Privacy Policy

When you use the Services, we may collect:

• Identity & contact data: your name, mobile number, email address, age, and postal address.
• Health information: the reason for your visit, symptoms you describe, medical documents you upload, and prescriptions issued to you.
• Appointment data: the date, time, and type of appointment (in-person or online) and its status.
• Verification data: your mobile number is verified using a one-time password (OTP) to secure access to your records.
• Technical data: basic information your browser sends automatically, and session data needed to keep you signed in.

• To verify your identity and provide secure portal access.
• To schedule, confirm, and manage your appointments and consultations.
• To provide medical care, prepare prescriptions, and maintain your clinical records.
• To send you service communications — such as appointment confirmations, reminders, and updates — via email, SMS, or WhatsApp.
• To operate, secure, and improve the Website and Services, and to comply with legal and regulatory obligations.

We use trusted third-party providers to deliver the Services. Your data is shared with them only to the extent necessary to perform these functions:

• Google Firebase — authentication, database, and secure file storage for your records and uploaded documents.
• MSG91 — sending SMS, including verification codes and notifications.
• Resend — sending email notifications.
• Meta (WhatsApp) — sending appointment-related WhatsApp messages, where applicable.
• Google (Gemini AI) — used by the practitioner as an assistive tool when drafting prescription content.
• Jitsi Meet — hosting online video consultations.

These providers process data under their own terms and security measures. We do not sell your personal information to anyone.

We process your information based on your consent (given when you verify your number and submit your details), to provide the care and services you request, and to meet our legal obligations. You may withdraw consent at any time by contacting us, though this may limit our ability to provide certain Services.

We retain your personal and health information for as long as necessary to provide the Services, maintain medical records as required by applicable law and professional guidelines, and resolve disputes. When information is no longer required, we take reasonable steps to delete or anonymise it.

We implement reasonable technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information, subject to record-keeping obligations.
• Withdraw consent to further processing.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before acting on your request.

The portal is intended for use by adults. Where care is provided to a minor, their information must be submitted and managed by a parent or legal guardian, who is responsible for the accuracy of that information and for consenting on the child’s behalf.

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the “Last updated” date above. We encourage you to review this page periodically.

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact: