Terms of Service

These Terms of Service (“Terms”) are an agreement between you and [Company legal name], having its registered office at [Registered office address, India] (“MediVault”, “we”, “us”). They govern your use of the MediVaultwebsite, web app and related services (the “Platform”).

By creating an account, signing in or using the Platform, you confirm that you have read and accepted these Terms and our Privacy Policy. If you do not agree, please do not use the Platform. These Terms are an electronic record under the Information Technology Act, 2000 and do not need a physical or digital signature.

MediVault is a personal health-record and care-coordination tool. It lets you:

• store prescriptions, diagnosis and lab reports, and vital-sign readings;
• scan prescriptions with AI to extract medicines, doses and other details;
• get medicine, appointment and vitals reminders by WhatsApp, SMS, email or push notification;
• manage health records for family members you are authorised to act for; and
• connect with your doctors and choose which records they can see, and for how long.

MediVault is not a healthcare provider and does not give medical advice.Information on the Platform — including AI-extracted prescription details, vitals alerts and reminders — is for record-keeping and convenience only. It does not replace the judgement of a qualified doctor. Always follow your doctor's instructions and check your original prescription before taking any medicine.

Do not use MediVault in an emergency. Call 112 (national emergency number) or 108 (ambulance), or go to the nearest hospital.

• You must be at least 18 years old and able to enter into a binding contract under the Indian Contract Act, 1872. Records of a child must be managed by their parent or lawful guardian (see section 4).
• Give us accurate, current information and keep it up to date. Use only your own mobile number and email address.
• Keep your OTPs and password confidential. Never share a one-time code with anyone — MediVault staff will never ask for it. You are responsible for activity under your account.
• Tell us immediately at [support@your-domain.com] if you suspect unauthorised access to your account.

Ways to sign in

You sign in with your email address — either with your password or with a one-time code (OTP) we send to your email. Patients create their account by verifying a code sent to their email, then add their mobile number while completing their profile so that reminders and family features work. You can set or change your password in your profile. Your mobile operator may charge for reminder messages you receive.

You may add family members and manage their records only if you are authorised to do so:

• Children (under 18):you must be their parent or lawful guardian. By adding a child you give verifiable consent on their behalf, as required by section 9 of the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
• Persons with a disability who cannot act for themselves: you must be their lawful guardian.
• Adults: you must have their permission. Where they have their own MediVault account, they are asked to confirm the link, and they can change your permissions or remove the link at any time.

We ask you to confirm this authority, and record your confirmation, each time you add a family member.

You own the records and information you upload (“Your Content”). You give us a limited, non-exclusive licence to store, process and display Your Content only to provide the Platform to you and the people you choose to share it with, as described in our Privacy Policy. We do not sell Your Content or use it for advertising.

You are responsible for the accuracy of Your Content and for having the right to upload it. Do not upload another person's records unless you are authorised to act for them.

• Nothing is shared with a doctor or anyone else unless you choose to share it. Each time you share, we ask you to confirm your consent.
• Doctor access is limited to the record types and period you select, and you can revoke it at any time. Report links sent by email expire on the date shown and can be revoked earlier.
• Once a recipient has viewed or downloaded a record, we cannot control what they do with it. Share only with people you trust.

When you scan a prescription, the image or PDF is sent to an automated AI service — which may be run by a third-party provider and processed outside India — to read its contents. We do this only after you consent, and you can withdraw that consent at any time in Profile › Privacy & consent.

AI can misread handwriting, doses or names. You must review and correct the extracted details against the original before saving them. We are not responsible for decisions made on unreviewed AI output.

Reminders and vitals alerts are a convenience. Delivery depends on mobile networks, messaging providers and your device, and is not guaranteed. Do not rely on them as your only way to take medicines on time or to spot a medical problem. You can change how and when you are notified in your settings.

If you register as a doctor, you also confirm and agree that:

• you are a Registered Medical Practitioner enrolled with the National Medical Commission or a State Medical Council, and the registration number, qualifications and other details you provide are true and current;
• we may verify your registration and may suspend your account if it cannot be verified or is suspended or withdrawn;
• you will follow the Telemedicine Practice Guidelines, 2020, the National Medical Commission's regulations on professional conduct, and all other applicable law;
• you will access a patient's records only while they have granted you access, only for their care, and will keep them confidential;
• clinical decisions are yours alone — MediVault does not practise medicine or review your advice; and
• you will not use the Platform to solicit patients or advertise in breach of professional rules.

In line with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you must not use the Platform to host, upload, share or transmit anything that:

• belongs to another person and you have no right to;
• is false, misleading, defamatory, obscene, harassing or otherwise unlawful;
• impersonates another person, including a doctor;
• contains viruses or other harmful code; or
• threatens the unity, integrity, security or sovereignty of India, or public order.

You must also not try to access other users' data, probe or overload our systems, misuse OTP or messaging features, scrape the Platform, or reverse-engineer it. We may remove content and suspend accounts that break these rules, and will cooperate with lawful requests from authorities.

Our Privacy Policy explains what personal data we collect, why, who we share it with, and your rights under the DPDP Act. We ask for your consent where the law requires it, record it, and let you withdraw it as easily as you gave it.

The Platform is currently free to use. If we introduce paid features, we will tell you the price in advance and you will not be charged unless you choose to buy them. Your mobile operator's data and messaging charges still apply.

We use trusted providers for hosting, SMS, WhatsApp, email, push notifications and AI scanning. Links to other websites or services, including doctors' or hospitals' own sites, are provided for convenience; we are not responsible for their content or practices.

The Platform, its software, design and the MediVault name and logo belong to [Company legal name] or its licensors. You may use them only to use the Platform as intended. If you send us feedback, we may use it without obligation to you.

We work to keep the Platform available and secure, but it may be unavailable at times for maintenance, updates or reasons outside our control. We may add, change or remove features. Keep your own copies of important medical documents.

To the extent permitted by law, the Platform is provided “as is” and “as available”. We do not warrant that it will be error-free or uninterrupted, that AI-extracted data is accurate, or that doctor listings are complete or current. Nothing in these Terms limits rights you have under the Consumer Protection Act, 2019 that cannot be excluded.

To the extent permitted by law, [Company legal name] is not liable for indirect, incidental or consequential loss, or for loss arising from medical decisions, missed reminders, unreviewed AI output, or your sharing of records with others. Our total liability for any claim relating to the Platform is limited to the amount you paid us, if any, in the 12 months before the claim. Nothing here limits liability that cannot be limited by law, including for fraud or for our failure to protect your personal data as required by the DPDP Act.

You agree to indemnify [Company legal name] against claims and losses arising from your breach of these Terms, your misuse of the Platform, or your uploading or sharing of data you were not authorised to handle.

You can stop using the Platform at any time and ask us to delete your account by writing to the Grievance Officer (section 21). We may suspend or close accounts that break these Terms or the law, or to protect other users, and will tell you why unless the law prevents us. What happens to your data afterwards is explained in our Privacy Policy.

We may update these Terms to reflect changes in the law or the Platform. If a change is material, we will ask you to review and accept the new version the next time you sign in, and the version and effective date at the top of this page will change. If you do not accept, you may close your account.

For complaints about the Platform, content, or how we handle your personal data, contact our Grievance Officer:

[Grievance Officer name], Grievance Officer
[Company legal name], [Registered office address, India]
Email: [grievance@your-domain.com]

We will acknowledge and resolve complaints within the timelines set by applicable law. If you are not satisfied with our response to a personal-data complaint, you may complain to the Data Protection Board of India.

These Terms are governed by the laws of India. Subject to any rights you have under consumer protection law, the courts at [City] have exclusive jurisdiction over disputes arising from them.

Questions about these Terms? Write to [support@your-domain.com] or to [Company legal name], [Registered office address, India].