Privacy Policy.

AAHAS Softech Solutions ("AAHAS", "we", "us", or "our"), operated by AAHAS SOFTECH SOLUTIONS Private Limited, provides software products and related services including Aahas HRMS, Aahas HIMS, Radiomind, Apna Gate, Classtree, and our public websites (together, the "Services"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It is designed to meet the disclosure expectations of the Apple App Store (including App Privacy labels) and Google Play (including the Data safety section), as well as applicable Indian law including the Digital Personal Data Protection Act, 2023 where it applies. Controller contact: [email protected] | +91 9121337083 Registered / office address: Flat 204, Floor 2, NCC Urban Gardenia BT 1, NCC Urban Gardenia, Serilingampally, Gachibowli, Hyderabad, Rangareddy, Telangana 500032

This Policy applies to: • Our websites (including aahassoftechsolutions.com and related domains) • Mobile and web applications we publish on the Apple App Store and Google Play • Product accounts, demos, support, careers, and marketing interactions with us It does not apply to third-party websites, services, or apps that we do not operate, even if linked from the Services. If you use our products as an employee, resident, patient, student, or other end user of an organisation that is our customer, that organisation is typically the data controller for the data it submits to our products. In those cases we process data as a service provider / processor under our agreement with the customer, and you should also review that organisation's privacy notice.

Depending on the Service and how you use it, we and (where applicable) our service providers may collect the following categories. These map to common Apple App Privacy and Google Play Data safety categories: Contact info — name, email address, phone number, postal / office address, company name and job title. Identifiers — account ID, user ID, device ID, IP address, and similar identifiers used to authenticate or operate the Service. Location — approximate location (for example from IP) and, where you or your organisation enable it, precise or geo-tagged location (for features such as attendance check-in, visitor entry, or field workflows). Financial info — billing contact details, invoice history, and payment status. Payment card numbers are processed by our payment processors where used; we do not store full card PAN data on our servers. Health & fitness / sensitive operational data — only where you or your organisation use healthcare or related products (for example Aahas HIMS or Radiomind). This may include healthcare operational and diagnostic workflow data entered by authorised users. We do not use this data for advertising. User content — messages, support tickets, form submissions, documents/resumes you upload, photos or other media you choose to submit, and in-app content created by you or your organisation. Contacts — only if a feature you or your organisation enables requests access (for example directory or invite flows), and only with the required OS permission. Purchases — subscription or licence purchase history associated with your organisation or account. Usage data — feature usage, interaction events, session logs, and performance metrics needed to provide and improve the Service. Diagnostics — crash logs, error reports, and diagnostic technical data. Photos, camera, and microphone — only when a feature requires them (for example visitor photo capture or document scan) and only after the operating system permission is granted. We do not sell personal information. We do not use personal data collected through our apps for third-party advertising, and we do not use the Apple Advertising Identifier (IDFA) or equivalent advertising IDs for cross-app tracking unless disclosed for a specific product and permitted by you under App Tracking Transparency.

You provide it directly — when you create an account, fill forms, request a demo, apply for a job, contact support, or submit content in the Services. Collected automatically — when you use our websites or apps we may collect device and log information, IP address, browser/app type, referring URLs, and usage/diagnostic data through cookies, SDKs, or similar technologies. From your organisation — if your employer, society, school, hospital, or other customer invites you or uploads data about you into a product they administer. From third parties — such as identity/login providers, hosting, analytics, email delivery, payment, or background-verification partners engaged for a specific purpose, where permitted.

We use personal information for the following purposes, consistent with Apple and Google purpose categories: App / Service functionality — create and manage accounts, authenticate users, deliver product features, process transactions, provide customer support, and send service-related notices. Analytics — understand product performance, reliability, and usage (including crash and diagnostic analysis) so we can maintain and improve the Services. Personalisation — remember preferences and tailor in-product experience where that feature exists. Communications — respond to enquiries and, where allowed by law and your preferences, send product updates or marketing. You can opt out of marketing at any time. Security and fraud prevention — detect, investigate, and prevent abuse, unauthorized access, and other harmful activity. Legal and compliance — meet legal, tax, audit, and regulatory obligations, and establish or defend legal claims. Developer's advertising or third-party advertising — we do not currently use personal data from our apps for third-party advertising networks. If that changes for a specific product, we will update this Policy and the relevant App Store / Play disclosures, and obtain any required consent (including App Tracking Transparency on Apple platforms).

Linked to you — most account, contact, usage, and content data we process in connection with an authenticated user is linked to your identity or account. Not used for tracking (default) — we do not link data from our apps with data from other companies' apps or websites for targeted advertising or advertising measurement, and we do not share user or device data with data brokers for tracking. If a future feature requires tracking as defined by Apple (including use of IDFA), we will request permission through Apple's App Tracking Transparency framework before tracking, and we will update App Store Connect privacy labels and this Policy accordingly.

We share personal information only as described below: Service providers / processors — cloud hosting, databases, email/SMS delivery, analytics, error monitoring, payment processing, and similar vendors who process data on our instructions and under confidentiality obligations. Your organisation (B2B customers) — administrators of a customer account can access data stored in that organisation's tenancy in accordance with their roles and our product configuration. Legal requirements — when required by law, court order, or governmental request, or to protect rights, safety, and security. Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards. We do not sell personal information and we do not share personal information for cross-context behavioural advertising as those terms are commonly defined under US state privacy laws.

We retain personal information only as long as needed for the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Typical patterns (subject to customer contracts and law): • Account and operational product data — for the life of the customer relationship and a reasonable period thereafter • Support and enquiry records — for a limited period after the matter is closed • Marketing preferences — until you unsubscribe or we no longer run that campaign • Diagnostics and logs — for shorter operational windows unless needed for security investigation When retention ends, we delete or irreversibly anonymise the data where feasible.

We implement administrative, technical, and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. Measures may include access controls, encryption in transit, network protections, logging, and staff confidentiality obligations. No method of transmission or storage is completely secure. You are responsible for keeping account credentials confidential and for configuring organisational access appropriately.

Our apps may request OS-level permissions only as needed for features you or your organisation use, for example: • Camera / photos — visitor capture, document upload, profile image • Location — attendance, geo-fence, or field check-in features • Notifications — service alerts and reminders • Contacts — optional invite or directory features • Storage / files — uploading documents or resumes • Microphone — only if a specific product feature requires audio input You can change permissions in your device settings. Denying a permission may limit related features but will not prevent unrelated functionality from working.

Subject to applicable law and the role of your organisation as controller (if any), you may have the right to: • Access the personal information we hold about you • Correct inaccurate information • Request deletion of your personal information • Withdraw consent where processing is based on consent • Object to or restrict certain processing • Opt out of marketing communications Account deletion (Apple requirement) — if you have an end-user account in an AAHAS-published app, you may request deletion of that account and associated personal data by using any in-app account deletion flow where available, or by emailing [email protected] with the subject "Account deletion request", your app name, and the email/phone linked to the account. We will process verified requests within a reasonable period, and no later than timelines required by applicable law or App Store / Play rules, except where we must retain information for legal, security, or fraud-prevention reasons. If your data is controlled by an organisation customer (employer, society, hospital, school), please contact that organisation first; we will support them in fulfilling requests under our contract.

Our Services are directed to businesses, institutions, and adult users. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies) for our own marketing or app-store consumer accounts without appropriate parental/guardian consent where legally required. Where a product such as Classtree is used by a school, the school is responsible for obtaining any required consents for student data and for configuring the product in line with applicable education and child-protection laws. Parents or guardians should contact the school for access or deletion requests related to school-managed records.

We are based in India. Personal information may be processed in India and in other countries where we or our service providers operate. Where we transfer personal data across borders, we use appropriate contractual and organisational safeguards consistent with applicable law.

Our websites may use cookies and similar technologies for essential site operation, security, preferences, and analytics. You can control cookies through your browser settings. Some features may not function fully if cookies are blocked. Mobile apps may use local storage, SDKs, and device identifiers for equivalent functionality (session management, security, analytics, and diagnostics) as described above.

Our apps and websites may include third-party code (for example cloud, analytics, or crash-reporting SDKs). Those partners process data only as needed to provide services to us, and we remain responsible for disclosing their collection practices in Apple App Store Connect and Google Play Console Data safety forms. We review major SDK privacy disclosures when integrating or updating them and update our store listings and this Policy when material practices change.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will change when we do. Material changes will be posted on this page and, where required, communicated through the Services or by email. Continued use of the Services after an update constitutes acceptance of the revised Policy to the extent permitted by law.

For privacy questions, data requests, or account deletion: Email: [email protected] Phone: +91 9121337083 Address: Flat 204, Floor 2, NCC Urban Gardenia BT 1, NCC Urban Gardenia, Serilingampally, Gachibowli, Hyderabad, Rangareddy, Telangana 500032 Office hours: 9:00 AM – 7:00 PM IST Privacy Policy URL for App Store and Google Play listings: https://aahassoftechsolutions.com/privacy-policy