1. Who we are and what this covers
Doctors Solutions is operated by [Registered company name](“we”, “us”). This policy explains how we handle personal data when you use the PediaCare app for parents, the Care Partner app for doctors, the operations console, and this website (together, the “Services”).
For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we act as a Data Fiduciary for account, booking, and payment data. Doctors who consult through the Services remain independently responsible for the clinical records they create under applicable medical regulations.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account details | Name, email, phone number, password (stored hashed), profile photo | You |
| Child profiles | Name, date of birth, sex, growth measurements, milestones, vaccination records | Parent or guardian |
| Health records | Consultation notes, prescriptions, uploaded reports, chat messages with doctors | You and your doctor |
| Doctor credentials | Registration number, qualifications, identity documents, practice details, payout account | Doctors during onboarding |
| Payments | Amount, status, and transaction reference. Card and bank details are handled by our payment provider, not stored by us | Payment provider |
| Technical data | Device type, app version, IP address, error logs, notification tokens | Your device |
| Website enquiries | Name, work email, organisation, role, and message from the demo form | You |
Health information is sensitive. We collect only what is needed to provide care-related features and never use it for advertising.
3. How we use information
- To create and secure your account and verify your identity.
- To show growth charts, vaccination schedules, and reminders for your child.
- To let you find doctors, book and pay for consultations, and join video visits.
- To give the treating doctor the history they need before and during a consultation.
- To verify doctors' credentials before they are listed, and to pay them.
- To send service messages such as booking confirmations, reminders, and security alerts.
- To diagnose errors, prevent fraud and abuse, and keep the Services secure.
- To meet legal, tax, and regulatory obligations.
4. Consent and legal basis
We process personal data on the basis of your consent, given when you create an account, add a child profile, or book a consultation, and for the legitimate uses permitted under Section 7 of the DPDP Act (for example, complying with law or responding to a medical emergency).
You can withdraw consent at any time from the app settings or by contacting us. Withdrawal does not affect processing already carried out, and some features, such as consultations, cannot work without the related data.
5. Children's data
The Services are used by parents and legal guardians to manage care for their children. Accounts must be held by an adult aged 18 or over. By adding a child profile you confirm that you are the child's parent or lawful guardian and give verifiable consent to process the child's data for their care.
We do not track children, profile them for behaviour, or show them targeted advertising, in line with Section 9 of the DPDP Act.
7. How long we keep information
We keep account and child health data while your account is active. After you delete your account, we erase or anonymise it unless we must keep it longer. Medical records created during consultations may be retained for the period required under applicable medical record regulations, and payment records for the period required by tax law.
Error and access logs are kept for a limited time and then deleted automatically.
8. How we protect information
- Data travels over encrypted (TLS) connections.
- Passwords are stored as one-way hashes, never in plain text.
- Parent, doctor, and staff accounts are separated, and staff access is limited by role.
- Video rooms use short-lived, server-issued access tokens.
- Doctor verification decisions and administrative actions are logged.
9. Your rights
Under the DPDP Act you can:
- Ask for a summary of the personal data we hold about you and how it is used.
- Ask us to correct, complete, or update inaccurate data.
- Ask us to erase data we no longer need to keep.
- Withdraw consent you have given.
- Nominate another person to exercise these rights if you die or become incapable.
- Raise a grievance with us, and then with the Data Protection Board of India.
See our data protection page for how to make a request and how quickly we respond.
11. Changes to this policy
We will post any changes on this page and update the date at the top. If a change materially affects how we use your data, we will notify you in the app or by email before it takes effect.
12. Contact and grievances
For privacy questions or requests:
[Registered company name][Registered office address]
Email: [privacy@your-domain]
In line with the Information Technology Act, 2000 and its rules, you can also contact our Grievance Officer, who will acknowledge your complaint within 24 hours and aim to resolve it within 15 days:
Grievance Officer: [Grievance Officer name][Grievance Officer postal address]
Email: [grievance@your-domain]