The CareFirst AI platform is operated by CuraNova Global Med LLP and delivered through two Google Play applications:
almas.carefirst) — the patient-facing
app used by members of the public to request emergency response.ai.curanova.carefirst.driver)
— the responder-facing app used by ambulance crew during their shift.You have the right under the Digital Personal Data Protection Act, 2023 (DPDP Act) to request deletion of your account and associated personal data at any time. Because the two apps collect different categories of data and involve different parties, the deletion process differs slightly. Find the section that applies to you below.
Send an email to it@curanova.ai with the subject line "Delete my CareFirst patient account". Include in the body:
Email patient-account deletion request
On a verified deletion request, we delete or anonymise the following from our active systems:
Driver account deletion involves two separate parties because your identity is managed by your employer's Google Workspace, while your operational driver record is held by CuraNova on behalf of the ambulance organisation. Both must be addressed:
Send an email to it@curanova.ai with the subject line "Delete my CareFirst Driver record". Include in the body:
yourname@almashospital.com).Email driver-record deletion request
Your Google Workspace identity is managed by your ambulance organisation
(not by CuraNova). To remove your Workspace account and revoke its access to
the CareFirst Driver app, contact your organisation's IT administrator. For
ALMAS Hospital drivers, this is your direct supervisor or the IT contact who
onboarded you to the ambulance@almashospital.com Workspace
group.
If you only complete Step 1, your CareFirst Driver record at CuraNova will be deleted (per the categories below), but you will still be able to sign in again with your Workspace credentials and a fresh driver record will be created. If you only complete Step 2, your Workspace credentials will no longer authenticate, but your historical driver record at CuraNova remains (subject to the retention requirements in the next section). Complete both steps for a full deletion.
On a verified Step 1 request, we delete or anonymise the following from our active systems:
Some records must be retained even after account deletion, where required by Indian law or by the safety and audit duty of the partnered hospital and the ambulance organisation. These are retained in a separately controlled, access-restricted form. Where possible, retained records are de-identified so they cannot be linked back to you.
| Category | Source app | Retention period | Reason |
|---|---|---|---|
| Emergency event records (dispatch logs, case timeline, response outcome, hospital arrival) | Patient | 7 years from case closure | Medical record retention guidance; statutory dispute-resolution windows; potential coroner / regulator inquiries |
| Mission lifecycle records (driver assignment, accept / decline, status transitions, route telemetry, completion) | Driver | 7 years from mission closure | Ambulance dispatch operational audit; statutory dispute-resolution; regulator inquiries; alignment with emergency-event retention |
| Audit logs of administrative access to your data | Both | 3 years | DPDP accountability obligations — required to demonstrate lawful processing if challenged |
| SMS / push notification delivery logs | Both | 90 days | Telecommunications operator records and TRAI reporting |
Retained records are not used to re-identify you and are not accessible to third parties except as required by Indian law. Driver mission records are retained as part of the ambulance organisation's operational audit trail; the driver's identity within those records is de-identified after Step 1 deletion unless an active investigation requires the original record.
We will acknowledge your request within 48 hours and complete the deletion within 30 days, in line with the timelines set by the DPDP Act and supporting rules. If we need additional time for technical reasons, we will tell you why and when the deletion will complete (extension capped at a further 30 days).
You can cancel a pending deletion request at any time before it completes, by replying to the original email thread. Once deletion has completed, your data cannot be recovered.
If you are not satisfied with our handling of your deletion request, you may contact our Grievance Officer:
You also have the right to lodge a complaint with the Data Protection Board of India under Section 13 of the DPDP Act.
For the full privacy policy, see https://carefirst-legal.web.app/.