Privacy policy

Medicloom provides software that clinics use to keep appointment, consultation, prescription and billing records, and a free app that lets patients see their own records. This policy explains how we handle personal data under India's Digital Personal Data Protection Act, 2023.

Who decides what is collected

Each clinic decides what patient information it records and is responsible for it. Medicloom processes that information on the clinic's behalf. For the patient app, Medicloom handles your login (mobile number) and anything you upload yourself.

What we store

Clinic staff accounts (name, email, password stored only as a secure hash); patient details entered by clinics (name, mobile number, age, gender, address, medical history, visits, prescriptions, bills, photos and reports); files patients upload; and logs of who changed what.

Where it is stored

On servers in India, encrypted in transit. Each clinic can see only its own records. Medicloom staff do not browse clinic records except when a clinic asks for support.

Patients' records in the patient app

A clinic record appears in a patient's app only after the patient logs in with a code sent to their own mobile number and confirms the record is theirs. Doctors' private notes are never shown. Patients can share their history with another doctor using a code that expires after 30 minutes, and can stop sharing at any time.

Your rights

You can ask to see, correct or delete your data. Patients can delete their Medicloom app account in Settings; records held by a clinic are corrected or deleted by asking that clinic. Clinics can download a full backup of their data at any time.

We never

Sell personal data, show advertising, or share health data with insurers, pharma companies or anyone else without the consent of the person it is about.

Contact

Grievance officer: privacy@medicloom.in