Privacy Policy for MumiCare: Nurturing the Future

Mumicare Private Limited ("Mumicare", "we", "us") respects your privacy. This Privacy Policy explains what personal and health information we collect through the app and website and our teleconsultation services, how we use it, and the choices and rights you have, in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Information We Collect

Account and identity information

• Name, age, sex, contact number, email, and address provided during registration.
• Identity/verification details required for booking and conducting teleconsultations.

Health information

• Symptoms, medical history, consultation notes, prescriptions, lab reports, and images you share during teleconsultations or upload to your profile.
• Your consultation history and prescriptions, stored securely within the app.

Usage and technical information

• App/website usage data, device information, and chatbot conversation logs (processed via Sarvam AI) for improving guidance and support.

Payment information

• Transaction details processed by our payment partner, Razorpay. Mumicare does not store your full card or bank account details.

2. How We Use Your Information

• To facilitate and deliver teleconsultations and prescription issuance.
• To maintain your health records within the app for your ongoing reference and continuity of care.
• To send appointment reminders, OTP verification (via 2Factor), and service-related communication.
• To respond to queries through our multilingual chatbot.
• To process payments and refunds.
• To comply with applicable medical record-keeping, tax, and other legal obligations.

3. How We Share Your Information

• With the doctor you consult, so they can provide care and maintain clinical records.
• With service providers who help us operate the platform, including Google Meet (video consultations), Razorpay (payments), 2Factor (OTP/verification), and Sarvam AI (multilingual chatbot) — each bound by their own data handling obligations to us.
• When required by law, regulation, or a valid order from a court or government authority.

We do not sell your personal or health information to third parties.

4. Data Security

• Prescriptions and health records are protected using envelope encryption, with access limited to your treating doctor and authorised systems — Mumicare staff cannot access the underlying medical content of your records.
• We use industry-standard safeguards, including access controls and encryption in transit, to protect your data from unauthorised access, alteration, or loss.

5. Data Retention

We retain your health records for as long as your account is active and for the period required under applicable medical record-keeping regulations thereafter. You may request deletion of your account, subject to records we are legally required to retain.

6. Your Rights

• Access and receive a copy of your personal and health data held with us.
• Request correction of inaccurate or incomplete information.
• Withdraw consent for processing (e.g., chatbot data use) where consent is the basis for processing, without affecting past processing already carried out.
• Request erasure of your account data, subject to legal retention requirements for medical records.
• Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity, as provided under the DPDP Act.

To exercise these rights, contact our Grievance Officer using the details at the end of this policy.

7. Children's and Dependents' Data

Where a parent or legal guardian registers a minor or dependent for care, the guardian is responsible for the accuracy of the information provided and for exercising data rights on the dependent's behalf.

8. Cookies and Similar Technologies

Our website and app may use cookies or similar technologies to remember preferences, keep you signed in, and understand usage patterns. You can control cookie settings through your browser or device.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the app or website. Continued use of the Services after such notice constitutes acceptance of the revised policy.

10. Grievance Officer and Contact

For privacy questions, data requests, or grievances, contact Mumicare through the app's support section or write to our registered office (Mumicare Private Limited, DIPP226589), addressed to the Grievance Officer.