FAMILY MEMBER CONSENT & AUTHORIZATION POLICY

1. INTRODUCTION

This Family Member Consent & Authorization Policy ("Policy") forms part of the legal framework governing the use of [INSERT LEGAL ENTITY NAME], a company incorporated under the Companies Act, 2013, operating under the brand "Aarog Health Records" ("Aarog", "Company", "we", "our", "us").

This Policy should be read together with the:

• Privacy Policy;
• Terms & Conditions;
• End User License Agreement (EULA);
• Consent for Processing Health Data;
• Data Retention Policy; and
• other policies published by Aarog.

This Policy explains the conditions under which a User may create, manage, upload, access, organize, or share health records belonging to another individual through Aarog.

2. PURPOSE

Aarog enables Users to maintain health records for themselves and, where appropriate, for Family Members.

The purpose of this Policy is to:

• protect the privacy of Family Members;
• establish the User's responsibility when managing another person's health information;
• ensure that Health Data is processed only where the User has appropriate authority;
• clarify the rights and responsibilities of Users and Family Members.

3. WHO IS A FAMILY MEMBER?

For the purposes of this Policy, a Family Member includes any individual whose health records are managed by a User through Aarog, including but not limited to:

• spouse;
• child;
• parent;
• grandparent;
• sibling;
• legal ward;
• dependent;
• person under legal guardianship; or
• any other individual for whom the User is legally authorized to act.

4. USER REPRESENTATION AND WARRANTY

By creating or managing a Family Member profile, the User represents and warrants that:

• the User has lawful authority to create and manage the profile;
• the information provided is true, accurate, and complete to the best of the User's knowledge;
• the User has obtained any consent required under Applicable Law from the Family Member, where applicable;
• the User will promptly update or remove information that is no longer accurate or that they are no longer authorized to manage.

Aarog relies on these representations and is not required to independently verify the User's authority unless required by Applicable Law or a lawful request.

5. PARENTS AND LEGAL GUARDIANS

A parent or lawful guardian may create and manage a profile for a minor child or a person under lawful guardianship.

The parent or guardian is responsible for:

• providing all required consents;
• ensuring the accuracy of uploaded information;
• exercising privacy rights on behalf of the minor where permitted by law;
• protecting the minor's account information.

When the minor reaches the age of majority, Aarog may require the account holder to update the account so that the now-adult individual can manage their own records or provide fresh authorization.

6. ADULT FAMILY MEMBERS

Where the Family Member is an adult capable of making their own decisions, the User confirms that they have the Family Member's authorization to manage the profile and related Health Data.

Users should not create or continue to manage an adult Family Member's records without appropriate authorization.

If Aarog becomes aware of a credible dispute regarding authority, it may temporarily restrict access to the relevant profile while the matter is reviewed.

7. ELDERLY OR DEPENDENT INDIVIDUALS

Users may manage records for elderly parents or dependent individuals where they have lawful authority or the individual's authorization.

The User remains responsible for ensuring that:

• the arrangement is lawful;
• the information is handled respectfully and confidentially;
• access is limited to those with a legitimate need.

8. HEALTH DATA OF FAMILY MEMBERS

Health Data relating to Family Members may include, without limitation:

• prescriptions;
• laboratory reports;
• diagnostic reports;
• discharge summaries;
• vaccination records;
• imaging reports;
• medication history;
• allergies;
• chronic disease information;
• health reminders;
• emergency contact details; and
• other health-related information voluntarily uploaded.

Such information will be processed in accordance with Aarog's Privacy Policy and Consent for Processing Health Data.

9. SHARING OF FAMILY MEMBER RECORDS

The User may share a Family Member's records through Aarog only where they are authorized to do so.

The User is responsible for selecting the appropriate recipient and ensuring that sharing is consistent with applicable law and any instructions of the Family Member.

Aarog provides technical tools for secure sharing but is not responsible for how recipients subsequently use information lawfully shared with them.

10. REVOCATION OF AUTHORITY

If a User no longer has authority to manage a Family Member's records, the User must promptly stop accessing those records and, where appropriate, remove the profile or notify Aarog.

If a Family Member informs Aarog that the User no longer has authority, Aarog may:

• request additional information;
• suspend access to the Family Member profile;
• restrict sharing of the relevant records; or
• take other reasonable measures to protect the individual's privacy while the matter is reviewed.

11. USER RESPONSIBILITIES

The User agrees to:

• maintain the confidentiality of Family Member information;
• avoid unauthorized disclosure;
• use the information only for lawful and appropriate purposes;
• protect login credentials;
• promptly report any unauthorized access affecting Family Member records.

12. NO OWNERSHIP OF HEALTH DATA

Health Data relating to Family Members remains the property of the Family Member or the lawful owner of the records.

Uploading or managing such information through Aarog does not transfer ownership to Aarog or to the User.

The User receives only the authority that they lawfully possess or have been granted by the Family Member.

13. LIMITATION OF AAROG'S ROLE

Aarog is a technology platform.

Aarog does not determine:

• whether the User has valid authority;
• family relationships;
• guardianship status;
• inheritance rights;
• powers of attorney;
• medical decision-making authority.

Unless required by law, Aarog is entitled to rely on the User's representations regarding their authority to manage a Family Member's information.

14. INDEMNITY

The User agrees to indemnify and hold harmless Aarog, its directors, officers, employees, affiliates, contractors, and agents from and against any claims, liabilities, losses, damages, costs, or reasonable legal expenses arising from:

• unauthorized creation of a Family Member profile;
• lack of required consent;
• false representations regarding authority;
• misuse of Family Member information;
• disputes between family members regarding access to records;
• violation of Applicable Law by the User.

This indemnity survives termination of the User's account.

15. CHANGES TO THIS POLICY

Aarog may amend this Policy from time to time to reflect changes in:

• applicable law;
• platform functionality;
• privacy practices; or
• operational requirements.

Material changes will be communicated through appropriate channels where required.

16. CONTACT INFORMATION

Questions regarding this Policy may be directed to Aarog through the official support channels published on the website or mobile application.

Grievance Officer

• Name: Arpan Gupta
• Email: support@aaroghealthrecords.com
• Registered Office: 206, Millenium Garden, Peer Muchalla, Zirakpur, Punjab

17. USER DECLARATION

By creating or managing a Family Member profile, you declare that:

• You have read and understood this Policy.
• You are authorized to manage the relevant Family Member's information.
• Any consent required under Applicable Law has been obtained.
• You will use the information responsibly and only for lawful purposes.
• You understand that Aarog is a technology platform for managing health records and does not determine legal authority, provide medical advice, or resolve family disputes.