Privacy Policy

MediQry India (“MediQry”, “we”, “us”, or “our”) operates a healthcare platform that connects patients with verified doctors for in-clinic and online consultations. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our website, mobile applications, and related services (collectively, the “Platform”).

By registering for or using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.

This policy applies to:

• Patients who search for doctors, book appointments, manage profiles, or access health records on the Platform
• Doctors and healthcare providers who register, maintain profiles, and receive bookings through the Platform
• Visitors who browse the Platform without creating an account

MediQry India is intended for users in India. Our data practices are designed to align with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other relevant regulations as they apply to our services.

Account and identity information: name, email address, password (stored in encrypted form), phone number (where provided), date of birth, gender, city, and profile photograph.

Health and medical information: allergies, chronic conditions, current medications, family medical history, consultation reasons, appointment notes, lab reports, and other health records you choose to upload or enter on the Platform.

Doctor and provider information: medical qualifications, specialisations, Medical Council registration number, clinic details, consultation fees, availability, identity documents submitted for verification, and professional biography.

Transaction information: appointment details, payment amounts, payment status, and transaction identifiers processed through our payment partners (e.g. Razorpay). We do not store full card or UPI credentials on our servers.

Technical and usage information: IP address, browser type, device information, pages visited, search queries, cookies, and similar analytics data used to improve the Platform.

Communications: messages sent to or received from you regarding account verification (including OTP), appointment confirmations, reminders, and support enquiries.

• Create and manage your account and user profile
• Verify your identity and, for doctors, conduct KYC and credential verification
• Enable doctor search, appointment booking, and online consultations
• Process payments and issue receipts for consultations
• Send transactional notifications (booking confirmations, reminders, OTP codes)
• Display your profile information to other users as necessary for the service (e.g. doctor profiles visible to patients)
• Maintain health history and medical reports you store on the Platform
• Improve Platform security, performance, and user experience
• Comply with legal obligations and respond to lawful requests from authorities
• Detect, prevent, and address fraud, abuse, or violations of our Terms of Service

We process your personal data based on one or more of the following:

• Your consent, provided at registration or when you submit health information
• Performance of a contract — providing the services you request (e.g. booking an appointment)
• Legitimate interests — improving the Platform, ensuring security, and preventing misuse
• Legal obligation — where required by applicable law or regulatory authority

Health-related information is treated as sensitive personal data. We collect and process it only with your explicit consent or as necessary to deliver healthcare services you have requested through the Platform.

We do not sell your personal information. We may share information with:

• Doctors you book appointments with — relevant patient details needed for the consultation (name, contact, reason for visit, health history you choose to share)
• Patients — doctor profile, clinic, fees, availability, and reviews as displayed on the Platform
• Payment processors (e.g. Razorpay) — to process consultation fees securely
• Communication providers — to deliver email, SMS, or WhatsApp notifications you have opted into
• Cloud hosting and infrastructure providers — who process data on our behalf under contractual confidentiality obligations
• Law enforcement or regulatory bodies — when required by law, court order, or to protect rights and safety
• Business successors — in the event of a merger, acquisition, or sale of assets, subject to continued protection of your data

We retain your information for as long as your account is active or as needed to provide services. Health records and appointment history may be retained for the period required by applicable healthcare record-keeping norms or until you request deletion, whichever is later.

When you delete your account, we will delete or anonymise your personal data within a reasonable period, except where retention is required by law, for dispute resolution, or to enforce our agreements.

We implement reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS), access controls, and secure storage practices. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential and notifying us promptly at privacy@mediqry.in if you suspect unauthorised access.

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information via your profile settings
• Withdraw consent for optional processing (where consent is the legal basis)
• Request deletion of your account and associated data
• Raise a grievance regarding our data practices

To exercise these rights, contact us at privacy@mediqry.in. We will respond within the timeframe required by applicable law.

We use cookies and similar technologies to maintain sessions, remember preferences, and analyse usage. You can control cookies through your browser settings; disabling cookies may affect Platform functionality.

The Platform is not directed at children under 18. Paediatric appointments must be booked by a parent or legal guardian. We do not knowingly collect personal information from minors without appropriate guardian consent.

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email. Continued use after changes constitutes acceptance of the updated policy.

For privacy-related questions, requests, or grievances, contact:

MediQry India — Privacy Officer
Email: privacy@mediqry.in
Grievance officer: grievance@mediqry.in