Privacy Policy
Last updated: 22 March 2026
1. Introduction
Chikitsamitra (“we”, “our”, or “us”) operates the Chikitsamitra service (the “Service”). This Privacy Policy describes how we collect, use, store, and protect information when you use the Service.
By logging in or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
2. Information We Collect
We may collect:
a. Basic Account information
User ID, Name, Date of Birth, Mobile Number, Email ID, Address and other details will be collected when you log in to your account.
This information is already available in the official employee database of NMPA and is retrieved at the time of login using the registered mobile number and OTP authentication. No additional personal data is collected beyond what is required for identification and service delivery.
b. Medical & Request-Related Data
- Prescription documents (PDF/JPEG)
- Medicine request details
- Delivery information
These are submitted by users to facilitate medicine requests and related services.
c. Health Information
- Basic health/sickness details entered by the user
This information is used only for consultation purposes, such as:
- Suggesting appropriate hospitals
- Recommending consultation timing
- Supporting referral processes
Usage data
Log-in times, session information, and similar data used for security and to improve the Service.
3. How We Use Your Information
We use the information we collect to:
- Authenticate you and manage your access to the Service.
- Operate, secure, and improve the Service.
- Comply with legal and regulatory obligations and respond to lawful requests.
- Investigate and prevent misuse, fraud, or security incidents.
- Send you account-related communications (e.g. password set-up or reset).
4. Data Security
We implement technical and organizational measures to protect your data, including encryption of data in transit and at rest where appropriate. Access to the Service is restricted to authorized users. You are responsible for keeping your login credentials confidential and for all activity under your account.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share or disclose information where necessary to operate the Service, with service providers who assist us under strict confidentiality and security obligations, or when required by law or to protect rights and safety.
- Personal and medical data is not shared with unauthorized third parties.
- Health-related information is shared only with authorized referral doctors for consultation purposes.
- Data may be shared with authorized administrative departments strictly for operational and compliance requirements.
6. Retention
We retain your account and usage data for as long as your account is active and as needed for legal, security, and operational purposes. When data is no longer required, it is deleted or anonymised in line with applicable requirements.
7. Your Rights
Depending on applicable law, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise these rights or ask questions about your data, please contact your organisation’s designated contact or administrator.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised when changes are made. Continued use of the Service after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
9. Contact
For questions about this Privacy Policy or our data practices, please contact your organisation’s administrator or the designated contact for Chikitsamitra.