Privacy Policy

VidhyaCare is operated by VidhyaCare Health Services Pvt Ltd, 311 Alok Nagar, Musakhedi, Indore, Madhya Pradesh 452001, India (“VidhyaCare”, “we”, “us”). We are the Data Fiduciary for the personal data described here under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). Doctors on VidhyaCare are independent registered medical practitioners; for the clinical records they create about you, they also have duties under medical law.

We collect only what we need to run the service:

• Account details — name, email, mobile number and a password (stored only as a one-way hash).
• Health profile — date of birth, gender, blood group, height, weight, conditions, allergies and an emergency contact, if you choose to add them.
• Health records you upload — lab reports, scans and documents for you and the family members you add.
• Consultation data— appointments, the reason you give for a Live OPD call, call start and end times, prescriptions and the doctor's notes.
• Medicine reminders — the medicines, doses and times you set, and the doses you mark as taken.
• Location— only when you tap “Use my location” to find nearby labs, and the addresses you save for home collection.
• Payments — amounts, order and payment references and your VidhyaCare Wallet history. Card, UPI and bank details are entered with our payment partner Razorpay; we never see or store your card number or UPI PIN.
• For doctors — KYC documents (medical registration, degree, identity), clinic details and a payout bank account. The account number is passed to RazorpayX for payouts; we keep only its last 4 digits.
• Technical data — device and browser information and server logs used for security and troubleshooting.

Live OPD video calls are carried in real time over an encrypted connection through our video provider, LiveKit. Each call uses a private room that only you and your doctor can join. VidhyaCare does not record the audio or video of your consultation. We keep the call's metadata (who, when, how long) and any prescription or notes the doctor writes.

• To create your account, book appointments, connect Live OPD calls and arrange lab sample collection.
• To show your doctor the information they need to treat you, and to give you their prescriptions.
• To send reminders, booking confirmations, receipts and important account notices.
• To take payments, run your wallet and pay doctors their earnings.
• To verify doctors and keep the platform safe from fraud and misuse.
• To meet our legal obligations, including tax and medical-record rules.

We do not sell your personal data and we do not use your health data for advertising.

• Doctors you book or consult — your name, contact details and the health information relevant to that consultation.
• Labs you book — your name, phone, collection address and the tests you chose.
• Service providers who process data for us under contract: cloud hosting and storage (Amazon Web Services), payments and payouts (Razorpay and RazorpayX), video (LiveKit) and email delivery.
• Authorities, when the law requires it, or to protect someone's life or safety.

• All traffic between your device and VidhyaCare is encrypted (HTTPS/TLS).
• Uploaded files are kept in private storage and opened only through short-lived signed links.
• Passwords are hashed, sessions expire, and signing in on a new device ends older sessions.
• Access to health data inside VidhyaCare is limited to the people and systems that need it.

You can delete your account from Settings › Privacy. Deletion takes effect after a 14-day grace period (so a mistaken request can be undone). After that we permanently erase your profile, family members, uploaded records and their files, appointments and medicine reminders.

Some records must be kept for longer by law — for example payment and tax records, and consultation and prescription records that doctors are required to maintain. These are kept only as long as the law requires and are not used for anything else.

Under the DPDP Act you can:

• ask what personal data we hold about you and how it is used;
• correct or update it — most of it directly in your profile;
• have it erased, by deleting your account;
• withdraw consent you have given (this may stop parts of the service from working);
• nominate someone to exercise these rights if you are unable to; and
• raise a grievance with us, and then with the Data Protection Board of India.

To use any of these rights, email contact@vidhyacare.com from your registered email address.

VidhyaCare accounts are for adults. A parent or legal guardian can add a child as a family member and manage their records and appointments; by doing so they give consent on the child's behalf.

Grievance Officer, VidhyaCare Health Services Pvt Ltd, 311 Alok Nagar, Musakhedi, Indore, M.P. 452001 · Email contact@vidhyacare.com · Phone +91 826-957-8066. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

If we change how we handle your data in a meaningful way, we will tell you in the app or by email before the change takes effect. The date at the top shows when this policy was last updated. See also our Terms of Service.