Privacy Policy

[Company legal name] (“MediVault”, “we”) operates the MediVaultPlatform and is the Data Fiduciary for the personal data described here under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025. Our registered office is at [Registered office address, India]. This policy forms part of our Terms of Service.

We collect only what we need to run the Platform. Most of it you give us directly; some is created as you use the Platform.

We do not collect Aadhaar numbers, bank or card details, or your precise location, and we do not use your data for advertising or sell it to anyone.

We process your personal data on the basis of your consent, which we ask for clearly and record:

• When you sign in or sign up — to these terms and to processing your personal and health data to provide the Platform. Doctors also declare that they are registered medical practitioners.
• Before AI scanning of a prescription, because it involves a third-party AI provider (section 6).
• Each time you share a record with a doctor or by email link, and each time you add a family member.
• When this policy changes materially — you will be asked to review and accept the new version.

You can see and withdraw your consents at any time in Profile › Privacy & consent (doctors: Settings), as easily as you gave them. Withdrawing consent stops further processing for that purpose but does not affect processing that already took place. If you withdraw consent to the Terms and this policy, we can no longer provide the Platform to you; you can then ask us to erase your data (section 9).

We may also process data without consent where the DPDP Act allows it — for example, to respond to a medical emergency, to comply with a law or court order, or to prevent fraud.

The Platform is meant for adults. Records of a child (under 18) or of a person with a disability who has a lawful guardian may be added only by their parent or lawful guardian, who gives consent on their behalf. We do not track, profile or target advertising at children, and do not process their data in ways likely to harm their well-being.

• People you choose: doctors you grant access to (only the records and period you select), recipients of report links you send, and family members you give permissions to.
• Our service providers (Data Processors), who act only on our instructions and under contract: cloud hosting and storage; SMS and WhatsApp delivery (Twilio, Amazon Web Services); email delivery; push notifications (Google Firebase Cloud Messaging); and AI document reading for prescription scans (one of Anthropic, OpenAI or Google, or our own hosted model).
• Authorities, when required by law, court order or a lawful request from a government agency.
• A successor, if MediVault is merged or acquired, under the same protections as this policy and with notice to you.

When you scan a prescription, the file is sent to an AI provider to read it. We send only the file — not your account details — though the provider will see whatever is printed on the document itself, such as your name. You will always be asked to review the extracted details before they are saved.

Some of our providers process data outside India. Under section 16 of the DPDP Act, we transfer data only to countries that the Government of India has not restricted, and require providers to protect it with safeguards at least as strong as ours.

• We keep your account and health records for as long as your account is active.
• If you delete a record, it is removed from the Platform. If you ask us to close your account or withdraw your consent to the Terms, we erase your personal data within a reasonable time unless a law requires us to keep it.
• OTP codes expire within minutes. Shared report links expire on the date you choose.
• We keep consent records, security logs and sign-in records for as long as needed to prove compliance and as required by the DPDP Rules, 2025 and other applicable law.
• Doctors may have their own legal duty to keep clinical records of patients they treat; that is governed by the rules that apply to them.

• Data is encrypted in transit (HTTPS).
• Passwords and email OTPs are stored only as one-way hashes; OTPs expire and are locked after repeated wrong attempts.
• Access to records is checked on every request against the permissions you have granted.
• Doctor access and shared links are time-limited and can be revoked.
• Consent and access are logged so they can be audited.

If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as required by the DPDP Act and Rules, including what happened, the likely impact and the steps you can take.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you, how we use it, and who we have shared it with;
• Correct, complete, update or erase your personal data — much of it you can edit directly in your profile;
• Withdraw consent at any time (section 3);
• Grievance redressal — have your complaints handled by our Grievance Officer; and
• Nominate another person to exercise these rights for you in the event of your death or incapacity.

To use any of these rights, email the Grievance Officer (section 11) from the email or mobile number linked to your account. We may need to verify your identity first. You also have duties under the Act — for example, to give accurate information and not to file false complaints.

We use your browser's local storage only to keep you signed in and remember basic preferences. We do not use advertising or third-party tracking cookies. Clearing your browser data will sign you out.

[Grievance Officer name], Grievance Officer
[Company legal name], [Registered office address, India]
Email: [grievance@your-domain.com]

We will respond within the time prescribed under the DPDP Rules, 2025. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

We will update this policy when our practices or the law change. The version and effective date at the top of this page show the current version. For material changes, we will ask for your consent again before you continue using the Platform.

For general privacy questions, write to [support@your-domain.com]. For requests about your rights or complaints, please contact the Grievance Officer above.