Developers · Developer Terms
Arkaayu Developer Terms
These Developer Terms ("Terms") are an agreement between you and Healaxy Software India Private Limited, B-008, DLF Kings Court, W Block, Greater Kailash Part-2, New Delhi 110048, India ("Healaxy", "we", "us"), the maker of Arkaayu. They apply when you use the Arkaayu API, the developer console at developers.arkaayu.health, our documentation, credentials and related services (together, the "Platform").
You accept these Terms by ticking the box in the developer console. If you accept on behalf of a company or other organisation, you confirm that you have authority to bind it, and "you" means that organisation.
In short
- Only use Arkaayu data for the app you described to us and to your users, with their consent.
- Protect the data, publish a clear privacy policy, and delete data when users ask or disconnect.
- Never sell health data or use it for advertising, profiling, insurance, credit or employment decisions.
- Don't make medical claims you aren't approved to make, and don't pretend to be Arkaayu.
This summary is for convenience. The full Terms below are what apply.
- Eligibility and your account
- Permitted use of the API
- User consent and transparency
- Data protection
- Prohibited uses of data
- Security and breach notice
- Medical claims
- Review, rate limits and changes to the API
- Suspension and termination
- Intellectual property and branding
- Disclaimers
- Limitation of liability
- Indemnity
- Changes to these Terms
- Governing law and disputes
- General
- Contact
1. Eligibility and your account
1.1 You must be at least 18 years old and able to enter into a binding contract under the laws that apply to you.
1.2 You use the Platform through your Arkaayu account. The information you give us — your name, organisation, website and app details — must be accurate and kept up to date.
1.3 You are responsible for everything done with your account and your apps' credentials. Keep your password, client secrets and tokens confidential; keep client secrets only on servers you control and never in mobile, desktop or browser code. Turn on two-step sign-in for your Arkaayu account. Tell us immediately at security@arkaayu.com if you suspect any of them has been compromised, and rotate the affected secret.
1.4 You may not create accounts or apps to get around limits, review decisions or a suspension.
2. Permitted use of the API
2.1 Subject to these Terms, we give you a limited, non-exclusive, non-transferable, revocable licence to use the Platform to develop and run the app(s) you register in the console, and to access the data of Arkaayu users who have authorised your app.
2.2 You may use Arkaayu data only to provide the features of the app described in your app listing and to your users — not for any other product or purpose. If you want to use data in a new way, you must update your description and privacy policy and, where the use is materially different, get fresh consent from users.
2.3 You must not: (a) access or try to access data of any user who hasn't authorised your app; (b) scrape, reverse-engineer or interfere with the Platform, or bypass its security or rate limits; (c) share your credentials or let a third party call the API on your behalf, other than service providers acting for you under written obligations at least as protective as these Terms; (d) use the Platform to build a product that competes with or replicates Arkaayu's core services; or (e) use the Platform in breach of any law.
3. User consent and transparency
3.1 Users connect to your app through the Arkaayu authorization screen. You must not mislead users about who you are, what data you will read or what you will do with it, and you must not obtain consent through pressure, dark patterns or by making unrelated features conditional on it.
3.2 Request only the scopes your app actually needs for the features users use.
3.3 Make it easy for users to disconnect Arkaayu inside your app. When they do, revoke their tokens.
3.4 Provide a working support email and respond to users' questions and requests about their data within a reasonable time and within the time limits required by law.
4. Data protection
4.1 Compliance. You will comply with the Digital Personal Data Protection Act, 2023 and the rules made under it, and all other data-protection, health-information and consumer-protection laws that apply to you and to your users.
4.2 Your role. For personal data you receive through the Platform, you are an independent data fiduciary (or the equivalent "controller" under other laws). You decide how you process it and are responsible for doing so lawfully. Healaxy is not your data processor.
4.3 Privacy policy. You must publish, and link to in the console, a privacy policy that explains clearly what Arkaayu data you collect, why, how long you keep it, who you share it with, where it is stored, and how users can access, correct or delete it.
4.4 Deletion. You will delete the Arkaayu data you hold about a user (a) when they ask you to; (b) when they delete their account with you; and (c) when they disconnect your app or revoke its access, unless they have asked you to keep data already imported and the law allows it — in which case your privacy policy must say so. You may keep data longer only where the law requires it, and then only for that purpose.
4.5 Minimisation and retention. Collect and keep only what you need for your app's features, for no longer than you need it.
4.6 Children. If your app may be used by children, you are responsible for obtaining verifiable consent from a parent or lawful guardian where the law requires it.
5. Prohibited uses of data
You must not, and must not let anyone else:
- sell, rent or trade Arkaayu data, or any health data derived from it, including in aggregated form;
- use Arkaayu data for advertising, ad targeting or measurement, or share it with advertising networks or data brokers;
- use Arkaayu data for profiling users for purposes unrelated to the features they asked for;
- use Arkaayu data to make or support decisions about a person's insurance eligibility or premiums, credit, employment, housing or access to public services;
- attempt to re-identify people from de-identified or aggregated data, or combine Arkaayu data with other data to identify people who haven't connected your app;
- use Arkaayu data for surveillance, or to discriminate against anyone.
Using de-identified, aggregated data for research requires our prior written permission and a lawful basis under applicable law.
6. Security and breach notice
6.1 You will protect Arkaayu data with appropriate technical and organisational measures, at least including: encryption in transit (TLS) and at rest, including for stored tokens; access limited to people who need it; secure development practices and timely patching; logging of access to health data; and backups protected to the same standard.
6.2 If you become aware of any unauthorised access to, or loss or disclosure of, Arkaayu data or your app's credentials, you will notify us at security@arkaayu.com within 72 hours, with what you know at the time, and keep us updated. You will also notify the Data Protection Board of India, affected users and any other authority as the law requires, and cooperate with us in responding.
6.3 We may ask you for reasonable information about your security practices. We may also revoke tokens or rotate credentials if we believe they are at risk.
7. Medical claims
7.1 Arkaayu is a wellness product and not a medical device. Arkaayu data is not intended for diagnosing, treating, curing or preventing any disease.
7.2 You must not present your app, or any analysis of Arkaayu data (including ECG waveforms), as providing a medical diagnosis, treatment recommendation or emergency alert unless your product has all regulatory approvals, licences and clinical validation required for that use in each country where you offer it (for example, under the Medical Devices Rules, 2017 in India), and you take sole responsibility for that use.
7.3 Your app must tell users to seek professional medical advice for health concerns and to call emergency services in an emergency.
8. Review, rate limits and changes to the API
8.1 Apps must pass our review before they can be used by Arkaayu users other than you and your test users. Approval means only that your app met our review criteria at that time; it is not an endorsement or certification of your app, and doesn't relieve you of your obligations under these Terms or the law.
8.2 You will stay within the rate limits and usage limits we publish or tell you about, and won't try to get around them.
8.3 We may change, add or remove parts of the Platform. We'll try to announce breaking changes in the changelog in advance, but may make changes without notice when needed for security, legal or operational reasons.
9. Suspension and termination
9.1 You may stop using the Platform at any time by deleting your apps in the console.
9.2 We may suspend or revoke your access, an app, or its tokens, immediately and without prior notice, if we reasonably believe you have breached these Terms or the law, your app puts users or the Platform at risk, or we are required to by law. Where reasonable, we'll tell you why and give you a chance to fix the problem.
9.3 We may also end these Terms or stop offering the Platform for any reason with 30 days' notice.
9.4 When your access ends, you must stop calling the API and delete the Arkaayu data you hold, unless a user has asked you to keep their data and the law allows it, or the law requires you to keep it. Sections 4 to 7 and 10 to 17 continue after termination.
10. Intellectual property and branding
10.1 We and our licensors own the Platform and all rights in it. These Terms don't give you any rights except those expressly granted.
10.2 You may use the Arkaayu name and logo only as described in our brand guidelines, to identify your Arkaayu integration. You must not use "Arkaayu", "Healaxy" or anything confusingly similar in your app's name, domain, logo or social handles, or imply that we made, endorse or partner with your app.
10.3 You own your app. You give us permission to show your app's name, logo, description and links on Arkaayu authorization screens, in users' connected-apps settings and, for live apps, in directories of apps that work with Arkaayu.
10.4 If you send us feedback, we may use it without obligation to you.
11. Disclaimers
To the extent permitted by law, the Platform and Arkaayu data are provided "as is" and "as available". We don't promise that the Platform will be uninterrupted or error-free, or that data from wearable devices is complete, accurate or timely. Readings depend on how users wear and sync their devices.
12. Limitation of liability
12.1 To the extent permitted by law, neither party is liable to the other for any indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, data or goodwill.
12.2 To the extent permitted by law, our total liability arising out of or relating to these Terms or the Platform is limited to the higher of (a) the fees you paid to Healaxy for the API in the 12 months before the claim arose, and (b) INR 10,000 (ten thousand Indian rupees).
12.3 Nothing in these Terms limits liability that cannot be limited under applicable law, or your liability under sections 4 to 7 or 13.
13. Indemnity
You will defend and indemnify Healaxy, its affiliates and their officers and employees against any claims, penalties, losses and reasonable costs (including legal fees) arising from your app, your use of Arkaayu data, or your breach of these Terms or the law.
14. Changes to these Terms
We may update these Terms. Each version has a date-based version number. When we make a material change we will publish the new version here, tell you by email or in the console, and ask you to accept it in the console before you can continue to manage your apps. If you don't agree, you may stop using the Platform. Continuing to use the API after a new version takes effect means you accept it.
15. Governing law and disputes
These Terms are governed by the laws of India. The courts at New Delhi, India have exclusive jurisdiction over any dispute arising out of or relating to them, without prejudice to our right to seek urgent relief in any court of competent jurisdiction.
16. General
These Terms, together with the documents they refer to, are the entire agreement between us about the Platform. You may not assign them without our written consent; we may assign them to an affiliate or a successor to our business. If any part is unenforceable, the rest stays in effect. Not enforcing a right is not a waiver. Neither party is liable for delays caused by events beyond its reasonable control. Nothing in these Terms creates a partnership, agency or employment relationship.
17. Contact
Questions about these Terms or the Platform: developers@arkaayu.com. Security issues and data breaches: security@arkaayu.com.
Healaxy Software India Private Limited, B-008, DLF Kings Court, W Block, Greater Kailash Part-2, New Delhi 110048, India.