform
- Contract: To provide our genetic analysis services
- Legitimate interests: To improve our services and ensure security
You have the right to withdraw consent at any time, request access to your data, and exercise your rights under GDPR as outlined in the "Your Rights" section below.
International Data Transfers
We operate in India and the United States. Your data may be transferred to and processed in either location. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws, including GDPR and other relevant regulations.
Your Rights
Under data protection laws, you have rights including:
- The right to access your personal data
- The right to correct any inaccurate personal data
- The right to request deletion of your personal data
- The right to restrict or object to our processing of your personal data
- The right to data portability
To exercise any of these rights, please contact us using the information provided below.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this page.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us at tarun@mamidi.ai