Privacy Policy

Your medical records belong to the clinic you visit. The clinic decides who may see them and for how long they are kept. MedRecord Pro is the software the clinic uses to store them, and the app is how the clinic shows them to you. We do not sell your information, and we do not use it for advertising.

• Nothing about you, until you ask for it. Clinic timings, doctor availability, notices and health topics work without any account, login or personal detail.
• Your phone, so the clinic can reach it. When you add a clinic, the app registers the device and, if you allow notifications, a notification token. This is how clinic announcements and appointment reminders arrive. It is not linked to you personally until you link your records.
• Your name and mobile number when you request an appointment, so the clinic knows who is coming.
• Your medical records — prescriptions, vitals, growth measurements and vaccination — only after the clinic sends you a one-time code and you enter it in the app. The code goes to the mobile number already registered with the clinic.
• Details you choose to correct in the app: name, gender, date of birth, address and, if you enter it, your Aadhaar number. These are saved to your record at the clinic.

The app does not track your location, does not read your contacts, messages or files, and contains no advertising or third-party analytics.

Only to provide care and to run the clinic: to show you your own records, to book and remind you of appointments, to tell you when your turn is near, to remind you of a child's vaccination, and to send the clinic's own notices.

Your clinic and its staff. Nobody else. We do not share or sell your information to other companies. Two technical services are used to deliver the app:

• Google Firebase Cloud Messaging delivers notifications. It receives the notification token and the text of the notice — so a notification never contains your diagnosis or prescription, only that something is waiting for you.
• WhatsApp is used by the clinic to send you the one-time code and, if the clinic chooses, your prescription link. Those messages are sent by the clinic from its own number.

Records are stored on secure servers operated for MedRecord Pro and are transmitted over an encrypted connection.

The clinic keeps medical records as long as medical practice and Indian law require. The link between your phone and your records lasts until you or the clinic removes it. Access codes expire in 30 minutes and work once.

• In the app, open My Records and tap Unlink to remove a record from that phone.
• Remove the clinic from the app to stop notifications and delete what the app stored on the phone.
• Ask your clinic to revoke the phone's access — staff can do this at any time, and they can also correct anything in your record.
• To have your records themselves deleted, ask the clinic. They will do what the law allows; some medical records must be kept for a fixed number of years even after you ask.

The app is for adults. A parent or guardian uses it on a child's behalf, including the growth chart and vaccination schedule. A child's records reach a phone only when the clinic issues a code to the number registered for that family.

Connections are encrypted. The key that links your phone to your records is stored in the phone's secure keystore, is unique to that phone and that clinic, and can be revoked by the clinic. Staff access to records is restricted by role, and every clinic's data is kept separate from every other clinic's.

If this policy changes, the date at the top changes with it. Significant changes will be announced in the app.

For anything about your own records, please contact your clinic directly — they hold them. For the app or this policy, write to medrecordpro.in@gmail.com.