We have written this policy in plain language. It tells you exactly what data we collect, why we collect it, and what you can do about it.
1. Who We Are
Stetho Health Academy is operated by STETHION TECHNOLOGIES PRIVATE LIMITED ("Stetho", "we", "us"). We are an educational technology company offering allied healthcare and nursing programs through NCAHP-regulated partner universities.
Contact for privacy matters:privacy@stetho.co.in
Website:stetho.co.in
Stetho does not award degrees. All academic qualifications are conferred by our respective partner universities.
2. What Data We Collect
We only collect what we need to process your admission, deliver the course, and keep the platform running.
When you fill the admission form
| What we collect | Why |
|---|---|
| Full name, date of birth, gender | Identity verification and academic records |
| Phone number and email address | OTP login, application updates, communication |
| Home address (city, pincode) | Institutional records and correspondence |
| Nationality | Program eligibility |
| Parent / guardian name, phone, relationship | Emergency contact; required for minors under 18 |
| Parent occupation and approximate family income | Scholarship eligibility assessment only |
| Class 10 and Class 12 board, school, year, marks | Academic eligibility and scholarship calculation |
| Entrance exam name, roll number, score (if applicable) | Program eligibility verification |
| Passport photo, government-issued ID, marksheets | Identity and qualification verification |
| Entrance exam scorecard (optional) | Supporting document for eligible programs |
| Referral code or name (optional) | Tracking referral partner or student referrals |
When you use the mobile app
| What we collect | Why |
|---|---|
| Mobile number (OTP login) | Account authentication |
| Academic profile (course, college, year, target exam) | Personalised content and recommendations |
| Videos watched, completion percentage, watch time | Resume watching, progress dashboard |
| MCQ answers, test scores, time taken | Performance analytics and result display |
| Daily logins, streaks, quiz participation | Engagement features (streaks, milestones) |
| Device ID and push notification token | Sending you notifications (only if you allow) |
| Subscription tier and payment reference | Verifying your access to premium content |
3. What We Do Not Collect
We do not store your card/bank details, UPI PIN, or any net banking credentials. Documents you upload are stored securely and used only to verify eligibility.
- No card or bank numbers — payments go directly through Razorpay, which is RBI-regulated. We only receive a transaction reference.
- No location tracking via GPS — we do not track your physical location through the app.
4. Who We Share Your Data With
We do not sell your data. We share it only with the following:
| Who | What and why |
|---|---|
| Partner college / university you applied to | Your admission data — name, contact, academic records, documents — to process your enrollment |
| Amazon Web Services (AWS), Mumbai | Our cloud hosting provider. All data is stored in India on AWS Mumbai servers. |
| Razorpay | Processes your payment. They receive your payment credentials; we only receive the transaction reference. |
| SMS gateway | Sends your OTP. Only your phone number and the OTP message are involved. |
If Stetho is ever acquired or merges with another company, we will notify you before your data moves to new ownership.
5. How Long We Keep Your Data
| Data type | How long we keep it |
|---|---|
| Admission data (if you did not enroll) | |
| Enrolled student records | |
| App usage, videos, test history | |
| Payment records | |
| Uploaded documents | |
| Website visitor logs | |
| Support queries and complaints |
After the period above ends, we delete or anonymise the data so it can no longer be linked to you.
6. Your Rights
Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to:
- Access — ask us what data we hold about you.
- Correct — ask us to fix anything that is wrong or incomplete.
- Erase — ask us to delete your data, where we are not legally required to keep it.
- Withdraw consent — stop us from using your data for purposes based on your consent (like marketing messages). This will not undo anything already done.
- Nominate someone — appoint a person to exercise your rights if you are unable to.
- Complain — if you are not happy with our response, you can approach the Data Protection Board of India once it is operational.
To exercise any right, email support@stetho.co.in with the subject "Data Request". We will respond within 30 days. We may ask you to confirm your identity first.
7. Payments
After you submit the form, you will be asked to pay the admission fee to get access to the app. Payments are handled by Razorpay (RBI-licensed). We never see or store your card number, UPI PIN, or net banking password.
We keep the transaction reference and the amount for our accounting and GST records, as required by law.
8. Notifications
The app will ask for permission to send push notifications. If you allow it, we may send:
- New video or content alerts
- Mock test announcements and exam reminders
- Daily streak and learning reminders
- Subscription renewal reminders
You can turn off notifications at any time in your phone settings or within the app. This will not affect your access to content.
9. How We Protect Your Data
- All data in transit is encrypted (HTTPS / TLS).
- Uploaded documents and stored data are encrypted at rest.
- Login uses phone number + OTP only — no passwords to steal.
- Video content is delivered via secure, expiring links — it cannot be downloaded and shared freely.
- Only authorised Stetho staff can access personal data, and all access is logged.
No system is completely risk-free. If a breach occurs that is likely to affect you, we will inform you and the relevant authority as required by law.
10. Changes to This Policy
If we make significant changes to this policy, we will notify you via the app and update the date at the top of this document. For changes that affect how we handle your sensitive data, we will ask for fresh consent.
.svg){kind=icon}
