At MEDIKENDRA ("we," "us," or "our"), we are committed to protecting the privacy and security of your personal and health information. This Privacy Policy explains how we collect, use, process, and disclose information through our website [WEBSITE URL] and the Medikendra mobile application (collectively, the "Platform").
Medikendra is a healthcare technology platform designed to facilitate a connected healthcare journey for patients and provide operational workflow management for healthcare providers (including doctors, hospitals, clinics, pharmacies, and diagnostic centers).
1. Who We Are
The Platform is operated by [LEGAL ENTITY NAME], a company incorporated under the laws of India, with its registered office at [REGISTERED OFFICE ADDRESS].
2. Scope
This Privacy Policy applies to all users of the Platform, including:
- Patients: Individuals seeking healthcare services, searching for providers, booking appointments, or tracking their healthcare journey.
- Healthcare Providers: Doctors, medical practitioners, hospital administrators, and staff using the Platform for clinical and operational management.
- Pharmacy and Diagnostic Partners: Entities using our automation and workflow tools.
3. What Information We Collect
We collect information necessary to provide a seamless healthcare experience. The categories of data include:
A. Account and Identity Data
- Name, mobile number, and email address.
- Age, date of birth, and gender (where required).
- Profile information and account identifiers.
- Authentication data (such as OTP-related information).
B. Patient and Healthcare Data
- Appointment & Queue Info: Booking details, OPD status, and position in a healthcare queue.
- Clinical Data: Vitals, symptoms, complaints, medical history, clinical notes, and diagnoses.
- Orders & Records: Prescriptions, medication information, diagnostic orders, and results.
- Workflow Status: Real-time progress through registration, consultation, pharmacy, and follow-up stages.
C. Provider Data
- Name, professional qualifications, and medical registration information.
- Specialty, experience, and hospital/clinic affiliations.
- Availability, professional contact information, and provider location.
D. Location Data
- Facility Location: The physical location of hospitals and clinics.
- Device Location: Approximate or precise location of your device, if you grant permission, to help you find nearby providers or navigate to a facility.
E. Technical and Usage Data
- IP address, device type, operating system, and app version.
- Log information, crash reports, and performance analytics.
- Interaction data (searches, features used, and screen views).
4. How We Collect Information
We collect information:
- Directly from you: When you register an account, book an appointment, or enter health details.
- From Healthcare Providers: When a doctor or hospital staff updates your vitals, records a diagnosis, or issues a prescription through our Platform.
- Automatically: Through cookies and similar technical collection methods when you interact with our website or app.
- From Permissions: Through device-level permissions you grant (e.g., location services).
5. How We Use Information
| Data Category | Purpose of Processing |
|---|---|
| Mobile Number | Authentication, account security, and service updates. |
| Identity Info | Patient/Provider identification and account management. |
| Health Info | Facilitating clinical workflows, prescriptions, and provider-enabled care. |
| Queue/OPD Info | Real-time tracking of your healthcare journey and waiting times. |
| Location Data | Providing navigation and location-based provider discovery. |
| Technical Data | Security monitoring, troubleshooting, and Platform reliability. |
6. Health and Medical Information
Medikendra facilitates the digital management of health information to support your care.
- Role of Platform: Medikendra provides the technology to store and transmit health records. We do not provide medical diagnosis or treatment. All clinical decisions are made by your Healthcare Provider.
- Access: Your health information is accessible to the specific Healthcare Providers you choose to consult with and their authorized staff (e.g., nurses, pharmacy staff) to ensure continuity of care.
7. AI and Automated Processing
Medikendra may use algorithms, rules engines, or AI-assisted tools for:
- Operational Insights: Analyzing queue patterns and hospital workloads.
- Pharmacy Assistance: Medicine availability checking and inventory intelligence.
- Workflow Suggestions: Identifying bottlenecks in clinical flows.
Important: AI and automated systems provide assistance and suggestions. They do not replace professional medical judgment. All prescriptions, diagnoses, and medication dispensing are subject to human review and approval by qualified healthcare professionals.
8. How We Share Information
We do not sell your personal data. We share information only in the following circumstances:
- With Healthcare Providers: Data is shared with the doctors, hospitals, pharmacies, or diagnostic centers you interact with to facilitate your treatment.
- With Service Providers: We engage trusted third-party vendors for [SMS/OTP PROVIDERS], [CLOUD INFRASTRUCTURE], and [ANALYTICS] who process data under strict confidentiality.
- Legal Requirements: If required by law, we may disclose information to government authorities or law enforcement.
9. Your Privacy Rights
Under applicable Indian data protection laws, you may have the right to:
- Access: Request information about how your data is processed.
- Correction: Update inaccurate or incomplete information.
- Erasure: Request deletion of your data, subject to legal retention requirements.
- Withdrawal of Consent: Withdraw consent for optional processing.
10. Contact and Grievance Redressal
If you have questions or wish to exercise your rights, please contact our Grievance Officer:
[GRIEVANCE OFFICER NAME/DESIGNATION]
[LEGAL ENTITY NAME]
[REGISTERED OFFICE ADDRESS]
Email: [GRIEVANCE EMAIL]
Phone: [PHONE NUMBER]
Legal / Implementation Review Checklist
This checklist is for internal use and must be completed before publication:
- Verify exact legal entity name and registered office address.
- Confirm data hosting locations (e.g., AWS India).
- Define specific retention periods for health records.
- Finalize Grievance Officer appointment and contact details.
- Ensure all third-party processors are listed correctly.