Surely (used to book at-home medical services) and InstaConnect (used by healthcare professionals to deliver those services) are operated by Aartas Care Private Limited ("ACPL", "we", "our", or "us"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use either app and our related services.
By choosing to use either app, you freely consent to the collection, storage, processing, disclosure, and transfer of your information as described in this policy. If you do not agree, please do not use the apps.
We collect the following types of information across both apps:
Because the two apps play different roles, they handle location differently.
Surely accesses your device's precise location only while the app is in use, for two purposes: to automatically detect your location when adding or selecting a delivery address, and to display the assigned healthcare professional's real-time position on a map during an active visit. We do not track your location in the background.
InstaConnect collects the user's precise location continuously, including in the background even when the app is closed, for as long as they are logged in. Location is reported approximately every 60 seconds to keep availability and position current, and more frequently (every 5–10 seconds) during an active trip so that the person awaiting the visit can see the arrival approaching. This location is used solely to enable dispatch and live tracking; it is not used for advertising. On Android, a persistent on-device notification indicates when location tracking is active. Background location sharing can be stopped at any time through device settings, but doing so prevents the user from receiving and delivering visits.
We do not sell your personal data. We share data only as necessary to operate the service:
We do not share your data with advertisers or any third parties for marketing purposes.
We retain your account and your booking or visit history for as long as your account is active or as required by law. This applies to both Surely and InstaConnect accounts. You may request deletion of your account and associated data by contacting us at the email below. Booking and visit records may be retained for a minimum period as required for medical and legal compliance.
All data transmitted between the apps and our servers is encrypted using HTTPS/TLS. In Surely, sensitive credentials such as session tokens are stored in encrypted secure storage on your device. In InstaConnect, login credentials may be cached on the device to enable auto-login, optionally gated behind biometric (Face ID / fingerprint) unlock. We follow industry best practices to protect your data, but no method of transmission or storage is 100% secure.
Our apps are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
You have the right to:
If you are located in the European Union, you additionally have rights under the General Data Protection Regulation (GDPR), including the rights of access, rectification, erasure, and restriction of processing of your personal data.
To exercise any of these rights, contact us at tech@aartas.com.
In accordance with applicable law, if you have a complaint or a request regarding your personal data or this Privacy Policy, you may contact our Grievance Officer:
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via the apps. Continued use of the apps after changes constitutes your acceptance of the updated policy.
If you have any questions about this Privacy Policy, please contact us: