Privacy Policy

1. Information we collect

Information you give us

• Account details: email address, password, and mobile number (if you or the clinic add it).
• Profile details: full name, date of birth, gender, blood group, height and weight.
• Profile photo: if you choose to upload one, using your camera or photo gallery.
• Health readings: values you record such as blood pressure, blood sugar, heart rate, oxygen saturation, temperature, weight and height, with any notes.
• Medical documents: reports, images or files you upload.

Information created when you use the service

• Appointments: the doctor, date, time slot, queue token number and appointment status.
• Clinical information: prescriptions and medical records added by your doctor or clinic staff.
• Technical and security data: login records and an audit log of actions taken on records, used to keep your account secure.

We do not collect your precise location, contacts, call logs or SMS messages, and we do not use advertising identifiers.

2. App permissions

• Camera: only when you choose to take a profile photo or photograph a document.
• Photos / storage: only when you choose an image or file to upload.
• Internet: to connect to our servers.

You can deny or revoke these permissions in your phone settings at any time. The rest of the app will keep working.

3. How we use your information

• To create and secure your account.
• To book, manage and remind you about appointments and issue queue tokens.
• To let your doctor and the clinic's authorised staff see your history, prescriptions and records so they can care for you.
• To show your health readings and records back to you.
• To keep the service secure, prevent misuse and meet legal obligations.

We do not sell your personal data, show advertising, or use your health information for marketing.

4. Who can see your information

• Your care team: doctors and authorised staff at Sri Krishna Clinic, only as needed to provide care and run appointments.
• Service providers: companies that help us run the service under confidentiality obligations. This is our cloud hosting provider, which stores the data on our servers.
• Legal requirements: government or law-enforcement authorities when required by law or a valid legal order.

5. Data security

Data is sent over encrypted connections (HTTPS). Passwords are stored as one-way hashes. Access to records is limited by role (patient, doctor, staff, admin) and changes to records are logged. No system is completely secure, but we work to protect your information and will notify you and the authorities of a data breach as the law requires.

6. How long we keep your data

We keep your account information while your account is active. Medical records, prescriptions and appointment history may need to be kept for the period required by Indian medical record-keeping rules, even after you close your account. When we no longer need it, we delete or anonymise it.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can:

• View the information we hold about you (most of it is visible in the app);
• Correct or update inaccurate information;
• Withdraw your consent and ask us to delete your account and data, subject to legal retention rules (see Delete your account);
• Nominate another person to exercise your rights if you die or become incapacitated;
• Raise a complaint with our Grievance Officer, and if it is not resolved, with the Data Protection Board of India.

To exercise any of these rights, email privacy@example.com.

8. Children

CareQueue is meant for users aged 18 and over. A parent or legal guardian may create and manage an account for a child and is responsible for giving consent for the child's information.

9. Medical disclaimer

CareQueue is a tool for booking and record keeping. It does not give medical advice, diagnosis or emergency services. In an emergency, call 112 or go to the nearest hospital.

10. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for important changes, notify you in the app.

11. Contact and Grievance Officer

A3FusionTech
Grievance Officer: Grievance Officer name
Email: grievance@example.com
Address: Clinic address, City, State, PIN

We will acknowledge complaints within 48 hours and try to resolve them within 30 days.