Privacy Policy
The Body Cliinic & Swaas App · Last updated: June 24, 2026
- The Body Cliinic — Holistic Health & Wellness
- Swaas App — Mindfulness Reminders & Symptom Tracking
1. Introduction
This Privacy Policy applies to both The Body Cliinic — a holistic health and wellness practice founded by Dr. Rachna Sharma — and the Swaas App, a mindfulness reminder and symptom tracking platform used by The Body Cliinic to support clients in staying present and monitoring their health journey between sessions.
Together, The Body Cliinic and the Swaas App form an integrated care ecosystem. This policy explains what personal and health-related data we collect, why we collect it, how it is used and protected, and your rights with respect to that data.
Please read this policy carefully. By accessing our services — whether in-person at The Body Cliinic or through the Swaas App — you acknowledge that you have read and understood this policy.
2. Who We Are
We operate as two connected entities:
The Body Cliinic
A holistic wellness clinic based in Bangalore, India, founded by Dr. Rachna Sharma. Specialising in anxiety, stress, trauma, depression, psychosomatic concerns, insomnia, and perinatal support using the proprietary Kkreyations healing system.
Swaas App
A mindfulness reminder and symptom tracking platform that empowers clients of The Body Cliinic to stay present, build healthy habits, and monitor their physical and emotional health between sessions — enabling data-informed, compassionate care.
Both entities share a commitment to your privacy and operate under the same data governance standards described in this policy. For data protection purposes, The Body Cliinic acts as the data controller and the Swaas App acts as a data processor on behalf of the clinic.
3. Age Restrictions & Children's Privacy
16+
Only
The Swaas App is intended for users aged 16 and above.
We do not knowingly collect personal data from anyone under the age of 16. If you are under 16, please do not use the Swaas App or provide any personal information through it.
Why 16+?
The Swaas App collects sensitive health and wellbeing data — including symptom logs, mental health information, and mindfulness engagement — that requires a meaningful level of maturity and informed consent to engage with responsibly. The 16+ age threshold aligns with the GDPR’s minimum age for digital consent in several jurisdictions and India’s Digital Personal Data Protection Act 2023.
Parental or Guardian Consent (16–18)
Users aged 16 to 18 are encouraged to involve a parent or legal guardian when registering for the Swaas App, particularly given the sensitive nature of the health data processed. In jurisdictions where the age of digital consent is higher than 16, verifiable parental consent will be required before we process any personal data.
The Body Cliinic In-Person Services
Age-related eligibility for in-person clinical services at The Body Cliinic is determined on a case-by-case basis by Dr. Rachna Sharma. If a minor is receiving clinical care, all data relating to that individual is handled under heightened safeguards and with the explicit consent of their parent or legal guardian.
If We Discover an Under-Age User
If we become aware that a user under the age of 16 has provided personal data through the Swaas App without appropriate parental consent, we will promptly delete that data and deactivate the account. To report such a concern, please contact us at swaasadmin@thebodycliinic.com or via the channels listed in Section 12.
4. Information We Collect
We collect the following categories of personal data across both The Body Cliinic and the Swaas App:
Technical Data: IP address, device type, operating system, browser type and version, time zone, and app version.
Contact Data: Email address, phone number, and general location (city/region) used for appointment scheduling and app communications.
Appointment & Booking Data: Session dates, appointment history, booking preferences, and intake form responses submitted via The Body Cliinic website or Swaas App.
Usage Data: Information about how you interact with the Swaas App — mindfulness reminders engaged, symptoms logged, features accessed, session duration, and navigation patterns.
Technical Data: IP address, device type, operating system, browser type and version, time zone, and app version.
Communication Data: Messages, feedback, or support queries you send to us via contact forms, email, or in-app messaging.
Cookie Data: We use cookies and similar tracking technologies on The Body Cliinic website and Swaas App to keep you signed in, remember your preferences, and understand how our services are used. These include essential cookies (required for the service to function), functional cookies (remembering your settings), and analytics cookies (understanding usage patterns in aggregate). You can control cookie preferences through your browser settings — note that disabling certain cookies may affect the functionality of our services. We do not use cookies for cross-context behavioural advertising — see Section 7 for our full position on this.
5. Health & Clinical Data
Health data is treated as a special category of sensitive personal data. We apply the highest standard of protection to all clinical and wellness information.
In connection with The Body Cliinic’s services and the Swaas App, we may collect and process the following sensitive health information:
- Symptom logs and self-reported wellbeing scores entered in the Swaas App
- Mindfulness reminder preferences, engagement history, and habit-tracking data
- Responses to wellness questionnaires covering physical and emotional health
- Information about mental health conditions such as anxiety, depression, PTSD, or insomnia — where voluntarily shared
- Perinatal or pregnancy-related health information, where applicable
- Notes and progress observations recorded by Dr. Rachna Sharma or authorised practitioners
This data is collected only with your explicit consent and is used solely to provide, personalise, and improve your care. You may withdraw consent at any time without affecting the lawfulness of prior processing — see Section 10 for a full list of your data rights, including how to withdraw consent.
6. How We Use Your Information
We use your personal and health data only for lawful purposes. The table below outlines the primary uses and the lawful basis for each:
Purpose
Lawful Basis
Providing clinical and wellness services at The Body Cliinic
Contract performance & explicit consent
Delivering mindfulness reminders and personalised wellness nudges via the Swaas App
Legitimate interest & consent
Appointment scheduling and session reminders
Contract performance
Processing symptom logs and health questionnaire responses to inform clinical care decisions
Explicit consent (special category health data)
Aggregated, de-identified research and analysis
Legitimate interest
Responding to your enquiries and support requests
Legitimate interest
Complying with legal and regulatory obligations
Legal obligation
No personally identifying information will ever be shared in any research publications or external communications. For a full account of the circumstances in which data may be shared with third parties, see Section 7 (Sharing & Disclosure).
7. Sharing & Disclosure
We do not sell, rent, or trade your personal data. We may share data in the following limited circumstances:
Between The Body Cliinic and the Swaas App
To deliver integrated care. Both entities are bound by this same policy.
Service Providers
Trusted third-party vendors (e.g., hosting, analytics, appointment booking) who process data on our behalf under strict data processing agreements.
Legal Requirement
When required by law, court order, or regulatory authority.
Safety
In rare circumstances where disclosure is necessary to protect the vital interests of a client or another person.
Do Not Sell or Share My Personal Data
Under laws such as the California Consumer Privacy Act (CCPA) and similar privacy regulations, “sharing” data includes making it available for cross-context behavioural advertising — even without monetary exchange.
We do not sell or share your personal data for cross-context behavioural advertising purposes. Any analytics or third-party tools we use are configured to operate in a privacy-preserving manner and are not permitted to use your data for their own advertising or to build advertising profiles about you.
If you believe your data has been used in a manner inconsistent with this statement, or if you wish to exercise your right to opt out of any future sharing of this nature, please contact us at swaasadmin@thebodycliinic.com or thebodycliinic@gmail.com. We will acknowledge and action your request within 15 business days.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:
- Encryption of data in transit (TLS) and at rest
- Role-based access controls limiting data access to authorised personnel only
- Regular security reviews and vulnerability assessments
- Secure, password-protected systems for clinical records
Despite these measures, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users promptly via the contact details held on their account, and report to the relevant Data Protection Authority as required by law. To report a security concern, contact us at swaasadmin@thebodycliinic.com or via Section 12.
9. Data Retention
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:
- Encryption of data in transit (TLS) and at rest
- Role-based access controls limiting data access to authorised personnel only
- Regular security reviews and vulnerability assessments
- Secure, password-protected systems for clinical records
Despite these measures, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users promptly via the contact details held on their account, and report to the relevant Data Protection Authority as required by law. To report a security concern, contact us at swaasadmin@thebodycliinic.com or via Section 12.
10. Your Legal Right
You have the following rights with respect to your personal data. To exercise any of them, you may contact our Grievance Officer (Section 11) for formal data rights requests, or reach us directly via Section 12 (Contact Us) for general queries.
Access
Obtain a copy of your personal data we hold
Correction
Request correction of inaccurate or incomplete data.
Erasure
Request deletion of your data (“right to be forgotten”).
Objection
Object to processing based on legitimate interests.
Restriction
Request that we restrict processing of your data.
Portability
Receive your data in a structured, machine-readable format.
Withdraw Consent
Withdraw consent for health data processing at any time (see Section 5).
Complaint
Lodge a complaint directly with your local or national Data Protection Authority (DPA) — you do not need to contact us first.
Your Right to Complain to a Data Protection Authority
You have the right to lodge a complaint directly with your local or national Data Protection Authority (DPA) at any time — without needing to raise the matter with us first. The relevant authority depends on your country of residence:
India: Ministry of Electronics & Information Technology (MeitY) and, once operational, the Data Protection Board of India under the Digital Personal Data Protection Act 2023.
EU / EEA: The supervisory authority in your Member State (e.g., the ICO in the UK, CNIL in France, BfDI in Germany).
USA (California): The California Privacy Protection Agency (CPPA) under the CCPA/CPRA.
Other regions: Please consult your national or state data protection regulator for guidance.
We nonetheless encourage you to contact us first so we have the opportunity to address your concern directly and promptly.
11. Grievance Redressal Officer
In accordance with applicable data protection laws — including India’s Digital Personal Data Protection Act 2023 — we have designated a Grievance Redressal Officer to handle formal data rights requests and complaints. This includes requests to access, correct, erase, or port your data (as described in Section 10), as well as any concerns about how your data has been handled. For general enquiries, you may also use the channels in Section 12.
Purpose
Name & Designation
Dr. Rachna Sharma
Founder & CEO, The Body Cliinic
Address
No. 518 V V Arcade, 3rd Floor, B First Main Road, AECS Layout Brookefield, Kundalahalli, Krishnarajapura, Bengaluru, Karnataka 560037
We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days of receipt.
12. Contact Us
If you have any questions about this Privacy Policy or general concerns about how your data is handled, please reach out through the channels below. To formally exercise your data rights (access, correction, erasure, etc.), please contact our Grievance Officer (Section 11) — they are the designated point of contact for all formal data protection requests.
We aim to respond to all enquiries within 2 business days. Changes to this Privacy Policy will be posted on this page with an updated revision date.
This Privacy Policy governs both The Body Cliinic and the Swaas App.
© 2026 The Body Cliinic. All rights reserved.