We collect personal identity data (name, verified phone number) and medical information including prescriptions and lab reports. We also track device FCM tokens for critical appointment alerts and location data to suggest the nearest clinics.
Your data is used to:
All data is stored in the Google Cloud Firestore instance located in the Mumbai (asia-south1) region. We utilize enterprise-grade AES-256 encryption for all sensitive health records at rest.
Health records are private. They are only visible to you and the specific doctor or clinic with whom you have a confirmed appointment. We do not sell data to insurance providers or advertisers.
We retain records as long as your account is active. If you use the 'Delete Account' feature, all personally identifiable data is wiped from our active production systems, though financial logs are archived for 7 years for legal compliance.
We implement multi-factor authentication (OTP) and role-based access control. You are responsible for keeping your device and login session secure.
Profiles for users under 18 must be created and managed by a parent or legal guardian.
For data access requests, use the 'Support' screen within the app to reach our privacy officer, or email us at:
support@digiswasth.com