SaathiMed Pvt. Ltd. ("SaathiMed", "we", "our", or "us") is an Indian healthcare technology company. We operate two platforms:
- 🧑⚕️ DoctorSaathi – For doctors and healthcare professionals
- 📱 SaathiMed Patient App – For patients and families
This Privacy Policy explains how we collect, use, disclose, and safeguard your information. We fully comply with Indian data protection laws including the Digital Personal Data Protection Act, 2023 (DPDP Act).
⚕️ Medical Disclaimer: SaathiMed provides AI-assisted health insights for informational purposes only. This is not a substitute for professional medical advice. Always consult a qualified healthcare provider.
1. Information We Collect
1.1 Personal Information
- Identity data: Full name, email address, phone number, date of birth, age, gender
- Profile data: Profile photo (optional), preferred language
- Contact data: Address (for emergency contact)
1.2 Health Information (Sensitive Data)
- Medical history: Past diagnoses, surgeries, allergies, chronic conditions
- Symptoms data: Current symptoms, duration, severity
- Health vitals: Blood pressure, heart rate, blood sugar, weight, BMI, SpO2
- Lifestyle data: Sleep patterns, physical activity, water intake
- Medical documents: Prescriptions, lab reports, radiology images
- Medication data: Current medications, dosages, adherence tracking
- Mental health data: Mood logs, anxiety/stress levels
- Family medical history: Genetic predisposition information
- Pregnancy data: Trimester, due date, fetal health records
1.3 Doctor-Specific Information (DoctorSaathi only)
- Professional credentials: Medical registration number, NMC registration
- Qualifications: Medical degree, specialization, years of experience
- Practice details: Clinic name, address, consultation timings
- Clinical data: Consultation notes, prescriptions, patient records
- Verification documents: Professional license copies, identity proof
1.4 Device & Technical Information
- Device identifiers: Device model, OS version, unique device ID
- Network information: IP address, mobile carrier, network type
- App usage data: Feature interactions, session duration, screen views
- Performance data: App crashes, error logs, load times
- Push notification tokens: For reminders and alerts
1.5 Location Data
- Approximate location: Based on IP address (city level) for nearby search
- Precise location: GPS coordinates (with permission) for emergency services
2. App Permissions
| Permission | Purpose |
|---|
| 📷 Camera | Scan medical reports, video consultations, profile photo |
| 🎙️ Microphone | Voice notes, teleconsultation calls, voice search |
| 📁 Storage | Upload/download medical reports and documents |
| 🔔 Notifications | Medicine reminders, appointment alerts, health tips |
| 📍 Location | Find nearby doctors, hospitals, pharmacies |
| 🏃 Health Connect | Track steps, exercise, sleep patterns |
| 📞 Phone | Direct calling to doctors or emergency contacts |
⚠️ Important: Camera and microphone are never accessed without your explicit action. You can deny or revoke any permission anytime from device settings.
3. How We Use Your Information
- 🤖 AI-Powered Clinical Intelligence: Analyze symptoms, generate differential diagnoses, identify risk factors
- 🩺 Doctor-Patient Connection: Secure teleconsultations, e-prescriptions, care coordination
- 📊 Outcome-Based Learning: Improve AI models through anonymized, de-identified patient outcomes
- 💊 Medication Management: Medicine reminders, adherence tracking, drug interaction alerts
- 📈 Health Monitoring: Track vitals, identify patterns, generate health scores
- 🔔 Notifications: Appointment alerts, health tips, follow-up reminders
- 📱 App Improvement: Crash logs, usage patterns, feature adoption
- ⚖️ Legal Compliance: Medical record-keeping as required by Indian regulations
- 🛡️ Security: Fraud prevention, unauthorized access detection
4. Artificial Intelligence
- AI Triage System: Analyzes symptoms against 5000+ medicines, 1000+ diseases database
- Pattern Recognition: Identifies health patterns and early risk indicators
- Predictive Insights: Forecasts potential health deterioration
- Data Anonymization: All AI training uses de-identified data only
- Doctor-in-the-Loop: AI augments, never replaces clinical judgment
🤝 Doctor-in-the-Loop: Final clinical decisions — diagnosis, treatment, prescriptions — are always made by qualified healthcare professionals.
5. Data Sharing
We NEVER sell your personal or health data. Period.
- With your consent: Sharing with doctors you consult or family members you authorize
- Service providers: Google Cloud, Twilio/Agora (video), Google Analytics (no health data)
- Legal requirements: When required by Indian courts or regulatory bodies
- Emergency: To respond to life-threatening medical emergencies
- Business transfers: In case of merger or acquisition (with notification)
6. Data Security
- End-to-end encryption: TLS 1.3 in transit, AES-256 at rest
- Secure infrastructure: Google Cloud Platform with HIPAA-eligible configurations
- Access controls: RBAC with multi-factor authentication
- Regular audits: Quarterly security assessments, penetration testing
- Data backup: Encrypted backups with 30-day retention
- Incident response: 72-hour notification to affected users and authorities
7. Your Privacy Rights (DPDP Act, 2023)
- Right to Access: Request copy of all personal data we hold
- Right to Correction: Correct inaccurate information
- Right to Erasure: Request permanent deletion of account and data
- Right to Withdraw Consent: Stop any data processing
- Right to Data Portability: Download health records in JSON/PDF
- Right to Restrict Processing: Limit how we use your data
- Right to Object: Object to processing based on legitimate interests
- Right to Nominate: Nominate a representative to exercise rights
- Right to File Complaint: Lodge complaint with Data Protection Board of India
To exercise any rights, email support@saathimed.com with "Privacy Request - [Your Name]".
8. Data Retention
- Active accounts: Data retained while account is active
- Deleted accounts: Personal data deleted within 90 days
- Legal retention: Medical records retained up to 3 years as required by law
- Anonymized data: De-identified data may be retained indefinitely for AI training
- Transaction logs: Consultation records retained for 7 years for tax compliance
9. Children's Privacy
- Not intended for children under 13 years
- 13-18 years: Accounts must be managed by parent/guardian
- Verifiable parental consent required
- Parents have full access to child's health data
- Unauthorized child data will be deleted immediately
10. Data Localization
- Primary storage: India (Mumbai, Google Cloud Asia-South1)
- Backups: Encrypted backups in other regions for disaster recovery
- Processing partners: All sign DPAs with adequate protection
- No unauthorized transfers: No transfers to countries with inadequate protection
11. Third-Party Services
- Google Cloud Platform: Infrastructure, database, AI/ML
- Google Firebase: Authentication, database, storage, notifications
- Agora.io: Video/audio teleconsultation (encrypted)
- Twilio: SMS and WhatsApp notifications
- Google Analytics: Anonymized usage statistics (no health data)
We do not use advertising networks or data brokers. Your data is never sold.
12. Policy Updates
- Changes in laws or regulations
- New features affecting data processing
- Changes in data handling practices
- Security incidents (material changes only)
Significant changes will be notified via in-app notifications and email.
13. Grievance Officer
By using SaathiMed and DoctorSaathi, you agree to this Privacy Policy.
Protected under Indian law (DPDP Act, 2023)