Privacy Policy
Clinics trust us with their patients' information. This policy explains what we collect, how we use it, how we protect it, and what we will never do with it.
01 Who this policy covers
This policy covers two groups. Clinics, doctors and their staff who use the Service, and the patients whose information clinics record in it.
For patient information, the clinic decides what is recorded and why. We process that information on the clinic's behalf and only to provide the Service.
02 Information we handle
- Clinic account details: clinic name, doctor names, registration numbers, staff names, emails and billing details.
- Patient information entered by the clinic: demographics, contact numbers, ABHA number where linked, vitals, visit notes, prescriptions, reports, bills and payments.
- Consultation audio, only when the patient consents to recording for notes.
- Usage information such as logins, device type and actions taken, used for security and support.
- Details you send through our website forms, such as your name, email, clinic name and message.
03 How AI Consult Notes handles audio
Audio is recorded only after the patient agrees, and that consent is logged with the visit. The recording is used only to create a draft note for the doctor.
The draft is not saved to the patient record until the doctor reviews and signs it. Once the note is signed, the recording is deleted. The AI does not diagnose, prescribe or make clinical decisions.
Patient audio and notes are not used to train models for other customers.
04 How we use information
- To run the Service: bookings, records, prescriptions, pharmacy, billing, reports and reminders.
- To send messages the clinic has set up, such as appointment reminders, prescriptions and receipts on WhatsApp or SMS.
- To keep accounts secure, detect misuse and fix problems.
- To support clinics during setup and day-to-day use.
- To bill clinics for their plan.
05 What we never do
- We never sell patient or clinic data.
- We never use patient data for advertising.
- We never share patient data with pharmaceutical companies or marketers.
06 Sharing
We share information only where needed to provide the Service: with hosting, messaging and payment providers bound by confidentiality and security obligations, with partner labs and ABDM services when the clinic and patient use those features, and where required by law.
07 Security
- Encryption of data in transit and at rest.
- Access limited by role. Front-desk staff do not see clinical notes unless the clinic allows it.
- Logs of who viewed or changed a record.
- Regular backups and restricted access for our own staff.
08 Storage and retention
Data is stored on servers located in India. Clinic data is kept for as long as the clinic has an account, and for the period the clinic needs to meet its own record-keeping duties.
When a clinic closes its account, it can export its data first. We then delete or anonymise it within a reasonable period, except where the law requires us to keep it.
09 Patient rights
Patients who want to see, correct or delete their information should contact their clinic first, since the clinic controls the record. We help clinics respond to these requests.
Where the law gives patients rights over their data, including under India's digital personal data protection rules, we support clinics in meeting them.
10 Website forms
When you sign up or contact us, we use your details to create your trial, send login information and reply to you. We do not add you to unrelated mailing lists.
11 Contact
For privacy questions, write to us through the Contact Us page and choose "Privacy and ABDM questions" or "Something else".