Privacy Policy

Who is responsible for which data

• Clinic account data (clinic owners and staff): we decide how this is used and are responsible for it.
• Patient records entered by a clinic (registrations, visits, vitals, prescriptions, documents, invoices): the clinic controls this data. We store and process it only to provide the Service to that clinic, on its instructions.

Information we collect

• Account data: name, email address, phone number, clinic and branch details, GSTIN and UPI ID you choose to add, and your role.
• Clinic records: appointments, patient details, vitals, notes, prescriptions, uploaded reports, invoices, payments, income and expenses that clinics enter into the Service.
• Patient app data: phone number and PIN used to sign in, bookings and help requests patients send.
• Payment data: when you buy a plan, payments are processed by Razorpay. We receive the order and payment reference and status; we do not store card, UPI PIN or bank login details.
• Usage and device data: pages visited, actions in the app, browser and device type, IP address and approximate location, collected through cookies and analytics tools.
• Enquiries: information you send through the demo-call form, help requests or email.

How we use information

• To provide, secure and maintain the Service, including sign-in and role-based access.
• To send service emails such as appointment confirmations and reminders on a clinic's behalf.
• To process subscriptions, payments and refunds.
• To respond to support requests and demo-call requests.
• To understand how the Service is used and improve it, and to measure our advertising.
• To comply with legal obligations and prevent misuse.

We do not sell personal information, and we do not use patient records for advertising.

Sharing & service providers

We share information only with providers that help us run the Service, under appropriate safeguards:

• Google Firebase / Google Cloud — authentication, database, file storage and analytics.
• Vercel — website and application hosting.
• Razorpay — payment processing.
• Resend — sending transactional emails.
• Meta and Google advertising tools — measuring visits and sign-ups from our ads on our public website. These do not receive patient records.

We may also disclose information when required by law or to protect the rights and safety of users.

Cookies

We use cookies to keep you signed in, remember preferences such as theme, and understand how visitors reach and use our website. You can block cookies in your browser, but parts of the Service may stop working.

Data retention

We keep clinic data while the clinic's account is active. If a plan ends, data is retained so the clinic can renew and continue. A clinic owner can ask us to delete the account and its data; we delete it within a reasonable time, except where we must keep certain records (such as payment records) by law.

Your rights

You can access and update most of your information inside the Service. To request a copy, correction or deletion of your data, email help@arogyasystem.com. Patients should contact their clinic first, since the clinic controls their records; we will assist the clinic in responding.

Security

Data is encrypted in transit, each clinic's records are kept separate, staff access is limited by role, and uploaded documents are stored privately. No system is perfectly secure, so please keep your password and PIN confidential.

Children

The Service is meant for clinics and adults. Records of minors are entered and managed by their clinic with a parent or guardian's involvement.

Changes to this policy

We may update this policy. We will change the date above, and notify account owners of significant changes.

Contact us

Questions about privacy? Email help@arogyasystem.com.