Privacy Policy

Healthcare with AI ("Company," "we," "us," or "our") operates the healthcarewithai.cloud platform and associated services (collectively, the "Platform"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Platform.

By accessing or using our Platform, you agree to the terms of this Privacy Policy. If you do not agree with these terms, please do not use the Platform.

1. Information We Collect

1.1 Personal Information

When you register for an account or use our services, we may collect:

• Name, email address, phone number, and professional credentials
• Clinic or healthcare facility details (name, address, registration number)
• Billing information and payment details
• Government-issued identification for verification purposes

1.2 Patient Health Data

In the course of providing our services, the Platform may process the following types of health data on behalf of healthcare providers:

• Patient demographic information (name, age, gender, contact details)
• Medical history, diagnoses, prescriptions, and treatment records
• Lab reports, imaging records, and pathology results
• Appointment schedules and consultation notes
• ABHA (Ayushman Bharat Health Account) identifiers and linked health records

Important: Healthcare providers (our clients) are the data controllers for patient health data. We act as a data processor and process such data solely on their behalf and per their instructions.

1.3 Automatically Collected Data

• Device information (browser type, operating system, device identifiers)
• IP address, geolocation data (approximate)
• Usage analytics (pages visited, features used, session duration)
• Cookies and similar tracking technologies

2. How We Use Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Platform, including AI-powered features such as voice AI, WhatsApp automation, prescription generation, and appointment management
• Healthcare Operations: To facilitate electronic medical records (EMR), patient communication, billing, and compliance with healthcare regulations
• ABDM Integration: To enable creation and linking of ABHA IDs, sharing of health records via the Ayushman Bharat Digital Mission framework, and compliance with national health data standards
• AI Processing: To power AI-driven features including natural language processing for voice interactions, automated prescription suggestions, and intelligent appointment scheduling
• Communication: To send service notifications, appointment reminders, and platform updates
• Analytics: To understand usage patterns and improve platform performance (using aggregated, anonymized data only)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. Data Sharing

We do not sell your personal or health data. We may share information in the following limited circumstances:

• With Healthcare Providers: Patient data is shared only with the healthcare provider who has a legitimate treatment relationship with the patient
• ABDM Health Information Exchange: Health records may be shared through the ABDM network only with explicit patient consent via their ABHA account
• Service Providers: With trusted third-party providers who assist in operating our Platform (cloud hosting, payment processing, SMS/WhatsApp gateways), bound by strict data processing agreements
• Legal Requirements: When required by law, regulation, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate safeguards for data protection

4. Data Security

We implement comprehensive security measures to protect your data:

• Encryption at Rest: All health records and sensitive data are encrypted using AES-256 encryption at rest
• Encryption in Transit: All data transmissions use TLS 1.3 encryption
• Access Control: Role-based access control (RBAC) ensures users can only access data they are authorized to view
• Audit Logging: All access to patient health records is logged and monitored
• Secure Infrastructure: Data is hosted on SOC 2 compliant cloud infrastructure with regular security assessments
• Data Isolation: Multi-tenant architecture with strict tenant-level data isolation ensures no cross-clinic data access

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements for healthcare records
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw previously given consent for data processing
• Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer or the appropriate regulatory authority

For Patients: If you are a patient whose data is processed through our Platform, please contact your healthcare provider directly to exercise your rights. The healthcare provider is the data controller for your health records.

6. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience on our Platform:

6.1 Essential Cookies

Required for the Platform to function properly. These include authentication tokens, session identifiers, and security cookies. These cannot be disabled.

6.2 Analytics Cookies

Help us understand how visitors interact with our website. We use privacy-respecting analytics that do not track individual users across websites. You may opt out of analytics cookies through your browser settings.

6.3 Preference Cookies

Store your preferences such as language, timezone, and display settings to provide a personalized experience.

7. DPDP Act Compliance

Healthcare with AI is committed to compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India. In accordance with the Act:

• We process personal data only for lawful purposes with valid consent or legitimate legal basis
• We collect only the minimum data necessary for the stated purpose (data minimization)
• We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Healthcare records are retained as per applicable medical record retention requirements
• We have appointed a Data Protection Officer (DPO) to oversee compliance and respond to data subject requests
• We maintain appropriate technical and organizational measures to protect personal data
• We will notify the Data Protection Board and affected individuals in the event of a personal data breach as required by the Act
• We ensure that any cross-border transfer of personal data complies with the provisions of the DPDP Act and applicable government notifications

ABDM Compliance

As a Health Information Provider (HIP) and Health Information User (HIU) under the Ayushman Bharat Digital Mission, we adhere to all ABDM data sharing protocols, consent frameworks, and technical standards. Patient health records are shared through the ABDM network only with explicit, granular, and revocable patient consent.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

We aim to respond to all data protection inquiries within 30 days.