Draft — pending legal counsel review, not final

Legal counsel has not yet been engaged on this document. Nothing below has had a qualified legal review — treat every term as provisional and subject to change.

Data retention specifics, in particular, are pending confirmation against Indian medical-recordkeeping law and will be updated once that review is complete.

Privacy Policy

v0.1-draft

How ACHRI Health collects, uses, and protects your data as a patient or clinic user.

Last updated: August 13, 2026

What we collect

Patient profile data (name, contact, date of birth, gender, blood group), personal health records (PHR), visit and prescription history, consent records, and WhatsApp message metadata used to deliver appointment and notification flows.

Why we collect it

To operate clinical care coordination between you and your treating doctor(s), including appointment scheduling, prescription delivery, and continuity of care across visits.

Legal basis

Processed under India's Digital Personal Data Protection Act, 2023 (DPDP Act), on the basis of your consent at signup and, for certain clinical-necessity processing, legitimate healthcare-delivery interest.

Retention

By default we retain your clinical records indefinitely to support ongoing and future care — there is no automatic expiry. You may request deletion at any time (see "Your rights" below); when you do, we anonymize your identifying profile fields but retain the underlying clinical record for a minimum period as required by Indian medical-recordkeeping rules.

Open item: this retention floor is currently a placeholder pending legal confirmation against Indian medical-recordkeeping law and will be updated once that review is complete.

Sharing

We share data with your treating clinic/doctor, our WhatsApp Business Solution Provider (for delivering notifications you've opted into), our payment processor (for consultation payments), and our cloud storage/database providers — strictly to operate the service. We do not sell your data.

Your rights

You can export your data, withdraw consent, and request deletion at any time from your patient portal:

Export your data (sign-in required)
Manage your consent (sign-in required)
Request deletion (sign-in required)

These pages are part of your patient portal — sign in first, then navigate to Settings / Privacy from there if the links above ask you to log in.

Data residency

Data is currently hosted outside India; we are in the process of migrating hosting to India-based infrastructure.