This policy explains what the DocKit Care app collects when you use it to find doctors, book appointments and keep your health information, how it is used, who it is shared with, and the choices you have. It applies to the patient app and the patient portal.
1. Who is responsible for your data
Your DocKit Care account — your login, profile, health profile, reminders and uploads — is managed by DocKit Care ("we", "us").
Your records at a clinic — visit notes, prescriptions, bills and reports a clinic creates — belong to that clinic. The clinic decides how they are kept and is responsible for them as your healthcare provider. DocKit Care provides the software the clinic uses and handles those records on the clinic's behalf.
2. Information we collect
You give us:
- Account details: name, mobile number, email, password (stored only as a secure hash).
- Profile: date of birth, gender, address and profile photo.
- Health profile: blood group, allergies, ongoing conditions, regular medicines and an emergency contact.
- Appointments you book, including — when you book for someone else — that person's name, age, gender and relationship to you. Please only share someone else's details with their permission.
- Documents and photos you upload, reminders you set, and reviews you write.
Collected automatically:
- Your device's location, only if you allow it, to show nearby clinics and their distance. It is used for that search and is not stored.
- A push-notification token, so we can send appointment updates and reminders.
- Basic technical logs (for example, errors and request times) to keep the service secure and working.
From others: if you sign in with Google or Apple, we receive your name, email and an account identifier from them. Clinics you visit add records about your care, which you can see in the app.
3. How we use it
- To create and secure your account and verify your phone number.
- To show doctors and clinics, book, reschedule and cancel appointments, and send you updates.
- To share your health profile with a clinic when you book there, so the doctor treating you knows about allergies and conditions. A clinic you have never booked with does not receive it.
- To run features you turn on, such as reminders and document sharing.
- To prevent fraud and abuse, fix problems and meet legal obligations.
We do not sell your information and do not use your health information for advertising.
4. Who we share it with
- Clinics you book with — your profile, health profile and appointment details. You can see which clinics hold a copy under Profile → "Who can see this".
- People you choose — when you create a share link or approve a clinic's request to see your records. You can revoke these at any time.
- Service providers who run parts of the service for us, under obligations to protect your data: cloud hosting and database, file storage for documents and photos, SMS delivery for login codes, push-notification delivery, video calling for online consultations (calls are not recorded), and Google or Apple sign-in if you use them.
- AI assistance used by clinics — a doctor may use AI tools in the clinic software to help draft prescriptions or transcribe dictated notes. When they do, the relevant consultation details are processed by an AI service provider for that purpose only.
- Legal reasons — where required by law, court order or to protect someone's safety.
5. How long we keep it
We keep your account information while your account is open. When you delete your account, it is removed from our live systems straight away; copies in routine backups are removed as those backups expire.
Clinics keep the medical records they create for as long as the law requires them to, even after you delete your DocKit Care account. Contact the clinic directly about those records.
6. Your rights and choices
- See and correct your information in the app under Profile.
- Delete your account in the app under Profile → Delete account, or see how to delete your account.
- Withdraw consent — revoke share links and record access, or turn off location and notifications in your phone's settings.
- Ask questions or complain — contact us using the details below.
These rights are provided in line with India's Digital Personal Data Protection Act, 2023 and other applicable law.
7. Security
We protect your information with access controls that keep each clinic's data separate, encrypted connections (HTTPS), hashed passwords, and sign-in that ends your session on other devices. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
8. Children
You must be 18 or older to create an account. A parent or guardian can book and manage appointments for a child from their own account.
9. Changes to this policy
If we make important changes, we will tell you in the app before they take effect. The date at the top shows when this policy was last updated.
10. Contact and grievances
Email privacy@dockit.care or write to DocKit Care, Vaishali Nagar, Jaipur 302021, Rajasthan, India. We aim to respond within 30 days.
