Privacy

Your records, in plain words.

What we keep, who can see it and how you take it back.

What we keep

The details you add: names, prescriptions, medicines, allergies and records.
Your mobile number, so you can sign in and get reminders.
A log of who viewed or shared a record, and when.

Who can see it

You, and people you add to a Passbook with their own consent.
A doctor or family member only through a share you create.
Every share has an end date. Revoke any of them in one tap.

Where it lives

Records stay on servers in India and are encrypted.
Every view is logged so you can see who looked.

Consent

Each adult says yes for their own Passbook, as the DPDP Act asks.
Siblings can co-manage a parent's Passbook once the parent has agreed.

What we are not

Not a doctor. We never diagnose or replace your doctor's advice.
Not an official ID. A Passbook is a personal health summary.

This is the short version. The full Privacy Policy follows below.

Last updated 5 November 2026

1. Who this covers

This policy applies to the MedicalPassbook website and app. MedicalPassbook is the data fiduciary for the personal data you give us, as the Digital Personal Data Protection Act, 2023 (DPDP Act) uses that term.

It covers visitors, people who create a Passbook, and people whose records are added to a Passbook by a family member.

2. What we collect

Account details: your name and mobile number, and a password stored only as a salted hash.
Health records you add: names of family members, dates of birth, allergies, prescriptions, medicines, timings, reports and notes. Photographs of prescriptions are included.
Activity records: who viewed, shared or changed a record, and when.
Early-access requests: your name, WhatsApp number, preferred language and your consent to be contacted.
Reviews you choose to send us, with the name and city you allow us to show.
Technical data needed to run the service, such as error logs. We do not run advertising or tracking cookies.

3. Why we use it

We do not sell personal data. We do not use health records for advertising.

To create your Passbook, read prescriptions and draft reminders, precautions and follow-ups for you to confirm.
To let you share chosen records with a doctor or family member, and to end that access when you say so or when it expires.
To send reminders and service messages you have asked for.
To keep the service secure, prevent misuse and fix faults.
To meet legal obligations.

4. Consent

We process your data with your consent. Each adult agrees to their own Passbook. A family member can add and manage another adult's Passbook only after that adult has agreed.

A parent or lawful guardian gives consent for a child's Passbook. You can withdraw consent at any time; withdrawing does not undo earlier lawful processing.

5. How prescription reading works

When you photograph a prescription, the image is processed by software that drafts the medicines and timings. A draft is never scheduled or shared until you check and confirm it. Drafts can be wrong, so please compare each line with the paper.

6. Who can see your records

You, and the people you have added to a Passbook with their own consent.
A doctor or family member, only through a share you create. A share names what is included and has an end date; you can revoke it at any time.
Our staff do not browse your records. Access for support or security happens only when needed to resolve a problem you have raised or to protect the service, and is logged.
Authorities, only where the law requires and only the data the law requires.

7. Service providers

We use infrastructure and messaging providers to host data, send reminders and run the service. They process data on our instructions and under confidentiality terms. We do not allow them to use your data for their own purposes.

8. Where data is stored and how it is protected

No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

Records are stored on servers in India and encrypted in transit and at rest.
Access is limited by sign-in, per-person permissions and expiring shares.
Every view of a record is logged so you can see who looked.

9. How long we keep it

We keep a Passbook for as long as the account is open. When you delete a Passbook or your account, we delete its records, except where the law requires us to keep something, and then only for as long as it requires. Backups are overwritten on their normal cycle.

Early-access requests are deleted if we do not start you on the service or when you ask.

10. Children

A parent or lawful guardian creates and manages a child's Passbook. We do not track children or show them advertising.

11. Your rights

You may access, correct, complete, update and erase your data, withdraw consent, name a nominee, and raise a grievance. How to do each is on the Your data rights page.

12. Changes

If we change this policy in a way that matters, we will tell signed-in users before it takes effect. The date at the top shows the latest version.

Contact

Use the contact details given when you signed up, or message us on the WhatsApp number we used to reach you.