<p><em>This is a working draft. Have it reviewed by a lawyer before you launch — it is not legal advice.</em></p>
<h2>What we collect</h2>
<ul>
<li><b>Your mobile number.</b> Used to sign you in and to bridge calls. It is never shown to a doctor.</li>
<li><b>A display name you choose.</b> This is what the doctor sees. It does not have to be your real name, and we do not ask for one.</li>
<li><b>What you tell a doctor.</b> Messages and consultation notes are encrypted in our database.</li>
<li><b>Payment records.</b> Amounts and references. Card details never touch our servers — our payment gateway handles them.</li>
</ul>
<h2>What the doctor can see</h2>
<p>Your display name, a reference code, your age band, city and the language you prefer. Not your name, not your number, not your email. If a doctor asks our team to unmask a patient for a clinical safety reason, the request and the reason are recorded and the access is logged.</p>
<h2>What we never do</h2>
<ul>
<li>We do not sell your data. Not to advertisers, not to pharmacies, not to insurers.</li>
<li>We do not name the health category in any SMS, email or bank statement.</li>
<li>We do not share your identity with a doctor unless you ask us to.</li>
</ul>
<h2>How long we keep things</h2>
<p>Medical records are retained as required for a registered practitioner to defend their clinical decisions. Payment records are kept for statutory accounting periods. You can ask us to delete everything else.</p>
<h2>Your choices</h2>
<p>Write to us to get a copy of your data, correct it, or ask for deletion. Deleting your account removes your profile and messages; it cannot remove a prescription already issued, since that is a medical record.</p>
<h2>Contact</h2>
<p>Email our grievance officer at the support address in the footer. We respond within the timelines set out in India&rsquo;s data protection rules.</p>