Privacy Policy

Effective 16 October 2026

This policy explains what personal data Ekaayi Healthcare Private Limited (GSTIN 07AAICE1964G1ZL, Delhi, India), operating the SNOWL learning platform of CIMAS, the Chikara Institute of Medicine and Allied Sciences ("Ekaayi", "we", "us"), collects from you, why, and the choices you have. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. The data fiduciary is Ekaayi Healthcare Private Limited; the owner of CIMAS is Dr Ankur Chikara.

1. What we collect

• Account data: name, email address, mobile number, password (stored hashed), profile photo if you add one, and your college, year or designation if you choose to tell us.
• Purchase data: what you bought, when, the amount, the invoice, and the GSTIN of your institution if you enter one. Card and bank details are entered directly with the payment gateway and are never stored by us.
• Learning data: courses opened, video progress, quiz answers and scores, live-class attendance, certificates, discussion posts and messages sent through the Platform.
• Technical data: device type, browser, IP address, approximate location derived from it, pages visited and the time spent, collected through cookies and similar tools.
• Communications: emails, WhatsApp messages and support requests you exchange with us.

2. Why we use it

• To create and secure your account and give you access to what you have paid for.
• To issue GST invoices, process payments and refunds, and keep the accounting records the law requires.
• To show your progress, scores and certificates, and to let teachers see aggregate learning activity for the courses they run (teachers do not see your payment details).
• To calculate faculty revenue shares, which use aggregate learning minutes and quiz attempts per course, not your identity.
• To send service messages (receipts, class reminders, renewal notices) and, with your consent, updates about new courses. You can opt out of marketing at any time from the message itself or by writing to us.
• To improve the Platform, prevent fraud and account sharing, and comply with legal obligations.

3. Who we share it with

• Graphy, the learning-management service that hosts the Platform and processes data on our instructions.
• Payment gateways (such as Razorpay or Stripe) to take payments and issue refunds.
• Communication providers for email, SMS and WhatsApp messages, and video and live-class providers.
• Teachers whose courses you have joined, limited to your name, learning progress and the questions you ask in their classes or discussions.
• Authorities when the law requires it, and professional advisers under confidentiality.

We do not sell your personal data. Some providers may store data outside India; where they do, we rely on their contractual commitments and on transfers permitted under Indian law.

4. Cookies

We use cookies that are necessary to keep you signed in and to remember your preferences, and analytics cookies to understand how the Platform is used. You can block cookies in your browser; necessary cookies are needed for login and checkout to work.

5. How long we keep data

Account and learning data are kept while your account is active and for up to three years afterwards so that you can return and recover your progress. Invoices and payment records are kept for eight years as required by tax and company law. Discussion posts may remain visible in anonymised form after an account is deleted.

6. Security

Data is transmitted over HTTPS, passwords are stored hashed, and access inside our team is limited to people who need it. No system is perfectly secure; if a breach affecting you occurs, we will inform you and the Data Protection Board as the law requires.

7. Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it (subject to records we must keep by law), withdraw consent for marketing, and nominate a person to exercise these rights if you are unable to. Write to helpcimas@gmail.com from your registered email; we respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

8. Children

The Platform is meant for medical students and professionals aged 18 and above. If a learner under 18 is enrolled by a parent or guardian, the guardian provides consent on their behalf and we do not use the child's data for marketing or behavioural tracking.

9. Changes and contact

We may update this policy; the effective date above will change and material changes will be announced on the Platform. Questions and requests go to our grievance officer:

Grievance officer: Dr Ankur Chikara, Ekaayi Healthcare Private Limited (CIMAS / SNOWL), Delhi, India
Email: helpcimas@gmail.com · Phone: +91 8920808926