Privacy Policy

From Patients: name, phone number, email address, and — only when you request a home visit — the address and approximate location coordinates you choose to provide, plus any symptoms or “chief complaint” you voluntarily enter with a booking.

From Practitioners: name, phone number, email, professional qualifications, registration number, clinic address and map location, and the fees you publish.

When you sign in: your email address. If you choose “Continue with Google”, Google shares your name, email address and profile picture with us; we never see your Google password. If you choose an email sign-in code, we email you a one-time code. We do not send sign-in codes by SMS.

During care: reports or prescriptions you choose to upload, the answers you give in the free assessment, check-ins, pain and function scores, messages you exchange with your Practitioner, and reviews you write.

Payments: the amount, date and the payment reference returned by our payment partner. We never see or store your card number, UPI PIN or bank password.

Automatically: your approximate location if you grant browser location permission (used only in your browser to sort results by distance), and basic technical/usage information.

Any symptom or condition details you type into a booking are sensitive personal data. We collect them only to pass to the Practitioner you selected so they can prepare for your appointment. We do not use them for advertising, and we do not sell them. Providing symptom details is optional.

• To create and secure your account.
• To show you relevant Practitioners and to pass your booking request to the Practitioner you choose.
• To let you and the Practitioner contact each other (for example, by generating a WhatsApp link).
• To verify Practitioner credentials before listing them.
• To operate, secure, debug and improve the Platform, and to comply with law.

The Practitioner you choose receives your name, phone number, appointment details and — for home visits — your address and any symptoms you entered. This sharing is the core purpose of the Platform.

Service providers who host and operate the Platform on our behalf (for example our database and hosting providers), bound by confidentiality obligations.

Authorities, where we are required by law, court order or a valid government request, or to protect rights and safety.

We do not sell your personal data, and we do not share it with advertisers.

The Platform generates links that open WhatsApp with a pre-filled message. Once you send a message, the conversation takes place on WhatsApp and is governed by WhatsApp’s own privacy policy. We do not have access to the contents of your WhatsApp conversations.

Browser location is requested only to centre the map and sort results by distance. You can refuse it — the Platform falls back to a default city view and everything else continues to work. Location captured for a home visit is stored with that booking so the Practitioner can reach you.

We keep account and booking records for as long as your account is active and thereafter only as required for legal, accounting or dispute-resolution purposes. Data is protected by encryption in transit, authenticated access, and database-level row security so that users can only read records they are entitled to see.

No online service can be guaranteed perfectly secure. Please use a strong, unique password and tell us immediately if you suspect unauthorised access.

You can download a copy of your data, correct it, and ask for your account to be erased from your account page, or by contacting us on WhatsApp at +918796183402. Practitioners can edit most of their listing data directly in their profile. Deleting your account removes your profile; anonymised booking records may be retained where required by law.

The Platform is not intended for use by anyone under 18. A parent or legal guardian must create the account and make bookings on behalf of a minor patient.

We process your personal data on the basis of the consent you give when you create an account, and for the specific purposes described in this policy. Marketing messages are separate and optional. You can see every consent you have given, and withdraw marketing consent, on your account page. Withdrawing consent does not affect what was done before you withdrew it, and some features (for example booking a Practitioner) cannot work without the data they need.

• Supabase: database, sign-in and file storage.
• Vercel: website hosting.
• Google: only if you choose Google sign-in.
• Razorpay: online payments, once enabled.
• Our email delivery provider: sign-in codes and booking emails.
• OpenStreetMap: turning a location into a PIN code when you tap “use my location”.

Some of these providers may store data on servers outside India, as Indian law currently permits. Health details are never sent to analytics or advertising services.

We use only the cookies the Platform needs: one that keeps you signed in, one that remembers your language, and one that remembers a referral link you arrived through. We do not use advertising cookies. To open quickly and work on a weak connection, the Platform keeps a copy of its pages and images on your device; pages from your private dashboard are removed from that copy when you sign out. Notifications are sent only if you switch them on, carry no health details, and can be switched off at any time from your account page.

If a personal data breach affects you, we will tell you and the Data Protection Board of India without delay, explain what happened and what we are doing about it. You may also nominate another person to exercise your rights if you die or become unable to act; write to the grievance officer to record a nominee. If we do not resolve a complaint, you may take it to the Data Protection Board of India.

We may update this policy; the revised version will appear on this page with a new “last updated” date. Questions or complaints about privacy can be sent to our Grievance Officer on WhatsApp at +918796183402.