Last updated: 20 August 2026
1. About This Privacy Policy
This Privacy Policy explains how Bionic Environment Solutions Private Limited (“Bionic Environment Solutions”, “UrHealth”, “we”, “us”, or “our”) collects, uses, stores, shares, protects, and otherwise processes personal information when you use the UrHealth mobile application, a paired UrHealth environmental monitoring device, our websites, and related services (collectively, the “Services”).
UrHealth provides environmental exposure and general wellness information. Some information you choose to provide may reveal health status, symptoms, location, or information about another person. We treat such information with particular care.
This is a global privacy notice. Depending on where you live, applicable law may provide additional or different rights and requirements. Where mandatory local law provides greater protection, those requirements apply.
2. Who We Are
The entity responsible for the processing described in this Policy is:
Bionic Environment Solutions Private Limited
Sur-31, 2nd Floor, L. M. College of Pharmacy
Navrangpura, Ahmedabad, Gujarat, India – 380009
Email: customercare@urhealth.app
Where applicable law uses terms such as “controller”, “business”, “organization”, “data fiduciary”, or an equivalent concept, Bionic Environment Solutions Private Limited is the entity responsible for determining the purposes and means of processing described in this Policy, except where another party independently determines its own processing.
3. Information We Collect
3.1 Account information
When you create or use an account, we collect your name, email address, sign-in method (email, Google, or Apple), and a unique account identifier generated by Firebase Authentication. If you use Google or Apple sign-in, we receive the information that provider makes available in accordance with your settings and authorization.
3.2 Personal and health profile information
You may optionally provide age, sex, city or region, who you are monitoring, health conditions, and health symptoms. Health-related information may be considered sensitive, special-category, or otherwise specially protected personal information under applicable law.
3.3 Daily symptom check-ins
If you use the daily check-in feature, we store a timestamped record of the symptoms you select from the available list. These records are separate from the standing health or symptom information in your profile.
3.4 Environmental exposure and device data
When a paired UrHealth device synchronizes with the app, readings may include PM2.5, PM10, PM1, temperature, humidity, ambient noise level, device battery level, and timestamps. Device pairing information, including the Bluetooth identifier and device nickname, may be used to reconnect and organize device data.
Environmental measurements such as particulate matter, temperature, or humidity are not necessarily health information by themselves. When linked to an identifiable user’s location, symptoms, health profile, or exposure history, however, they may reveal information about health, behaviour, or daily activities and may receive additional protection under applicable law.
3.5 Location information
Location Access is optional and is off by default. If you enable it, UrHealth captures a GPS location when environmental data is synchronized and associates that location with the corresponding exposure readings. You may separately use “Get current location” to populate a city or region through reverse geocoding.
UrHealth does not continuously track your location in the background. If a future version introduces continuous or background location collection, we will update the relevant disclosures and permissions before that feature is used.
3.6 Information about people you monitor
You may create a profile for a child, parent, partner, family member, or another person in your care. Depending on the features used, we may process that person’s name, relationship to you, health information, alert preferences, and environmental exposure information.
You must only provide personal or health information about another person if you are legally authorized to do so or have obtained any consent required by applicable law.
3.7 Automated alert recipients
UrHealth includes a planned feature that may allow you to designate another person, such as a family member or caregiver, to receive automated exposure updates by email. This email-delivery feature is not currently active. If and when it is activated, we may process the recipient’s name, email address, and delivery preferences for this purpose. You must have permission or another lawful basis to provide that person’s contact information. We will update this Privacy Policy as appropriate when the feature becomes operational.
3.8 Optional anonymous research contribution
If you enable “Share data for research”, which is off by default, UrHealth creates a separate research contribution containing selected exposure readings and symptom check-ins. The research dataset is designed and assessed to be irreversibly anonymized: it does not contain your name, email address, or account identifier and cannot be linked back to your UrHealth account. If location is included, it is deliberately reduced in precision to an approximate area rather than precise GPS coordinates.
Once information has been irreversibly anonymized, it is no longer associated with an identifiable individual and cannot be retrieved or deleted on an individual basis.
3.9 Technical information
The Services process technical information reasonably necessary for authentication, synchronization, security, time-zone handling, and operation. UrHealth does not currently use advertising, behavioral-tracking, analytics, or crash-reporting SDKs. If material telemetry or third-party analytics are introduced, this Policy and relevant app-store disclosures will be updated before collection begins.
3.10 Information we do not currently collect
UrHealth does not use personal information for behavioral advertising and does not sell or rent personal information. The app does not currently access your camera, microphone, photos, or contacts.
4. How We Use Personal Information
- Create, authenticate, secure, and manage your UrHealth account.
- Provide environmental exposure readings, history, trends, alerts, reminders, and general wellness guidance.
- Maintain the health and symptom information you choose to enter.
- Associate exposure readings with location when you enable the relevant permission.
- Operate dependent profiles, and the automated alert-recipient feature once it becomes active.
- Generate CSV or PDF exports at your request.
- Conduct or support research using only the irreversibly anonymized data you separately choose to contribute.
- Maintain security, prevent misuse, troubleshoot operational problems, and comply with legal obligations.
- Communicate with you about account, security, privacy, and material service matters.
We do not use personal health information for targeted advertising and do not sell personal health information.
5. Legal Bases and Sensitive Information
The legal basis for processing depends on your location and the purpose of processing. Where applicable law requires us to identify a legal basis, we may rely on performance of our contract with you, your consent or explicit consent, compliance with legal obligations, and our legitimate interests in operating and securing the Services where those interests are not overridden by your rights.
Where health information or other sensitive information requires an additional legal condition, we rely on an appropriate condition, including explicit consent where required. Consent for optional research sharing, precise location, or another optional purpose is separate from consent to unrelated processing. You may withdraw consent for future processing where consent is the legal basis, without affecting processing lawfully carried out before withdrawal.
6. How We Share Information
6.1 Service providers
Account-verification emails are sent through our authentication provider, Firebase Authentication, using UrHealth’s verified sending domain.
We require service providers that process personal information on our behalf to protect it appropriately and use it only for authorized purposes, subject to applicable contractual and legal requirements.
6.2 Legal, safety, and corporate purposes
We may disclose information where reasonably necessary to comply with law, legal process, regulatory requirements, or enforceable governmental requests; protect the rights, security, and integrity of UrHealth, our users, or others; investigate misuse; or in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to applicable law.
6.3 At your direction
When you export a report, share a file, or otherwise direct information to be shared, the recipient’s subsequent use of that information may be outside our control. If the planned automated alert-recipient feature becomes active, information sent at your direction through that feature will be treated in the same way.
7. Research and Anonymous Data
Research sharing is optional and off by default. Disabling it stops future contributions. Contributions already made are irreversibly anonymized and cannot be attributed back to your account or removed on an individual basis.
We do not use anonymous research contributions for advertising. If UrHealth later conducts or participates in formal clinical research, regulated human-subject research, or another study requiring ethics or regulatory oversight, that study will use separate information, consent, governance, and approvals as required.
8. Data Storage and International Transfers
UrHealth’s production Cloud Firestore database is hosted in Google Cloud’s asia-south1 region in Mumbai, India. Because UrHealth is operated by an Indian company and uses global technology providers, limited processing may occur outside your country of residence as part of service delivery, security, support, or provider operations.
Where applicable law requires safeguards for international transfers, we use or rely on legally recognized mechanisms and protections. Mandatory local transfer requirements apply notwithstanding this Policy.
9. Data Security
UrHealth uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. Personal information transmitted between the UrHealth app and Firebase/Google Cloud is encrypted in transit using secure TLS connections. Personal information stored through Cloud Firestore and Firebase Authentication is encrypted at rest using Google Cloud’s platform-level encryption.
UrHealth uses account and database access controls designed so that users can access only information associated with their own accounts. Administrative access to production systems is restricted to authorized personnel and should occur only where reasonably necessary for security, maintenance, legal compliance, or support.
No method of electronic transmission or storage can be guaranteed to be completely secure. You are responsible for protecting your account credentials and copies of information that you export or share outside UrHealth.
10. Data Retention and Account Deletion
We retain personal information only for as long as reasonably necessary to provide the Services and for the purposes described in this Policy, subject to applicable legal requirements.
When you delete your UrHealth account, the account-deletion process initiates deletion of the Firestore information associated with that account, including device records, environmental readings, symptom check-ins, alert logs, dependent profiles, and associated dependent device/readings. Local on-device account state is then removed and the Firebase Authentication account is deleted. The deletion process ordinarily completes within seconds, subject to connectivity and platform availability.
UrHealth does not maintain scheduled Firestore application backups of this account data, and Point-in-Time Recovery is not enabled for the production database. Google Cloud may maintain short-lived internal technical mechanisms necessary for database consistency and platform operation; these are not UrHealth application backups available to us for restoration.
UrHealth does not currently maintain a custom Cloud Functions, BigQuery, or application logging pipeline that copies the content of users’ health, exposure, or profile records into a separate logging repository. Administrative infrastructure logs maintained by service providers may exist independently and are governed by the provider’s platform operations and applicable law.
11. Your Privacy Rights and Choices
Depending on where you live, you may have some or all of the following rights:
- Access personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of personal information.
- Obtain a portable copy of certain information.
- Restrict or object to certain processing.
- Withdraw consent where processing is based on consent.
- Opt out of certain sharing or uses where local law provides such a right.
- Appeal certain privacy-request decisions where applicable.
- Lodge a complaint with an appropriate privacy or data-protection authority.
You may use available in-app controls or contact customercare@urhealth.app. We may need to verify your identity before completing a request. Rights are subject to applicable legal limitations and exceptions.
12. Your Data and Data Export
As between you and UrHealth, you retain your rights in the personal information, symptom information, and environmental measurements generated by your UrHealth device and associated with your account. You authorize us to process that information only as necessary to provide, secure, maintain, and improve the Services as described in this Policy or as otherwise specifically authorized by you.
CSV and PDF exports are generated for your use. Once you save or share an export outside UrHealth, the destination service or recipient may process that information independently.
13. Children and Dependent Profiles
UrHealth may be used by individuals of different ages. Where applicable law requires parental or guardian consent for a child’s use of the Services or for processing the child’s personal information, UrHealth may only be used with the required authorization. UrHealth does not currently perform technical age verification at account sign-up.
A parent, legal guardian, caregiver, or other authorized adult may create and manage a dependent profile for a child or another person where that adult has the legal authority or any consent required by applicable law.
If you believe a child’s personal information has been provided without authorization required by applicable law, contact us so we can investigate and take appropriate action.
14. Automated Decision-Making
UrHealth may use rules, algorithms, or machine-learning models to generate exposure information, trends, alerts, or wellness guidance. These outputs support user awareness and are not intended to make legal or similarly significant decisions about you. If we introduce automated decision-making that produces legal or similarly significant effects, we will provide any notices and rights required by applicable law.
15. Third-Party Services and Links
The Services may integrate with or link to third-party services. Those third parties may independently process information under their own privacy policies. We are not responsible for the privacy practices of third parties acting independently of us.
16. Changes to This Privacy Policy
We may update this Policy to reflect changes in the Services, technology, law, or our practices. We will update the “Last updated” date and, where required or appropriate, provide additional notice of material changes through the app, website, email, or another suitable method. Where a change requires new consent, we will seek that consent before the relevant processing begins.
17. Contact, Complaints, and Regional Rights
For privacy questions, requests, or complaints, contact:
Bionic Environment Solutions Private Limited
Sur-31, 2nd Floor, L. M. College of Pharmacy
Navrangpura, Ahmedabad, Gujarat, India – 380009
Email: customercare@urhealth.app
We will respond in accordance with applicable law. Depending on where you live, you may also have the right to complain to your local privacy or data-protection authority. Users in the European Economic Area, United Kingdom, Switzerland, United States, Canada, Australia, India, and other jurisdictions may have additional statutory rights. Mandatory local rights apply notwithstanding anything in this Policy.