Legal

Privacy & Policy

Effective date: 28 September 2026 · Version 1.0

This Privacy Policy explains how PURPLE SPARK BIOENGINEERING LLP ("Purple Spark", "we", "us", or "our") collects, uses, stores, processes and protects information when you use the ACUMEN AI application ("ACUMEN AI" or the "Application").

ACUMEN AI is a clinician-focused clinical documentation application intended primarily for use by healthcare professionals.

1. Who we are

ACUMEN AI is operated by:

PURPLE SPARK BIOENGINEERING LLP
LLPIN: ACC-2423
Registered office: 2nd Floor, No. 46, Old 805, 35th C Cross 9th Main Road, 4th Block, Jayanagar, Bengaluru, IN 560011.

For all privacy, support and grievance-related matters, email [email protected].

2. Information we collect

Depending on how you use ACUMEN AI, we may collect the following information.

Clinician and account information

Name
Email address
Professional registration or medical licence number, where provided
Hospital or institution information
Account identifiers
Authentication information

ACUMEN AI currently uses email-based authentication, including email OTP and password-based authentication.

Patient and clinical information

ACUMEN AI may allow healthcare professionals to enter or upload information relating to patients, including:

Patient name
Patient ID/MRN or other internal identifiers
Age or date of birth
Sex/gender
Patient contact information, where provided
Medical history
Diagnosis
Pathology information
Imaging information
Medications
Treatment and surgical information
Chemotherapy or radiotherapy information
Clinical outcomes
Clinical photographs
Laboratory information
Genomic information, where provided
Clinical notes
Documents and PDFs

The information collected depends on what the clinician or institution chooses to enter or upload into ACUMEN AI.

3. Voice and speech-to-text

ACUMEN AI includes voice-based clinical documentation features. When the voice dictation feature is used:

The Application may access the device microphone.
The clinician's voice may be transmitted to a speech-to-text service for real-time transcription.
Sarvam AI is used for speech-to-text processing.
Voice recordings are not intended to be permanently stored in the ACUMEN AI database after transmission for transcription.
The resulting transcript may be stored as part of the clinical documentation created through ACUMEN AI.

The microphone is accessed only when the relevant voice feature is used and permission has been provided by the user.

4. Artificial intelligence

ACUMEN AI uses Artificial Intelligence (AI) to assist healthcare professionals with clinical documentation and structuring of information. The current implementation may use Anthropic's Claude AI service.

Information submitted for AI processing may include:

Clinical notes
Speech-to-text transcripts
Patient information entered into the Application
Other information provided by the clinician for documentation purposes

At present, relevant clinical information may be transmitted to the AI service without prior de-identification. This means that names or other identifying information may be included where they form part of the information submitted by the clinician.

AI-generated content is intended to assist with documentation and organisation of clinical information. AI output is not a substitute for professional medical judgment.

Healthcare professionals remain responsible for reviewing, editing and validating AI-generated content before relying on or using it for clinical purposes.

5. Documents, images and files

ACUMEN AI may allow users to upload, create or process:

Clinical documents
PDFs
Images
Clinical photographs
Notes and other user-generated content
Other files relevant to clinical documentation

Some information or files may be processed through third-party services when required to provide specific ACUMEN AI functionality.

ACUMEN AI may generate documents such as PDF or Word files. Where applicable, document generation may take place on the user's device.

If you choose to share a document or file with another application or service using native device sharing functionality, the information may subsequently be handled according to the recipient's privacy practices.

6. Device and technical information

Depending on the Application's implementation and the features used, technical information may be processed for authentication, security, infrastructure operation and troubleshooting. This may include:

IP address and network information
Security and audit information
Device-related technical information
Authentication logs
Service and infrastructure logs

ACUMEN AI does not use personal or clinical information for behavioural advertising.

7. How we use information

We use information collected through ACUMEN AI for purposes including:

Creating and managing clinician accounts
Authentication and account security
Providing clinical documentation functionality
Speech-to-text transcription
AI-assisted documentation
Structuring clinical notes
Creating clinical records and documents
Generating PDF or Word documents
Providing document export and sharing functionality
Maintaining and operating the Application
Protecting the security of the Application and its users
Troubleshooting and resolving technical issues
Complying with applicable legal and regulatory obligations

We do not sell patient health or clinical information. ACUMEN AI is not intended to use personal or clinical information for advertising or behavioural tracking.

8. Third-party service providers

ACUMEN AI may use third-party technology and service providers to provide its functionality. The current service providers include:

Service provider	Purpose
DigitalOcean	Application infrastructure and database hosting
Sarvam AI	Real-time speech-to-text processing
Anthropic	AI-assisted clinical documentation
Email service providers	Transactional communications and account-related emails

Third-party providers may process information on our behalf where necessary to provide the relevant service.

The processing practices, retention periods and locations of individual third-party services may also be governed by the applicable contractual arrangements and service terms between Purple Spark and those providers.

9. International processing

ACUMEN AI's primary database infrastructure is currently hosted in India.

Some third-party technology providers used by ACUMEN AI may process information outside India. In particular, information submitted for AI-assisted processing may be transmitted to third-party AI service providers.

Where applicable, we seek to use appropriate contractual, technical or organisational safeguards for such processing.

10. Data retention

We retain information for as long as reasonably necessary to:

Provide ACUMEN AI services
Maintain clinician and institutional records
Provide clinical documentation functionality
Meet legal, regulatory or contractual requirements
Maintain security and audit records
Resolve disputes and enforce applicable agreements

Clinical information may need to be retained for longer periods where it forms part of a medical or institutional record or where retention is required by applicable law or professional obligations.

Specific retention periods may vary depending on the type of information and the purpose for which it is processed.

11. Account and data deletion

You may request deletion of your ACUMEN AI account and applicable personal information. Where account deletion is available within the Application, you can access it through:

Settings → Delete Account

You can also read how to request deletion on our account deletion page, including how to request it by email if you can no longer use the app.

We may request verification of your identity before processing a deletion or privacy request.

When you delete your ACUMEN AI account, all of the data linked to it is deleted, including your account details, the patient notes and consultation transcripts you created, and your saved letterhead and signature. We do not keep a copy afterwards.

12. Security

We implement reasonable technical and organisational measures appropriate to the sensitivity of the information processed through ACUMEN AI. These measures may include:

Authentication controls
Access controls
Server-side security controls
Infrastructure protections
Security and audit controls
Measures intended to protect information against unauthorised access, alteration, disclosure or destruction

No electronic system or method of transmission can be guaranteed to be completely secure.

13. Children and minors

ACUMEN AI is designed for use by healthcare professionals and is not directed towards children as users.

Healthcare professionals may nevertheless use ACUMEN AI to document information relating to patients who are minors, including in clinical settings where paediatric patients are treated.

Information relating to minor patients is processed in the context of the relevant healthcare, institutional and legal requirements applicable to that clinical relationship.

14. Research and AI model training

ACUMEN AI does not currently use patient or clinician information for secondary research purposes.

Purple Spark does not currently use patient or clinician information collected through ACUMEN AI to train its own AI models.

Any future change to these purposes will be addressed through appropriate legal, privacy and product processes and, where required, updated notices or consent mechanisms.

We may share or provide access to information where necessary to:

Provide ACUMEN AI functionality
Process speech or AI requests
Host and operate the Application
Provide technical infrastructure
Send transactional communications
Meet legal or regulatory requirements
Protect the rights, safety or security of users, patients, the Application or others

We do not sell patient health information. We do not use patient or clinician information for advertising or behavioural tracking.

16. Your privacy rights

Subject to applicable law, you may have rights to:

Request access to information held about you
Request correction of inaccurate or incomplete information
Request deletion of applicable personal information
Withdraw consent where processing is based on consent
Ask questions about how your information is processed
Raise a privacy concern or grievance

We may need to verify your identity before responding to certain requests, particularly requests involving clinical or sensitive information.

To exercise your privacy rights, contact [email protected].

Where processing is based on consent, you may withdraw your consent by contacting us at [email protected].

Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal.

Certain information may continue to be retained where retention is required or permitted by applicable law, contractual obligations, clinical-record requirements or other legitimate purposes.

18. Data breaches and security incidents

If we become aware of a security incident involving personal information, we will assess and respond to the incident in accordance with our applicable incident-response procedures and legal obligations.

Where notification is required under applicable law, we will provide the required notifications to the relevant parties or authorities.

19. Applicable Indian data protection requirements

ACUMEN AI is operated from India and is intended to handle personal and clinical information in accordance with applicable Indian privacy and data-protection requirements, including the Digital Personal Data Protection Act, 2023, as applicable.

The rights, obligations, consent requirements and other privacy practices applicable to particular information may depend on the nature of the processing and the relationship between the clinician, healthcare institution, patient and ACUMEN AI.

20. Changes to this policy

We may update this Privacy Policy when:

New Application features are introduced
Our data-processing practices change
New service providers are added
Applicable laws or regulatory requirements change
Security or operational practices change

When we make changes, we will update the effective date and version of this Privacy Policy.

21. Contact us

For privacy, support, data requests or grievances, please contact:

PURPLE SPARK BIOENGINEERING LLP
2nd Floor, No. 46, Old 805,
35th C Cross 9th Main Road, 4th Block,
Jayanagar, Bengaluru, IN 560011.

Privacy: [email protected]
Support: [email protected]
Grievances: [email protected]

Grievance Officer

Name: Gagan
Designation: HealthTech & Operations – Lead
Address: 2nd Floor, No. 46, Old 805, 35th C Cross 9th Main Road, 4th Block, Jayanagar, Bengaluru, IN 560011
Email: [email protected]