Privacy Policy

MedAssist ("we," "our," or "us") is committed to protecting the privacy and security of your personal information and sensitive medical data. This Privacy Policy outlines our practices regarding the collection, storage, usage, and disclosure of information when you use our website, mobile application, and services (collectively, the "Platform").

This Privacy Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Telemedicine Practice Guidelines, 2020 issued by the Board of Governors in supersession of the Medical Council of India.

1. Information We Collect

We collect the following types of information to provide and improve our healthcare services:

• Personal Information (PI): Name, age, gender, date of birth, address, phone number, email address, and other contact details.
• Sensitive Personal Data or Information (SPDI):
  • Physical, physiological, and mental health condition.
  • Sexual orientation.
  • Medical records and history (prescriptions, lab reports, diagnosis details).
  • Biometric information.
  • Financial information (bank account or credit card details) for payment processing.
• Technical Information: IP address, device type, operating system, browser type, and usage patterns.

2. Purpose of Collection and Usage

We use your information for the following purposes:

• To provide medical consultation, diagnosis, and treatment services via the Platform.
• To maintain electronic health records (EHR) as per Indian medical standards.
• To facilitate communication between patients, doctors, pharmacists, and diagnostic labs.
• To process payments and billing.
• To improve our services, user experience, and Platform security.
• To comply with legal obligations, court orders, or government requests.

3. Consent

By using our Platform and providing your information, you explicitly consent to the collection, use, and processing of your Personal Information and SPDI in accordance with this Privacy Policy. You have the right to withdraw your consent at any time by writing to our Grievance Officer. However, withdrawal of consent may result in our inability to provide you with certain services.

4. Disclosure and Transfer of Information

We may share your information in the following circumstances:

• Healthcare Providers: With doctors, pharmacists, and labs registered on the Platform to facilitate your treatment and care.
• Service Providers: With third-party vendors who assist us in operating the Platform (e.g., payment gateways, cloud storage providers), subject to strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or government authority, or to protect our rights and safety.

We do not sell or rent your personal information to third parties for marketing purposes.

5. Data Security

We implement reasonable security practices and procedures as mandated by the SPDI Rules, 2011, including encryption, access controls, and secure data storage, to protect your information from unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

6. Retention of Information

We retain your medical records and personal information for as long as necessary to provide services to you or as required by applicable laws (e.g., the Telemedicine Practice Guidelines require retention of records for a specific period).

7. User Rights

You have the right to review the information you have provided and request corrections or amendments if it is inaccurate or deficient. You may contact us at the details provided below to exercise these rights.

8. Grievance Officer

In accordance with the Information Technology Act, 2000 and Rules made thereunder, the contact details of the Grievance Officer are provided below:

9. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.