SemaKare Privacy Notice

Thank you for using SemaKare, offered by Dr. Reddy’s Laboratories Ltd.
This notice describes the way in which Dr. Reddy’s, its subsidiaries, and affiliates (collectively referred to as “Dr. Reddy’s”/” we”/”us”/” our”) process the personal data about you, that you make available through your interactions with this application. The privacy notice also explains how you can exercise your privacy rights and the safeguards Dr. Reddy’s implements to protect your personal data.

Dr. Reddy’s is responsible for processing of your personal data and acts as the “Data Controller” as recognized under the applicable Data Privacy Laws.

If you access any third-party platform from our application, your personal data will be treated in accordance with the privacy notice of that platform. Dr. Reddy’s will not be responsible for any processing activities undertaken by platforms owned by third parties.

We encourage all individuals interacting with the SemaKare application to read this Privacy Notice as it sets out how and in what context we process your personal data and explains your rights in respect of processing such information.

What personal data do we collect through Semakare?

Personal data is any information that identifies you directly or when combined with other information.

Depending on your interaction with this application, we may collect and process the following information about you:

General Identifiers and Contact Information:your name, phone number, email address, location and device identifiers (e.g. device ID’s, cookie ID’s and IP address).
Individual Profile Data: your age, gender, height, and weight.
Treatment and Health Related Data: information you voluntarily choose to log within SemaKare that is used to help you monitor your therapy journey and visualize trends over time. This includes:
- Shot administration logs (date, time, area of shot)
- Dosage amounts
- Body weight updates
- Glucose levels and related measurements
- HbA1C reading
- Medication and Device details (pen type, medication brand)
- Photograph of you pen (submitted to verify the genuineness of your device)
Reminder and Notification Data: your reminder settings, preferred timing, frequency and notification preferences. Reminders may be delivered through in-app notifications or, if you opt in, through WhatsApp messages using your WhatsApp registered phone number. This information is solely used to provide reminder services in the manner you select.
Consent and communication preferences:your consent status and the communication choices you select (such as in‑app notifications, WhatsApp reminders, or email communications), as well as any topics or areas of interest you indicate within the SemaKare application.
SIA (SemaKare Intelligent Assistant) Chatbot Interaction Data: the questions and search terms you enter in the in‑app AI chatbot.
- When you ask about your progress, SIA (SemaKare Intelligent Assistant) uses the health data you previously recorded in the application (e.g. dosage, logs, shot history, weight, glucose) to generate progress insights.
- When you ask medication and device related queries, the chatbot shows pre-approved educational articles.
The SIA (SemaKare Intelligent Assistant) chatbot processes only the information you provide during your interaction and the data you have already recorded in SemaKare. It does not access your treatment logs unless you ask about your progress.
In-App Support and Communication Data: details you submit through the “Get in Touch” feature, including in-app queries or requests for assistance. If you choose to call the Toll-Free number (managed by an authorized third-party service provider of Dr. Reddy’s), call related metadata such as time, duration, and the information you share during the call may be collected to address your request.
App usage analytics: app sessions, screen views, buttons tapped, events triggered, installation actions, device type, operating system (Android/iOS), app version, app ID, installation or uninstallation event, session identifiers) and related logs. Certain analytics/notification parameters (e.g., device type for push notifications) may be collected and processed by our analytics provider on our behalf and not retained in our own application databases.

For what purposes do we use your personal data?

We use the personal data collect through the SemaKare application, for the following purposes:

To create and manage you SemaKare Account: to register you on the SemaKare application, authenticate your access, maintain your profile, and ensure the proper functioning of your account.
To enable therapy tracking and self-monitoring: to allow you to log and monitor your Semaglutide treatment journey (including dosage, shot administration details, weight updates, glucose levels, BMI, and HbA1C measurements), to give you your progress insights and generate downloadable reports for your healthcare professional based on this information (if you choose).
To provider reminders and notifications:to deliver treatment‑related reminders and alerts based on your selected preferences, WhatsApp reminders are sent only if you opt-in.
To deliver personalized educational content on the SemaKare app: to enable you to browse articles and information related to the medication, its use and treatment. Educational content (where available) will be tailored to you based on your age, gender, pen type, and medication brand
To Enable SIA (SemaKare Intelligent Assistant) Interactions: to process your chatbot queries and search terms; when you ask about your progress, use the health data you recorded to generate progress insights; when you ask product questions, display pre‑approved articles.
To send you communications (based on your consent): to send you educational content and programme communications via email, WhatsApp, or in-app.
To respond to your queries and provide support: to manage and resolve the questions or requests you submit through the “Get in Touch” feature and to coordinate support if you call the Toll‑Free number.
To maintain and improve the app functionality: to perform troubleshooting, analytics, and service improvements, including understanding how users engage with the application and resolving technical issues.
To understand and improve Your SemaKare journey across platforms: to use aggregated, privacy‑preserving analytics to understand how users move across SemaKare touchpoints, so we can improve continuity and usefulness across channels. Analytics focus on usage patterns rather than individual behaviour.
To perform safety monitoring: to ensure we maintain and uphold patient safety by monitoring the content of your communication with us.
To ensure security and prevent misuse of the application: to authenticate users, detect and prevent fraud, monitor for security breaches, and protect the integrity and safety of the SemaKare platform.
To comply with legal and regulatory requirements to which Dr. Reddy’s and its service providers are subject: to meet obligations under applicable laws, regulations, and industry standards relating to patient support programmes, pharmacovigilance, and data protection.

Legal Basis for processing your Personal data

We process your personal data only when we have a valid lawful basis for doing so. Depending on the specific circumstances, including the type of data involved, the purposes for which it is processed, and the legal bases permitted in your country, the applicable lawful bases include:

Consent: We rely on your explicit, voluntary consent to:
- Collect and process health-related data that you choose to enter into the SemaKare application (e.g. shot logs, dosage, weight updates, glucose levels).
- Enable optional features such as in-app notifications, downloading reports for your medical provider and WhatsApp reminders.
- Allow you to use the SIA (SemaKare Intelligent Assistant) chatbot feature.
- Share educational content with you.
You can withdraw your consent at any time through the app settings or by contacting us using the details provided in this Privacy Policy (see “How can you exercise your privacy rights?”).
Performance of a Contract (or Steps Taken Prior to Entering into a Contract): We process certain information because it is necessary to create and manage your account and provide the core services of the SemaKare application. Without this information, we would be unable to make the application’s features available to you.
Compliance with Legal or Regulatory obligations: We may process your information where necessary to meet our legal or regulatory obligations, including those applicable to patient‑support programs, record‑keeping, or other statutory requirements.
Processing necessary for our legitimate interests: We may process your personal information where it is necessary for our legitimate interests and does not unduly affect your rights or freedoms. Examples include:
- planning, improving, and optimizing our services and operations
- responding to your queries and managing your requests
- maintaining and securing our systems and networks
- protecting our rights, safety, and the rights and safety of our affiliates
- verifying identity where required
- contacting you in cases of suspected misuse or fraudulent activity
Protection of vital interests: We may process your information where necessary to protect your vital interests or those of another individual, particularly in urgent circumstances where consent cannot be obtained.
Substantial Public Interests (where permitted by law): We may process certain categories of information where applicable law permits such processing for reasons of substantial public interest and only to the extent necessary for that purpose.

With whom do we share your personal data?

Please be assured that we share your personal information only on a need-to-know basis, in a manner that ensures its protection, or to the extent it is necessary to comply with applicable regulations. Any personal information collected through this website may be shared with or accessed by:

Subsidiaries and affiliates of Dr. Reddy’s (including outside your country) for maintaining programme databases and to efficiently deliver services.
Third party patient support provider (telephonic assistance and home-visit support, primarily for device related guidance and programme services). If you chose to contact us using the “Get in Touch” feature, your call is directed to a toll-free number managed solely by this provider.
IT system service providers supporting SemaKare and associated services (including safety and adverse event reporting related processes).
Third-party analytics tools such as WebEngage used to send communications, push notifications, manage consent-based journeys and analyze related delivery or engagement metadata.
Third parties involved in corporate transactions If Dr.Reddy’s undergoes a business transition such as a merger, acquisition, reorganisation, or asset transfer, we may share your personal data with the acquiring or resulting entity, strictly to the extent necessary for the transaction and in accordance with applicable laws. Any such entity will be required to protect your personal data in a manner consistent with this Privacy Notice.
Any professional consultants, such legal and financial advisors and auditors.
Any law enforcement agency, regulator, or court, if required to comply with the applicable law(s).

Where personal data is transferred outside your country, we do so in accordance with applicable laws and apply appropriate safeguards.

How do we process personal data of minors?

Dr. Reddy’s does not provide services that are directed at children. Through this app, we do not request or knowingly collect or process any personal data of individuals under the age of majority in any country. If you have shared the personal data of anyone who will be considered a minor in your country, please reach out to us with a request for deletion through the "Get in Touch” feature. We will immediately remove this personal data from our databases.

How do we protect your personal data?

We have implemented the appropriate technical and organizational measures to ensure your personal data remains protected. These measures have been designed to provide an adequate level of security, maintain confidentiality, and prevent unauthorized access to your personal data.

The measures we implement meet industry standards and ensure that they protection your personal data in an appropriate manner that is required depending on the nature of the personal data

How long will we retain your personal data?

We will only retain your personal information for as long as necessary to fulfil the purpose for which it was collected, to comply with legal or regulatory requirements or until we have received a request from you to delete such information.

How can you exercise your privacy rights?

We take reasonable measures to process your personal data in a lawful manner. Subject to the applicable laws, you have the right to:

be informed about what personal data we have about you and how we process it,
access and obtain a copy of your personal data as processed by us,
correct or update your personal data if you believe that any data relating to you is incorrect, obsolete, or incomplete,
request the erasure of your personal data,
withdraw your consent at any time, without affecting the lawfulness of the processing before such withdrawal,
object, in whole or in part, to the processing of your personal data. With certain exceptions, this includes object to direct marketing and the right to object to your personal data being used for research,
request data portability, i.e., that the personal data you have provided to us be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format without hindrance from us and subject to your confidentiality obligations,
object to automated decision-making including profiling, i.e., you can request a human intervention in any automated decision-making process related to processing of your data and where such processing is not based on your consent, authorised by law or necessary for the performance of a contract. We do not currently make decisions solely using automated processes.
grievance redressal for any grievances you may have, and where applicable, nominate another individual to exercise the rights on your behalf.

SEMAKARE PRIVACY NOTICE

Last Updated On: March 2026