Privacy Policy

1. Introduction

This Privacy Policy explains how SLAQ AI Labs Private Limited (referred to as "ZLAQA," "we," "us," or "our") collects, uses, stores, discloses, and protects personal data of users of the ZLAQA mobile application, web application, website, and related services (collectively, the "Platform").

We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws of India. Every individual's right to privacy is recognised as a fundamental right under Article 21 of the Constitution of India, and we design our data practices with that principle in mind.

By accessing or using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Who We Are

SLAQ AI Labs Private Limited
Registered office: TBI CUIET Thenjipalam, Calicut University, Malappuram, Kerala 673636, India
Brand name: ZLAQA
Website: www.zlaqa.com
Contact email: zlaqa.ai.labs@gmail.com
Operations email: operation.zlaqa@gmail.com
Support email: support@zlaqa.com
WhatsApp: +91 8089124307

3. Definitions

"Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act, 2023.

"Data Principal" means the individual to whom the personal data relates, that is, you.

"Data Fiduciary" means SLAQ AI Labs Private Limited, which determines the purpose and means of processing personal data.

"Processing" means any operation performed on personal data, including collection, storage, use, analysis, sharing, and deletion.

4. Information We Collect

5. How We Use Your Information

We process your personal data for the following purposes:

• To create and manage your account and provide the core speech analysis service
• To generate AI-based speech and fluency assessments and connect you with SLPs or doctors on the Platform
• To process payments and subscriptions for B2C and B2B (ZLAQA Voice Care) plans
• To send service updates, appointment reminders, and support communications
• To improve our AI models, subject to the safeguards in Section 8
• To detect, prevent, and investigate fraud, abuse, or security incidents
• To comply with legal obligations under Indian law
• To send promotional communications, where you have provided consent, with an option to opt out at any time

6. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the basis of:

• Your explicit consent, obtained through clear and specific notice at the point of collection
• Performance of a contract with you, such as delivering the subscribed service
• Compliance with a legal obligation
• Legitimate uses permitted under the DPDP Act, such as for medical emergencies or to respond to your voluntarily provided information

7. Special Category and Health-Adjacent Data

Voice recordings and speech assessment outputs are handled with additional safeguards:

• Access is restricted to your treating doctor or SLP, authorised ZLAQA personnel involved in service delivery, and you
• Recordings are stored in encrypted form on our cloud storage infrastructure
• Recordings are retained only as long as necessary for therapy continuity, or as required by applicable law, unless you request earlier deletion
• We do not sell, rent, or use your voice recordings for advertising purposes

8. Use of Data for AI Model Improvement

We may use de-identified or aggregated data derived from speech recordings to improve the accuracy of our AI models. Where such use is proposed with identifiable data, we will seek your separate, specific consent, and you may decline without losing access to core diagnostic features.

9. Sharing and Disclosure of Information

We may share your personal data with:

• Doctors, clinics, or SLPs that you connect with through the Platform, strictly for the purpose of providing you care
• Cloud infrastructure and storage providers who process data on our behalf under contractual confidentiality obligations
• Payment gateway providers, solely to process transactions
• Government or regulatory authorities, where required under applicable Indian law, including in response to a lawful request
• Professional advisors, such as auditors or legal counsel, under confidentiality obligations

We do not sell your personal data to third parties.

10. Cookies and Tracking Technologies

The Platform uses cookies and similar technologies to remember your preferences, keep you signed in, and understand usage patterns. You can control cookie preferences through your browser settings. Disabling cookies may limit certain features of the Platform.

11. Data Storage and Cross-Border Transfer

Your data is primarily stored on cloud infrastructure that may be located outside India. Where personal data is transferred outside India, we ensure such transfer is carried out in accordance with the DPDP Act, 2023 and any government-notified restrictions on cross-border data transfer that may apply from time to time.

12. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal, accounting, or reporting obligations, or to resolve disputes. Upon account deletion, we will delete or anonymise your personal data within a reasonable period, except where retention is required by law.

13. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you and the processing activities undertaken
• Request correction, completion, or updating of your personal data
• Request erasure of your personal data, subject to legal retention requirements
• Nominate another individual to exercise your rights on your behalf in the event of death or incapacity
• Withdraw consent at any time
• Register a grievance with us, and if unresolved, approach the Data Protection Board of India

14. Data Security

We implement reasonable security practices and procedures, including encryption of sensitive data in transit and at rest, access controls, and regular security reviews, in line with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Children's Privacy

The Platform may be used by minors receiving speech therapy under the supervision of a parent, guardian, or treating professional. Where a user is a child as defined under the DPDP Act, 2023, we process personal data only with verifiable consent of the parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

16. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDP Act, 2023, we have designated a Grievance Officer to address your concerns.

We will acknowledge grievances promptly and aim to resolve them within the timelines prescribed under applicable law.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes through the Platform or by email. Continued use of the Platform after such changes constitutes acceptance of the updated Policy.

18. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact: