QubeHealth

1. Terms and Conditions

QUBEHEALTH · QB HEALTH TECHNOLOGIES PRIVATE LIMITED

Terms of Service & Privacy Policy

Effective Date: 01 April 2026 · Version 2.2 · Applicable Jurisdiction: India

PLEASE READ THESE TERMS CAREFULLY. BY ACCESSING OR USING THE QUBEHEALTH PORTAL, APP OR WEBSITE IN ANY MANNER, YOU AGREE TO BE BOUND BY THESE TERMS OF SERVICE AND THE PRIVACY POLICY. IF YOU DO NOT AGREE, DO NOT ACCESS OR USE THE SERVICES.

PART 1 — TERMS OF SERVICE

1. Agreement & Parties

1.1 Who These Terms Apply To

These Terms of Service ("Terms") constitute a legally binding contract between you ("You", "Your", "Customer") and QB Health Technologies Private Limited ("QubeHealth", "QubeHealth-Pay", "We", "Us", "Our"), regarding Your use of the website at https://www.qubehealth.com, the QubeHealth mobile application available on the Google Play Store and the iOS App Store, and any other digital interfaces (collectively, the "Portal"), and Your access to the services provided through the Portal.

By using the Portal, You acknowledge that You have read, understood and accepted these Terms without limitation or qualification.

1.2 Who We Are

QB Health Technologies Private Limited operates QubeHealth-Pay, a financial and healthcare technology platform built to make healthcare accessible and affordable for India's workforce and their families. We do this in three ways:

Healthcare Payments — enabling Customers to pay for medical consultations, hospitalisation, diagnostics, pharmacy purchases and other health-related services using the QubeHealth-Pay App and/or Card, or through a partner's mobile application via SDK, at healthcare providers across India;
Healthcare Financing — connecting Customers with select regulated Financing Partners to provide no-cost or low-cost credit lines for healthcare expenses; and
Enterprise Health Services — facilitating healthcare services to enterprises as a licensed clinical establishment.

QubeHealth does not represent itself as a lending company, insurer or direct healthcare provider. We are a financial and healthcare technology intermediary. The full scope of Services is set out in Section 2.

1.3 Changes to These Terms

QubeHealth may update these Terms from time to time. Where changes are material (in QubeHealth's reasonable assessment), QubeHealth will make reasonable efforts to inform You. The updated Terms take immediate effect upon posting to the Portal. Your continued use of the Portal after such posting constitutes acceptance of the updated Terms. You are advised to review these Terms periodically.

1.4 Representations, Warranties & Undertakings

By using the Portal, You represent and warrant that:

You are above 18 years of age, of sound mind, a resident Indian citizen, and legally competent to enter into these Terms without coercion;
You are a tax resident of India;
These Terms constitute a legal, valid and binding obligation enforceable against You;
If You access the Portal from outside India, You do so at Your own risk and are solely responsible for compliance with local laws. QubeHealth accepts no liability for non-compliance with the laws of any country other than India;
You are not a Politically Exposed Person resident outside India as defined in the RBI Master Direction – Know Your Customer (KYC) Direction, 2016, and are otherwise compliant with the Prevention of Money Laundering Act, 2002 and all applicable AML/CFT regulations;
The information and data on this Portal does not constitute an offer to buy or sell any services in any jurisdiction other than India;
You are not restricted by any legal, regulatory, judicial or other authority from accessing the Portal or using the Services;
All information You provide is correct, true and accurate;
You acknowledge that QubeHealth is entitled to remove content on the Portal that contravenes these Terms or applicable law; and
You understand that QubeHealth provides no warranties for its Services and shall not be liable for claims made by You or any third party. You undertake to accept sole liability for Services availed and to indemnify and hold harmless QubeHealth, its affiliates, directors, officers, employees and agents against all damages arising from Your breach of these Terms or any warranty.

1.5 Third-Party Information & Employer Data

QubeHealth may, with Your consent, request third parties to provide information to personalise Your Portal experience. Financing Partners may collect credit-related information (such as credit scores) from Credit Information Companies, Information Utilities, or Account Aggregators under contract; You consent to this.

You acknowledge that data may be shared by third parties including Your employer and that such data will be processed in accordance with our Privacy Policy. This may include employment and compensation-related data (including salary ranges or eligibility information), where required for the provision of Qube products and services, subject to Your consent.

1.6 Marketing & Communications

By using the Portal, You authorise QubeHealth and its employees, agents and associates to contact You via telephonic calls, WhatsApp, SMS, or other channels about QubeHealth offers, Financing Partner loan schemes, and other promotions. You confirm that the National Do Not Call Registry provisions under TRAI will not apply to such communications.

As part of the QubeHealth-Pay experience, You may receive targeted communications — including in-app banners and WhatsApp messages facilitated by QubeHealth — from healthcare providers and health insurance companies whose products or services are relevant to Your healthcare needs. Such targeting may be based on Your healthcare spending patterns and usage activity on the Portal. QubeHealth acts as the intermediary facilitating these communications and does not sell Your personal data directly to third parties.

All such targeted communications are subject to Your prior, informed and specific consent, as required under the Digital Personal Data Protection Act, 2023 (“DPDPA”). You may withdraw this consent at any time through the Portal settings, without affecting the lawfulness of communications sent prior to withdrawal. Withdrawal of consent for targeted communications will not affect Your ability to continue using core QubeHealth-Pay features.

2. Services

2.1 The Service

QubeHealth currently provides You access to the following Services:

Healthcare Payments — enabling You to pay for medical consultations, hospitalisation, diagnostics, pharmacy purchases and other health-related services using the QubeHealth-Pay App and/or via a partner's mobile application through an integrated SDK, at healthcare providers across India;
Healthcare Financing — credit facilities provided by regulated Financing Partners for healthcare expenses (“Credit Facility”); and
Enterprise Health Services — healthcare services facilitated by QubeHealth to enterprises in its capacity as a licensed clinical establishment.

These Terms apply to You only to the extent You are using a particular Service. Clauses specific to one product will not apply to You if You are not using that product.

QubeHealth will provide the following facilities in connection with the above Services (as applicable):

Facilitate Your access to healthcare and medical services and information related to healthcare service providers;
Facilitate Your use of the Portal;
Facilitate credit from Financing Partners and enable execution of loan documentation;
Provide details of credit facilities availed, interest and principal repayments, on the Portal;
Provide merchant discount and other benefits on healthcare products and services;
Facilitate payment for healthcare services;
Any other healthcare payments, financing, insurance, co-branded financial products, or allied services as may be introduced and published on the Portal from time to time; and
Any other Services as QubeHealth may provide at its discretion.

QubeHealth reserves the right to add, remove or modify any features or functionality of the Services at its sole discretion.

2.2 Financing Partners

QubeHealth has tied up with multiple Financing Partners to ensure You get the best financing options. The list of Financing Partners may be modified from time to time. QubeHealth is not obligated to inform You of revisions to this list. You may request a current list of Financing Partners by visiting https://www.qubehealth.com.

2.3 Cancelling Transactions

Loan approvals are at the sole discretion of the Financing Partner. Loan transactions once initiated on the Portal cannot be cancelled by You except as specifically permitted on the Portal or under Your loan documents.

2.4 Data Collection

The Privacy Policy forms part of these Terms. By using the Portal, You authorise QubeHealth — directly or through third parties — to make any inquiries reasonably necessary to validate Your identity and collect information about You in accordance with the Privacy Policy.

To provide its full range of Services, the QubeHealth-Pay App requests access to the following device permissions. Each permission is optional and can be managed or revoked at any time via Profile > Manage Permissions within the App:

Camera — to scan QR codes for healthcare payments and to capture and store medical bills;
Contacts — to enable You to add and invite family members or dependants into the App;
Location — to help You find nearby labs, doctors and healthcare services;
Media — to enable You to upload and store medical records and bills;
Microphone — to enable voice inputs and facilitate teleconsultations with doctors; and
SMS — to auto-read OTPs and surface important account updates.

No permission is used for any purpose beyond what is described above. QubeHealth does not access, store or share any data obtained through these permissions except as necessary to provide the specific Service for which that permission was granted, and in accordance with the Privacy Policy and the Digital Personal Data Protection Act, 2023.

QubeHealth does not store Sensitive Personal Data or KYC documents beyond the point of transmission to Financing Partners. QubeHealth reserves the right to suspend or limit access to Your Account if it is unable to verify Your identity.

2.5 Indemnity

QubeHealth shall not be liable for Your breach of the Privacy Policy or these Terms. You agree to indemnify, defend and hold harmless QubeHealth, its affiliates, group companies, directors, officers, employees, agents and third-party service providers from and against all losses, liabilities, claims, damages, costs and expenses (including legal fees) arising out of any breach or non-performance of these Terms by You.

2.6 Limitation of Liability & Injunctive Relief

To the fullest extent permitted by applicable law, QubeHealth and its affiliates, officers, employees, directors, shareholders, agents and licensors shall not be liable under any theory of liability (contract, tort, statute or otherwise) for any direct, indirect, incidental, special, consequential or exemplary damages — including loss of revenue, profits, goodwill, data or other intangible losses — resulting from:

Your use of (or inability to use) the Portal;
Unauthorised access to or alteration of Your data; or
Any other matter relating to the Services.

The Services are provided on an ‘as is’ and ‘as available’ basis. QubeHealth makes no warranties — express or implied — regarding the quality, accuracy or completeness of information on the Portal, fitness for a particular purpose, merchantability, or uninterrupted access.

Your sole and exclusive remedy for any dispute with QubeHealth is to discontinue use of the Portal and Services. In no event shall QubeHealth’s aggregate liability exceed the subscription or access fees (if any) paid by You for the specific Service giving rise to the claim.

You irrevocably waive any right to seek injunctive or other equitable relief in respect of QubeHealth’s operations, projects, or advertising.

2.7 Credit Investigation & Reporting

You explicitly consent to and authorise QubeHealth’s Financing Partners to obtain Your Credit Information Report and Credit Score from CRIF High Mark, TransUnion CIBIL, Experian, Equifax, and such other credit information companies as permitted by law, for the purpose of: (i) determining Your credit score; (ii) opening an account with a Financing Partner; (iii) revising Your eligibility limit; and (iv) such other purposes as required to provide You with a loan.

This consent is valid for a period of 3 (three) years. You agree not to raise any claim against credit information companies in relation to Your Credit Information Report. You may opt out of the Service as governed by these Terms.

2.8 Collections

You agree and authorise QubeHealth and its Financing Partners to send You payment reminders from time to time, in accordance with RBI guidelines and applicable law.

2.9 Communications & Notifications

QubeHealth may communicate with You electronically, by phone, WhatsApp or in writing. Standard mobile, data and message rates may apply at Your expense. Electronic communications are deemed received within 24 hours of sending; postal communications within 3 business days.

QubeHealth reserves the right to close Your Account and immediately collect all due amounts if You withdraw consent to receive electronic communications or revoke access to any third-party account on which the Service relies.

2.10 Working with Third Parties

Where You expressly authorise a third party to access information about Your Account, QubeHealth may disclose such information to that third party. You remain responsible for all obligations under these Terms notwithstanding such authorisation. You agree to indemnify QubeHealth from any liability arising from the actions or inactions of any such third party.

3. Your Use of the Portal

3.1 KYC Procedure

In compliance with RBI Master Direction – KYC Direction, 2016, KYC verification is mandatory for registered use of the Portal. KYC documents submitted by You are shared with Financing Partners for their own verification. Responsibility for customer identification, enhanced due diligence and final KYC compliance rests with the Financing Partners.

Acceptable KYC documents include:

Proof of Identity: Aadhaar, PAN Card (mandatory for salaried/self-employed users), or Form 60;
Proof of Address: Driving Licence, Voter ID, Passport, Aadhaar, utility bills, rent receipts, or post-paid mobile bill; and
Other ID: College ID or Employee ID (or official email verification if Employee ID is unavailable).

You are also required to submit a selfie, digitally sign uploaded documents using a valid electronic signature, and authorise QubeHealth to share these documents with Financing Partners for KYC and creditworthiness checks. QubeHealth does not store Aadhaar data or KYC documents.

3.2 Accuracy of Information

You agree to provide only true, accurate, current and complete information. You are solely responsible for the accuracy of all information, including bank account details and invoice data. QubeHealth is not responsible for verifying this information. You must promptly update Your information if it changes.

If an incorrect bank account number results in a misdirected credit, QubeHealth disclaims all liability and recovery cannot be guaranteed. If You receive any incorrect credit, You must notify QubeHealth within 24 hours and return those funds as directed.

3.3 Transaction Processing Delays

Transactions may be held as pending or delayed for processing confirmation by the Financing Partner, Payment Processing Partner, Bank or Merchant. A pending transaction may be cancelled at any time until confirmed by QubeHealth.

3.4 Fees & Charges

Service charges or fees are non-refundable and will be detailed in Your loan documentation and MITP available on the Portal. QubeHealth reserves the right to levy additional charges based on Your chosen payment method, disclosed to You prior to the transaction. You are responsible for any fees charged by Your network provider (SMS, data, etc.).

3.5 Account Security

You are solely responsible for maintaining the secrecy and security of Your Account credentials, and for all activity occurring under Your Account. You must notify QubeHealth immediately if You suspect unauthorised access. QubeHealth disclaims all liability for breaches arising from Your failure to maintain credential security.

3.6 Portal Content & Availability

Information on the Portal is for general information purposes only. QubeHealth makes no warranty as to its completeness, timeliness or accuracy and reserves the right to change content at its discretion.

Access may be interrupted due to planned maintenance or circumstances beyond QubeHealth’s control, including (without limitation): hardware or software failure; server or network issues; overload; severe weather or natural disasters; power interruptions; government or regulatory restrictions; or any Force Majeure Event. QubeHealth assumes no liability for monetary or other loss arising from such interruptions.

3.7 Third-Party Links

The Portal may link to third-party websites (‘Allied Sites’) not controlled or endorsed by QubeHealth. QubeHealth makes no warranties about the content, accuracy or security of Allied Sites. Your use of Allied Sites is at Your own risk and governed by their respective terms of use.

3.8 Confidentiality

Both QubeHealth and You agree to keep each other’s Confidential Information (whether or not marked as such) confidential and not to disclose it without the other party’s consent. This obligation does not apply to information disclosed pursuant to a court or government order, independently obtained from a third party, or already in the public domain.

3.9 Suspension & Blocking

Access to Services may be temporarily or permanently suspended if suspicious or fraudulent activity is detected. Once the matter is resolved, Your access will be reinstated.

4. Restrictions on Use

4.1 General Restrictions

By using the Portal or Services, You agree to the following:

You will not use the Services for any non-healthcare related expense;
You will not engage in any activities contrary to applicable law or these Terms;
You will not solicit others to participate in unlawful acts;
You will not provide false, inaccurate, deceptive or misleading information;
You will not provide information belonging to any person other than Yourself;
You will not use or attempt to access another person’s Account;
You will not prevent other users’ access to or use of the Portal;
You will not collect or attempt to collect others’ personal information;
You will not create multiple, fraudulent or fake Accounts;
You will not collect Financing Partner contact information for the purpose of unsolicited direct communications;
You will not introduce viruses, trojans, worms or any other malicious code;
You will not accomplish a cash advance using the Services;
You will not exceed Your authorised access to any portion of the Services;
You will not attempt unauthorised access to QubeHealth systems or circumvent security features;
You will not impose any unreasonable load on QubeHealth’s infrastructure;
You will comply with all copyright, trademark and proprietary notices on the Portal;
You will not reverse-engineer, adapt, translate or re-format any part of the Portal; and
You will not upload, publish or transmit content that is unlawful, defamatory, harmful, pornographic, harassing, racially objectionable, infringing of third-party IP rights, or otherwise prohibited by applicable law, including the Information Technology Act, 2000.

4.2 Cashback Rewards: Restrictions & Conditions

4.2.a Qualifying Transactions

Cashback rewards issued through QubeHealth products (‘Cashback’) are only valid for use on transactions that meet the criteria expressly defined in the applicable product feature within the Portal or App (‘Qualifying Transactions’). Cashback shall not be applied to any transaction that is not a Qualifying Transaction.

4.2.b Usage Limits

Cashback may be subject to minimum spend requirements, expiry schedules, daily or monthly usage limits, and caps on the maximum redeemable value per transaction or per period, as specified in the Portal or App. Such limits shall be disclosed to You at the time of issuance or within the cashback feature interface.

4.2.c Exclusions

Cashback may not be applied towards:

Payment of fees, charges or interest due on any account, unless specifically permitted;
Purchases of cash equivalents including cash-like instruments, gift cards, withdrawals or fund transfers; or
Transactions that violate applicable laws or these Terms.

4.2.d Non-Transferability

Cashback is personal to the Account Holder and may not be transferred, assigned, sold, pledged or otherwise conveyed to any third party, unless expressly permitted by QubeHealth in writing.

4.2.e Expiry & Forfeiture

Cashback shall expire if not used within the timeframes disclosed in the Portal or App. Expired Cashback shall not be reinstated except at QubeHealth’s sole discretion.

4.2.f Modification

QubeHealth reserves the right to modify, suspend or terminate Cashback offers, rules, values or programmes at any time, with or without notice, subject to applicable law. Such changes take effect immediately upon posting on the Portal or App.

5. Disclaimers & Liabilities

Notwithstanding anything to the contrary:

QubeHealth, its affiliates and their respective directors, officers, employees, agents and representatives shall have no liability to You or any third party for any indirect, incidental, special or consequential damages or any loss of revenue or profits under or relating to these Terms;
QubeHealth does not warrant or guarantee the performance of any Financing Partner and is not responsible for any claim of money or damages arising from a Financing Partner’s failure to grant financing or a Loan;
QubeHealth makes no representations or warranties on behalf of Financing Partners;
QubeHealth expressly disclaims all liability arising from any loan documentation executed between You and a Financing Partner;
QubeHealth disclaims all warranties of any kind regarding the Portal and all information and content — whether express or implied — including warranties of merchantability, non-infringement, title, data accuracy, completeness, satisfactory quality and fitness for a particular purpose;
QubeHealth does not guarantee that identified defects will be corrected, that the Portal is virus-free, or that it will be available on an uninterrupted or error-free basis; and
No advice or information, whether oral or written, obtained from QubeHealth shall create any warranty not expressly stated in these Terms.

6. Credit Facility

6.1 Customers may avail of the Credit Facility through Financing Partners for healthcare expenses, subject to QubeHealth’s partnership with their employer or otherwise as per this Section.

6.2 The employer will initially provide data relating to the Customer on behalf of the Customer in accordance with these Terms and the Financing Partner’s policies. Data handling is governed by these Terms and the Financing Partner’s policies.

6.3 After data is gathered, the Customer is onboarded following KYC verification. QubeHealth does not store Aadhaar data or KYC documents. KYC documents may be used by Financing Partners for credit bureau or creditworthiness checks.

6.4 Based on the data gathered, the Customer will be offered a pre-approved Eligibility Amount by Financing Partners. To access this amount, the Customer must set up a Repayment Mandate in favour of the Financing Partner.

6.5 The Eligibility Amount is valid for 30 days, after which it is recalculated.

6.6 The Customer may draw down any portion of the Eligibility Amount by requesting a draw-down through the Portal.

6.7 For each draw-down request, QubeHealth conveys the demand to the Financing Partner, who responds with a Key Fact Statement, Sanction Letter and Loan Agreement.

6.8 The Customer must agree to the Key Fact Statement and Sanction Letter, and execute the Loan Agreement digitally, before the Loan is disbursed.

6.9 Each draw-down is a separate Loan for which a separate Loan Agreement is executed between the Customer and the Financing Partner.

6.10 QubeHealth is not a party to Loan Agreements between the Customer and the Financing Partner, and disclaims all liability — direct or indirect — for any breach of such agreements.

6.11 The Financing Partner disburses the Loan directly to the Customer’s bank account (the same account linked to the Repayment Mandate).

6.12 The Customer further acknowledges that:

Loans are strictly for health and medical use only as outlined;
At the time of booking the Loan, the Customer agrees to repay principal and interest to the Financing Partner;
The Customer may request QubeHealth to reimburse the interest (‘Interest Reimbursement’) upon providing proof of medical end use;
The Customer must provide an invoice equal to or greater than the amount drawn down;
On receipt and approval of the invoice, QubeHealth will credit the full interest payable on the Loan amount to the Customer’s bank account;
If the invoice provided is lesser than the Loan amount, QubeHealth will reimburse only the interest due on the invoiced amount; and
If no valid invoice is provided or validated by QubeHealth, no interest reimbursement will be made.

6.13 Principal repayments and penalty payments will occur directly from the Customer’s bank account via the Repayment Mandate as per the terms agreed with the Financing Partner.

7. Termination

7.1 You may terminate these Terms at any time by emailing contact(at)qubehealth.com, provided You discontinue all use of the Portal and Services. Pending transactions will be cancelled unless legally prohibited. Termination does not cancel Your obligation to repay any outstanding Loan or other accrued obligations. If You owe any amount to QubeHealth or a Financing Partner, Your Account will not be closed until payment is made. QubeHealth may limit Your ability to transact during such period. Your information will be retained in accordance with the Privacy Policy.

7.2 QubeHealth may close Your Account if You do not log in or use the Services for 12 or more consecutive months. Information will be retained in accordance with these Terms and the Privacy Policy.

7.3 These Terms take effect from the date of their publication on the Portal. QubeHealth reserves the right to terminate Services immediately in the event of breach, misrepresentation, unlawful activity, or inability to verify information You submit.

7.4 If QubeHealth reasonably believes You are in breach of these Terms, it may immediately suspend or terminate Your Account without notice, in addition to any other available remedy.

8. Miscellaneous

8.1 Dispute Resolution

If a dispute arises, We encourage You to first contact QubeHealth at contact(at)qubehealth.com to attempt direct resolution.

If unresolved, any dispute arising out of or in connection with these Terms shall be referred to and finally resolved by binding arbitration in accordance with the Arbitration and Conciliation Act, 1996 (as amended). The arbitration shall be conducted by a sole arbitrator, with the seat and venue at Mumbai, India, and the language of proceedings shall be English.

These Terms are governed by and construed in accordance with the laws of India. Subject to the arbitration clause, the courts at Mumbai and Delhi shall have exclusive jurisdiction.

8.2 Updating Contact Information

You may update Your mobile number or email address registered with QubeHealth by emailing contact(at)qubehealth.com.

8.3 Assignment

You may not assign or transfer these Terms or any rights hereunder without QubeHealth’s prior written consent. QubeHealth may freely assign its rights and obligations under these Terms.

8.4 Force Majeure

QubeHealth shall not be liable for failure to perform its obligations if such failure is caused by a Force Majeure Event, including (without limitation): unavailability of communication systems, breach or virus in systems, fire, pandemic, flood, explosion, acts of God, civil commotion, riots, insurrection, war or acts of government. QubeHealth’s obligations are suspended for the duration of such event.

8.5 Entire Agreement

These Terms, together with the Privacy Policy, constitute the entire agreement between QubeHealth and You and supersede all prior agreements, representations, warranties, and understandings — whether oral or written.

8.6 Severability

If any provision of these Terms is found invalid or unenforceable, that provision shall be severed and the remaining provisions shall continue in full force and effect.

8.7 No Waiver

QubeHealth’s failure to exercise any right under these Terms shall not constitute a waiver of that right. Any waiver must be in writing and signed by QubeHealth and applies only to the specific instance for which it was granted.

8.8 Rights & Remedies

QubeHealth’s rights, powers and remedies are cumulative and in addition to, not in derogation of, any rights or remedies provided by law. They may be exercised even if a conflict of duty exists.

8.9 Consent

By clicking any acceptance button or checkbox on the Portal, or by virtue of continued use of the Portal, You: (a) confirm Your legal eligibility to enter into a binding contract; and (b) accept these Terms as displayed on the Portal.

8.10 Non-Exclusive Arrangement

The arrangement under these Terms between QubeHealth and You is on a non-exclusive basis.

8.11 Grievance Officer

For any complaints or grievances regarding these Terms or the Services, please contact:

Grievance Officer: Dhirendra Maurya

Email: contact(at)qubehealth.com

QubeHealth will acknowledge grievances within 2 Business Days and endeavour to resolve them within 30 days in accordance with applicable law.

9. Risk Disclosures

9.1 General Risk Disclosure

The Services involve financial products and credit facilities regulated by the Reserve Bank of India. The use of credit carries inherent financial risk including the obligation to repay principal, interest and applicable charges. You are advised to carefully review all Key Fact Statements, Sanction Letters and Loan Agreements before executing any draw-down. QubeHealth is not a lender and is not responsible for the terms offered by Financing Partners.

9.2 Technology & Cybersecurity Risk

No technology platform can be guaranteed to be entirely free from cyber threats. While QubeHealth employs industry-standard security measures including encryption, firewalls and SSL, it does not guarantee that unauthorised access, data breaches or system interruptions will not occur. You are advised to maintain strong credential hygiene and immediately report any suspected unauthorised access to Your Account.

9.3 Third-Party & Healthcare Provider Risk

QubeHealth is a technology intermediary and does not verify, endorse or warrant the quality of healthcare services, products or providers accessible through or linked to the Portal. Any disputes regarding the quality of healthcare services must be resolved directly with the relevant provider. QubeHealth is not liable for any healthcare outcome.

9.4 Regulatory Risk

The regulatory environment governing fintech, digital lending, and healthcare financing in India is evolving. Changes in RBI guidelines, DPDPA 2023 and other applicable regulations may affect the availability or features of the Services. QubeHealth will endeavour to comply with regulatory changes and update these Terms accordingly.

9.5 Cashback Reward Liability Disclosure

Cashback is a non-cash incentive and does not constitute a financial obligation of QubeHealth beyond its stated rules. Cashback carries no monetary value until applied in accordance with these Terms and the specific Cashback rules published in the App. QubeHealth’s liability for Cashback redemption is limited to the fair market value of the Cashback as applied to a Qualifying Transaction, subject to applicable restrictions. QB Health Technologies Private Limited (‘Qube’) reserves the right to cancel, forfeit or alter the Cashback or any other such promotion at its discretion.

2. Privacy Policy

PART 2 — PRIVACY POLICY

This Privacy Policy (‘Policy’) sets out QB Health Technologies Private Limited’s approach to data privacy in furtherance of its obligations under applicable data privacy laws, including the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (‘IT RSP Rules’), the Digital Personal Data Protection Act, 2023 (‘DPDPA 2023’) and the RBI Guidelines on Digital Lending dated 2 September 2022 (‘DLG Guidelines’).

References to ‘We’, ‘Us’, ‘Our’ and ‘QubeHealth’ refer to QB Health Technologies Private Limited (including its affiliates). ‘You’, ‘Your’ refer to You as a user of the Services as defined in the Terms.

By visiting or accessing the Portal and voluntarily providing personal data, You consent to its use in accordance with this Policy.

PP-1. Scope & Application

This Policy governs the collection and treatment of personal information collected through QubeHealth’s websites and web applications, mobile applications, customer support interactions, social media, marketing campaigns, and any other interactions with QubeHealth.

Capitalised terms not defined in this Policy have the meanings assigned under the Terms.

PP-2. Types of Data Collected

Personal Data

We may collect: name, title, gender, date of birth, email address, phone number, profile picture, login name, country/state/city, postal address, workplace name, job position/designation (including salary), IP address and other passively collected information; Your picture/selfie; and any other information You voluntarily provide to update Your Account, respond to surveys, or use Portal features.

We do not collect or store biometric information (including fingerprints or voiceprints), or access mobile phone resources (files, media, contacts, call logs, telephony) without Your prior and explicit consent.

Sensitive Personal Data (‘SPD’)

We may collect: passwords; financial information (bank account, card or payment instrument details); physical, physiological and mental health information; medical records and history; credit reports and bureau data (collected from TransUnion CIBIL, Experian, CRIF High Mark, Equifax and other bureaus) on Your behalf or on behalf of Financing Partners in connection with a loan application; and PAN, Aadhaar and other KYC documents shared at Your sole discretion on behalf of Financing Partners.

Publicly available information or information provided under the Right to Information Act, 2005 is not treated as SPD.

Personal Data and Sensitive Personal Data are collectively referred to as ‘Collected Data’.

PP-3. Data Storage

QubeHealth stores only Personal Data required to carry out its operations and provide Services. QubeHealth does not store Sensitive Personal Data beyond the point of transmission to Financing Partners for the purposes described in this Policy.

PP-4. Consent

You explicitly and prior to processing provide consent for:

One-time collection of SPD including Your selfie (via camera/microphone), location (via GPS), and such other SPD required for onboarding;
Periodic collection (until You communicate withdrawal in writing) of SPD and documents including Aadhaar, PAN, bank details, and credit scores from credit information companies.

You understand that data is collected to enable informed lending decisions and faster processing of credit applications. QubeHealth may apply for credit scores directly or through partner tie-ups and is authorised to share Your details with such partners.

PP-5. Sources of Data

Collected Data is obtained directly from You (through Portal registration and use) and from third parties such as employers, credit bureaus, Account Aggregators and other authorised data fiduciaries.

PP-6. Purpose of Data Processing

We collect and process Collected Data for the following purposes:

Verifying Your identity and Collected Data;
Monitoring, improving and administering the Portal;
Delivering Services and designing customised products;
Sending notifications, communications and information about Services You have requested;
Responding to enquiries and processing applications;
Enabling access to financial services through Financing Partners;
Diagnosing technical problems;
Enhancing and improving Services;
Preventing, detecting and mitigating fraudulent activities;
Contacting You via email, phone, WhatsApp or SMS to offer Services; and
Complying with legal obligations, resolving disputes and enforcing agreements.

PP-7. Legal Basis for Processing

We process Your Collected Data on the following legal bases: (i) Your consent; (ii) necessity for the performance of our contract with You or to take pre-contractual steps; and (iii) compliance with a legal obligation. Processing may rely on multiple legal bases simultaneously.

PP-8. Sharing of Data with Third Parties

We may share Your Collected Data with:

Regulated Financing Partners (banks and NBFCs) and third-party service providers for the provision of Services;
Technology partners for data analysis to improve Services;
Competent government or regulatory authorities in compliance with applicable law or court orders;
Technology partners for credit and KYC checks to facilitate loans; and
Any acquirer, successor or business entity in the event of merger, acquisition or restructuring of QubeHealth.

All third-party sharing is subject to confidentiality obligations and applicable law. We do not sell Your personal data to third parties for their independent marketing purposes.

PP-9. Cookies

When You visit our website, we may collect information through cookies or similar technologies. Cookies are used to: improve website functionality; personalise Your experience; and gather analytics. You may refuse or delete cookies via Your browser settings, though this may limit certain Portal features. QubeHealth’s sites do not currently respond to ‘Do Not Track’ signals.

PP-10. Data Retention & Purging

We retain Personal Data for as long as required for the purposes set out in this Policy and for legal or regulatory compliance. Sensitive Personal Data is not retained beyond the point of transmission.

We follow a documented data purging process to securely delete or anonymise data when retention is no longer required. All Personal Data is stored on servers located in India.

PP-11. External Links

The Portal may link to third-party websites. This Policy does not cover those websites’ data practices. We encourage You to read their privacy policies before sharing any personal information.

PP-12. Security

QubeHealth employs administrative, technical and physical safeguards — including industry-standard encryption, firewalls and SSL — to protect Your Collected Data. However, no system is entirely immune to unauthorised access. QubeHealth will not be liable if any unauthorised person accesses Your Account. In the event of a Personal Data breach likely to result in risk to individuals’ rights and freedoms, QubeHealth will notify the relevant supervisory authority in compliance with applicable laws and, where required, inform affected individuals directly.

PP-13. Your Rights

Subject to applicable law and Your jurisdiction, You may exercise the following rights in relation to Your Collected Data:

Access: know what Collected Data We hold about You;
Correction: request correction or supplementation of inaccurate or incomplete data;
Objection: object to collection or use of Your data for certain purposes;
Restriction: request deactivation of Your Account to restrict further processing;
Erasure: request deletion of some or all Personal Data. Residual data in logs will be purged within 12 months. Data required by law or for contract performance may be retained;
Withdrawal of Consent: withdraw consent at any time, without affecting the lawfulness of prior processing. Note that withdrawal may result in cessation of certain Services, and Financing Partners retain the right to continue processing data until all credit facilities are repaid in full;
Information: receive clear information about data collection and sharing practices (as provided in this Policy);
Grievance Redress: raise complaints about data handling; and
Nomination: nominate a representative to exercise rights on Your behalf by written authorisation to contact(at)qubehealth.com.

PP-14. Phishing

Phishing involves fraudulent websites or emails designed to obtain sensitive data. QubeHealth does not send emails requesting payment information, usernames or passwords. If You suspect phishing, do not respond and contact us at contact(at)qubehealth.com. QubeHealth may, however, verify usernames and passwords from time to time through legitimate means.

PP-15. No Sale of Personal Data

We do not sell or trade Your personal data to third parties for their own independent marketing use. Data is used only as described in this Policy, the Terms, and the Most Important Terms and Conditions (MITP).

PP-16. Consent Withdrawal & Account Deletion

You may withdraw consent or request deletion of Your Account by raising a request through the Portal or emailing contact(at)qubehealth.com. If You have availed any loan facility, the Financing Partner retains the right to continue processing Your information until the credit facility is fully repaid. QubeHealth will not retain Your data beyond operational or legal necessity.

PP-17. Electronic Communications

QubeHealth may communicate with You electronically, by phone or WhatsApp. Electronic communications are deemed received within 24 hours; postal communications within 3 business days. You agree these are not unsolicited communications for the purpose of any applicable law.

PP-18. Intellectual Property

‘QubeHealth’ is a registered trademark of QB Health Technology Private Limited. All content, trademarks and materials on the Portal are protected by copyright, trademark and other intellectual property laws. Unauthorised use is strictly prohibited.

PP-19. Indemnification

You agree to indemnify and hold harmless QubeHealth, its regulated entity partners and third-party partners (‘Indemnified Parties’) from all losses, liabilities, claims, damages and expenses (including legal fees) arising from Your breach of this Policy.

PP-20. Dispute Resolution

Any dispute arising out of or in connection with this Privacy Policy shall be resolved by binding arbitration in accordance with the Arbitration and Conciliation Act, 1996 (as amended), with the seat at Mumbai, India, and English as the language of proceedings.

PP-21. Updates to This Policy

We regularly review and update this Policy. Any changes take immediate effect upon posting. Your continued use of the Portal after any update constitutes acceptance of the updated Policy.

PP-22. Grievance Officer & Contact