MyCordlife Mobile Application Privacy Policy

1. Introduction

Welcome to MyCordlife, the official mobile application of Cordlife Sciences India Pvt. Ltd. (“Cordlife India”, “Company”, “we”, “our”, or “us”).

Cordlife India is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, process, store, disclose, retain, and protect your personal data when you access or use the MyCordlife mobile application (“App”) and the services available through it.

This Privacy Policy has been prepared in accordance with the Digital Personal Data Protection Act, 2023 (India) (“DPDP Act”) and other applicable laws.

By downloading, installing, registering for, accessing, or using the App, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. Data Fiduciary

For the purposes of the DPDP Act, the Data Fiduciary is:

Cordlife Sciences India Pvt. Ltd.

213, P.L. Deuty Road
Bishnupur
South 24 Parganas
West Bengal – 743503
India

Email: support@cordlifeindia.com

3. Personal Data We Collect

Depending upon the services you use, we may collect the following personal data.

A. Contact Information

• Full Name
• Mobile Number
• Email Address
• Residential Address (where applicable)

B. Personal Information

• Date of Birth
• Gender

C. Pregnancy & Baby Information

Information voluntarily provided by you, including:

• Expected Delivery Date (EDD)
• Pregnancy Week
• Pregnancy Trimester
• Mother’s Height
• Mother’s Weight
• Baby’s Date of Birth
• Baby Growth Information
• Pregnancy Milestones
• Caregiver Information
• Pregnancy-related health information voluntarily submitted by you

D. Media Uploads

You may voluntarily upload:

• Profile photographs
• Baby bump images
• Photos
• Videos
• Documents

E. Cordlife Customer Information

Where applicable:

• Customer ID
• Banking Plan
• Subscription Details
• Laboratory Report Requests
• Service History

F. Device Information

• Device Model
• Operating System
• Device Identifier
• IP Address
• App Version
• Mobile Network
• Device Diagnostics
• Crash Reports

G. Usage Information

• Pages Viewed
• Feature Usage
• Session Activity
• Notification Interactions
• Search History
• Preferences

4. Purpose of Processing Personal Data

Your personal data is processed for the following purposes:

• Creating and managing your account
• Authenticating your identity using OTP
• Providing pregnancy tracking
• Displaying baby milestones
• Providing educational content
• Managing your Cordlife services
• Processing laboratory report requests
• Sending reminders and notifications
• Customer support
• Security monitoring
• Fraud prevention
• Improving application performance
• Compliance with legal obligations

We process only such personal data as is reasonably necessary for these purposes.

5. Consent

By using the App, you provide your free, specific, informed, unconditional, and unambiguous consent for the processing of your personal data for the purposes described in this Privacy Policy.

Where required under applicable law, we will obtain fresh consent before processing personal data for any new purpose. You may withdraw your consent at any time by contacting us or through available account settings. Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal.

6. Permissions Requested

The App may request access to:

Camera

To upload:

• Profile photographs
• Images
• Videos
• Supporting documents

Storage / Photos

To:

• Upload media
• Save downloaded reports
• Store application-related documents

Notifications

To send:

• Pregnancy reminders
• Baby milestone updates
• Vaccination reminders
• Appointment reminders
• Educational content
• Service updates

You may revoke permissions through your device settings.

7. Health Information

The App may process pregnancy and maternal health-related information voluntarily submitted by you.

This information is used solely for:

• Pregnancy tracking
• Personalized content
• Baby development information
• Cordlife services

We do not sell, rent, or use health information for advertising or profiling.

8. AI-Generated Images

Some illustrations and images displayed within the App are generated using Artificial Intelligence (AI).

These images are intended solely for educational and illustrative purposes.

They do not claim ownership of, reproduce, or intentionally infringe the copyright or intellectual property rights of any third party.

Any resemblance to actual persons or events is purely coincidental unless specifically identified.

9. Third-Party Services

The App uses trusted third-party service providers to deliver certain features.

These include:

Firebase (Google)

Used for:

• Firebase Analytics
• Firebase Crashlytics
• Firebase Cloud Messaging

These providers process only the minimum information necessary to perform their services and are contractually obligated to maintain appropriate confidentiality and security.

10. Sharing of Personal Data

We do not sell or rent your personal data.

Your personal data may be shared only with:

• Within the Cordlife Group
• Authorized service providers
• Laboratory partners
• Technology partners
• Government authorities where legally required
• Courts or regulatory bodies
• To investigate fraud or protect our legal rights

Every recipient is required to maintain appropriate confidentiality, security, and data protection safeguards in accordance with applicable laws.

Data Deletion Request

You may request the deletion of your personal data at any time by sending an email to support@cordlifeindia.com. Upon successful verification of your identity and subject to applicable legal, regulatory, and contractual retention requirements, we will process your request and delete your personal data within 15 working days. Where certain information is required to be retained under applicable law or for legitimate business purposes, such information will be retained only for the period mandated by law.

11. Cross-Border Data Transfers

Your personal data may be processed or stored on servers located in India or other jurisdictions where Cordlife Group or its authorized service providers operate.

Where personal data is transferred outside India, such transfers shall be made in accordance with applicable laws and appropriate safeguards.

12. Data Security

We maintain appropriate technical and organizational safeguards including:

• Encryption of sensitive data in transit
• Secure cloud infrastructure
• Secure authentication
• Access controls
• Role-based access
• Periodic security monitoring
• Incident response procedures
• Audit logging where applicable

Despite these measures, no electronic system is completely secure.

13. Data Retention

Personal data is retained only for:

• Service delivery
• Legal compliance
• Regulatory obligations
• Business record retention
• Dispute resolution

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized.

14. Your Rights under the DPDP Act

Subject to applicable law, you have the right to:

• Obtain a summary of your personal data being processed
• Request correction of inaccurate personal data
• Request completion or updating of personal data
• Request erasure of personal data where legally permissible
• Withdraw consent
• Nominate another individual to exercise your rights in accordance with the DPDP Act
• Seek grievance redressal
• Lodge a complaint with the Data Protection Board of India once operational

We will respond to valid requests within the timelines prescribed by applicable law.

15. Children’s Privacy

The App is intended for adults. We do not knowingly collect personal data directly from children. Where processing relates to children, we will comply with applicable requirements under the DPDP Act, including obtaining verifiable parental consent where required.

16. Cookies and Similar Technologies

The mobile application may use cookies, software development kits (SDKs), device identifiers, and similar technologies to:

• Maintain user sessions
• Improve application performance
• Analyze application usage
• Deliver notifications
• Enhance security

These technologies do not collect more personal data than is necessary for the purposes described in this Privacy Policy.

17. Data Breach Response

If a personal data breach occurs that is likely to impact your rights, we will take appropriate remedial measures and notify the relevant authorities and affected individuals as required under applicable law.

18. Changes to this Privacy Policy

We may revise this Privacy Policy periodically. Material changes will be communicated through:

• The MyCordlife App
• Email
• Other appropriate communication channels

The latest version will always be available within the App.

Last Updated: June 8, 2025

19. Contact Us / Grievance Officer

For any questions, complaints, or requests regarding this Privacy Policy or your personal data, please contact:

Grievance Officer / Data Protection Officer

Cordlife Sciences India Pvt. Ltd.

Email: support@cordlifeindia.com

Address:

213, P.L. Deuty Road
Bishnupur
South 24 Parganas
West Bengal – 743503
India

20. Consent

By downloading, installing, registering for, accessing, or using the MyCordlife application, you expressly consent to the collection, processing, storage, disclosure, retention, and use of your personal data as described in this Privacy Policy.

If you do not agree with this Privacy Policy, please discontinue use of the application. This Privacy Policy shall be governed by the laws of India, including the Digital Personal Data Protection Act, 2023.