Template for review: have a lawyer check this policy against the Digital Personal Data Protection Act, 2023 and your actual practices before launch.

Privacy Policy

Last updated:

What we collect

• Account details: name, email, mobile number, and optionally date of birth and sex.
• Location: the home location you pin on the map, used to find doctors and pharmacies near you.
• Health information: appointment reasons, messages with your doctor, prescriptions and medicine orders.
• Health profile (optional): blood group, allergies, long-term conditions and an emergency contact.
• Family members (optional): name, relation, date of birth, sex, blood group, allergies and conditions of family members you add. Add someone only with their permission (or as the parent or guardian of a child).
• Medicine log (optional): the doses you mark as taken or skipped, and your reminder times.
• Payments: handled by Razorpay; we store only payment references, never card or UPI details.
• Doctors and pharmacies: professional registration and licence details for verification.

How your prescriptions are shared

If you agree (at sign-up, or later in your profile), prescriptions your doctor issues are sent automatically to verified pharmacies near your home so they can quote prices. Before you order, pharmacies see only the medicines, quantities, the prescribing doctor's credentials and their distance from you. Your name, phone, address and diagnosis are shared only with the pharmacy you order from. You can withdraw this consent at any time; you can then still share a specific prescription yourself.

Who else sees your data

• The doctor you book sees your contact details, reason for visit and your visits with them only.
• Platform administrators can access records to verify partners, resolve disputes and process refunds; every administrative action is logged.
• Service providers: Razorpay (payments), our email provider and our hosting provider, only as needed to run the service.
• Pharmacies you buy from see when your medicines are due to run out, so they can keep stock; you get a reminder when a doctor-approved refill is due.
• Pharma companies and their medical representatives never see your name, contact details, age or test results. They see only how many times medicines were prescribed, counted across patients and doctors; disease figures for groups smaller than 5 are hidden.
• When your doctor suggests tests, nearby verified labs see only the tests and distance until you book one. Your reports are stored privately and can be opened only by you, the lab that made them, the doctor who ordered them, and doctors you book on Pyshio if you leave "share with my doctors" on for that report.
• Doctors you book see your health profile (or the family member's, when you book for them) and how regularly you've marked your medicines as taken, to treat you safely.
• Video consultations run on Jitsi Meet. Only a random room name is shared with that service, never your name, phone or email; the room opens only for you and your doctor around the appointment time, and calls are not recorded by Pyshio.
• When you book a pharmacy or lab, a chat with them opens so you can talk about your order. Only you and that pharmacy or lab can read it; either of you can close it.
• We publish and use health statistics (for example, how common a disease is by age band, city or state) only in aggregate, with groups smaller than 5 hidden, so no one can be identified.

Your rights

• Access and portability: download all your data from My health → Profile.
• Correction: update your details in your profile at any time.
• Withdraw consent: turn off automatic prescription sharing in your profile.
• Erasure: close your account from your profile. We remove your personal details; records we must keep by law (for example prescriptions and invoices) are retained without your name or contact details.
• Grievances: contact our Grievance Officer at the address below.

Security and retention

Passwords are stored as salted hashes, sessions use secure cookies, and access to health data is limited to the people above. We keep data while your account is open and for as long as the law requires afterwards.

Contact

Email —