Skip to content
Two clinics in Hyderabad.Two clinics in Hyderabad: Banjara Hills and Manikonda.Visit us

AI & Data

How Oraia works, and what it does not.

Plain-English disclosure of Oraia's architecture, data handling under India's DPDP Act 2023, and its position relative to NMC telemedicine guidance.

DPDP Act 2023 aligned
Physician review when you book a consult
No model fine-tuning on member data
Primary data in ap-south-1 (Mumbai)
Not a diagnostic device
Chat in English, Hindi or Telugu; reports in English

This page is maintained by the Genoryx team. It reflects how Oraia actually operates today. If anything below is unclear or contradicts something you have been told, write to privacy@genoryx.com — we will get back to you within 7 working days.

What is Oraia?

Oraia is a health-literacy tool built by Genoryx. It accepts inputs through three flows — a guided questionnaire, a blood-report PDF upload, or a face photograph — and returns a structured biological-age estimate, organ-system summary, and educational explanations of biomarker patterns. Oraia is not a diagnostic device, not a prescription engine, and not a substitute for clinical evaluation by a Registered Medical Practitioner. Oraia gives you an AI first read within minutes. A Genoryx physician reviews it when you book a consult. Results are not a diagnosis.

Which AI providers does Oraia use?

Oraia is multi-vendor. Every call goes through the Vercel AI Gateway to models from Google, OpenAI and Anthropic. Each task (reading a blood report, analysing a skin photo, answering a question) uses the model that scored best for that task in our own benchmarks, with a second provider standing by as a fallback. When a newer model proves more accurate on the same tests, we switch to it; your experience and your data handling stay the same.

Where is my data processed?

Your data is stored in India: the database and the private file store sit in ap-south-1 (Mumbai), and the application runs on Vercel. AI inference does not all stay in India. Google Gemini calls run in Google Cloud regions that the Vercel AI Gateway selects; OpenAI and Anthropic calls run in the providers' US infrastructure. To read a blood report or a skin photo, the model has to see the file, so the uploaded report or photo is sent to the provider for that request. Until India-region inference is available for the models we depend on, this crosses borders. Our privacy policy lists every provider.

What does Oraia actually collect from me?

Per flow: (1) Questionnaire — your answers to the health and lifestyle questions, your stated age and sex, and your phone number; (2) Blood-report upload — the report file you upload and the values read from it (e.g. HbA1c, LDL, fasting glucose); (3) Skin analysis — the face photograph you upload and the analysis produced from it. Reports and photos are kept in a private storage bucket and shown back to you only through short-lived signed links. Email is optional. When you accept the health-data notice we log the notice version, the time, your browser user agent and a one-way SHA-256 hash of your IP address, for consent records and abuse prevention.

How long is my data kept?

Health data you submit (answers, uploaded reports and photos, results) is kept for up to 7 years from submission, the period in the consent you accept, and an automated weekly job removes anything older. Archived Oraia chat sessions are removed after 2 years, and verification codes once they expire. You can delete everything sooner from your results page, or by writing to privacy@genoryx.com. Aggregated, fully de-identified statistics may be kept for product improvement.

Is my data used to train AI models?

No. Genoryx routes all LLM calls through Vercel AI Gateway and selects provider tiers that contractually exclude submitted prompts and outputs from being used to train provider foundation models. We do not fine-tune any foundation model on member health data. If a future product feature would require model fine-tuning, we will obtain separate, granular consent before any member data is included.

What can Oraia NOT do?

Oraia does not prescribe medication, does not order or interpret peptide therapy, does not recommend stem-cell or unapproved cellular therapies, does not provide emergency medical advice, and does not replace consultation with a physician. If your inputs suggest an urgent medical concern (chest pain, severe headache, suicidal ideation, anaphylaxis-pattern symptoms), Oraia escalates immediately with crisis-line numbers and does not return its usual outputs. Oraia is positioned as health literacy and triage support, not telemedicine.

How does physician review work?

Oraia gives you an AI first read within minutes. A Genoryx physician reviews it when you book a consult. Results are not a diagnosis. Your result page carries an "AI first read · physician review pending" label until that consult happens; there is no automatic review queue and no fixed turnaround for unreviewed results.

Is Oraia regulated as telemedicine?

Oraia is not telemedicine. Under the NMC Registered Medical Practitioner (Professional Conduct) Regulations 2023, telemedicine consultations require a registered practitioner-patient relationship and follow specific record-keeping and prescription rules. Oraia outputs are educational health-literacy material, reviewed by a Genoryx physician only when you book a consult — they are not a substitute for the consultation, examination, or prescription steps that constitute telemedicine. Members who want a formal teleconsultation can book one separately through /contact.

How do I see, correct, or delete my Oraia data?

Under DPDP Act 2023 §11, you have the right to confirmation, access, correction, and erasure of your personal data. To exercise these rights, write to privacy@genoryx.com from the email associated with your account. We respond within 7 working days. Account holders can also request a structured export of Oraia inputs and outputs from their member dashboard. Anonymous trials cannot be retrieved post-hoc because no identifier links the submission to you.

Document control

Last reviewed: 2026-10-03. Owner: Genoryx Clinical & Engineering. Sections are revised whenever the underlying model stack, retention policy, or regulatory framework changes. Older versions are retained internally and available on request.

For data-rights requests: privacy@genoryx.com. For clinical questions about your Oraia output: book a consultation.