Privacy Policy

Last updated 7 October 2026. This policy covers the Nimba Nature Cure website, the patient mobile application, and the care records we keep about your stay.

Who we are

Nimba Nature Cure Private Limited (CIN U17110GJ1991PTC016722) — “Nimba Nature Cure”, “we”, “us” — operates a naturopathy and wellness centre on the Ahmedabad–Mehsana Expressway, Mehsana, Gujarat, India.

Address: Baliyasan, Nr. Mccain Foods,
Ahmedabad – Mehsana Expressway,
Mehsana – 382 732 Gujarat
Email: info@nimba.in
Phone: +91 834731 3333

What we collect

We collect only what is needed to treat you and to run your stay. In practice that is:

Information you give us

Contact and identity — your mobile number, which is how you sign in; your name; and, if you choose to link it, your Google account name and email address.
Profile — date of birth, age, gender, marital status, occupation, nationality, postal address and an emergency contact.
Health information — medical history, allergies, existing conditions and habits, current medications, symptoms and complaints, and the answers you give in our health assessments and questionnaires.
Documents you upload — photographs or PDFs of blood test reports and other lab results, and identity documents where a booking requires them.
Your feedback — short answers about how you felt after a therapy or a meal, and any concern you raise through the app.

Information created during your care

Clinical records made by our team: consultation notes, prescriptions, vital signs, physical measurements, investigations and therapy plans.
Stay and billing records: bookings, room allocation, check-in and check-out dates, invoices and payment records.

Information collected automatically

Technical logs needed to operate and secure the service, including the time of a request, the account that made it and any error it produced.
A session token stored securely on your device so you are not asked for a one-time password on every visit.

The mobile app contains no advertising and no analytics or tracking software. We do not build advertising profiles, and we do not sell your information to anyone. This website is measured differently — see Cookies on this website.

Permissions the app asks for

Camera and photos — only so you can photograph or attach a page of a report you want us to see. Nothing is read from your gallery on its own.
Calendar — only when you choose to add a consultation to your own calendar. The entry is written on your device; we do not read your calendar.
Accessibility (Nimba rest time) — only while you are checked in at Nimba. It notices which app you open, so that during rest hours, or for an app the clinic keeps closed during stays, Nimba can show its rest screen instead. It does not read what is on your screen, what you type, or anything inside other apps. You can switch it off at any time in your phone's settings.
Notification access — only while you are checked in. Notifications from apps that are closed at the time are held on your phone until they open again. Nimba looks only at which app sent a notification, never at what it says, and nothing about your notifications leaves your phone.
List of installed apps — while you are checked in, the app sends us the names of the apps on your phone so your doctor can choose which ones stay open for you. If you ask a doctor to open your phone, we keep the reason you give. Both are kept with your stay record and deleted with the rest of your information. Phone rest stops when you check out.
Location (Nimba rest time) — only while you are checked in. Your phone checks whether it is inside the Nimba campus, so phone rest applies there and switches off when you go out. This check happens on your phone: your location is never sent to us or stored by us. You can switch location off at any time in your phone's settings.

Cookies on this website

This website loads Google Tag Manager, which sets cookies and reports page views and similar site activity to Google Analytics. It tells us which pages people read; it is not connected to your patient record, and it is not used to advertise to you. You can block or clear these cookies in your browser and the site will still work. The mobile app loads none of this.

Why we use it

To assess your health and plan your treatment, diet and therapies.
To deliver and record your care during your stay.
To let you sign in and to keep your account secure.
To take bookings, raise invoices and record payments.
To improve the quality of our service — feedback answers are read in aggregate over time, and are never presented to staff as individual comments attributed to you.
To meet our legal, tax and record-keeping obligations.

Who we share it with

We do not sell your information. We share it only with service providers who process it on our behalf, under contract, for the purposes above:

OpenAI — documents you upload are sent to OpenAI’s API so that what is printed on them can be read automatically: a blood test report, so its values are filled in for you rather than typed out; and an identity document submitted for a booking, so the name and number on it can be checked against the booking. Those documents leave our servers and are processed by OpenAI.
Cloudinary — stores identity documents submitted for booking verification.
MSG91 — sends the one-time password to your mobile number when you sign in.
Google — verifies your identity if you choose to sign in with or link a Google account.
Our hosting and infrastructure providers, who store the data that runs the service.

We may also disclose information where the law requires it, or where it is necessary to protect someone’s life or safety.

Where it is stored, and for how long

Your information is stored on servers operated for us and is transmitted over encrypted connections. Some of the providers listed above process data outside India.

We keep your information for as long as your account exists. When you delete your account, we delete your sign-in, contact details, ID proof and what you added in the app. The clinical and billing records of your care are kept, because tax, company and medical record-keeping law requires us to keep them, for at least as long as that law requires. Information we no longer need is deleted.

Your choices

See your information — much of it is visible in the app under your profile, diagnosis and billing screens. You can ask us for the rest.
Correct it — tell any member of the care team, or write to us, and we will fix what is wrong.
Delete your account — in the Nimba app, open your profile and tap “Delete my account”, or write to info@nimba.in from your registered email address, or call the number above. You are signed out straight away, and we complete the deletion within 30 days. Your sign-in, contact details, ID proof and what you added in the app are deleted; the clinical and billing records of your care are kept, as described above.
Withdraw consent — you can unlink a Google account or revoke a device permission at any time from your phone’s settings.

Children

The app is not intended for use by children on their own. Where we treat a minor, their records are created and managed by our clinical team with a parent or guardian.

Changes to this policy

If we change how we handle your information we will update this page and change the date at the top. Significant changes will be notified in the app.

Contact and grievances

For any question about this policy, or to exercise any of the rights above, write to info@nimba.in.

Grievance Officer (as required under the Information Technology Act, 2000 and the rules made under it):
info@nimba.in, marked for the attention of the Grievance Officer.
We will acknowledge a grievance within 24 hours and resolve it within 15 days of receipt.