Privacy Policy

Last updated: July 2026

RapidVaidya Health Pvt. Ltd. ("RapidVaidya," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and healthcare services.

1. Information We Collect

Personal Information

• Name, email address, phone number, and postal address
• Date of birth, gender, and government-issued identification numbers
• Payment information (processed securely via third-party payment gateways)
• Emergency contact details

Health Information

• Medical history, prescriptions, and treatment records
• Diagnostic test results and health reports
• Information provided during consultations and care sessions
• Insurance details (if provided)

Technical Information

• Device type, operating system, and browser information
• IP address and approximate location (for service matching)
• App usage data, session duration, and interaction patterns
• Crash logs and performance diagnostics

2. How We Use Your Information

• Service Delivery: To match you with healthcare professionals, schedule appointments, and deliver care services
• Communication: To send appointment confirmations, care updates, and service notifications
• Improvement: To analyze usage patterns and improve our platform, services, and user experience
• Safety: To verify healthcare professional credentials and ensure patient safety
• Legal Compliance: To comply with applicable healthcare regulations and legal obligations
• Research: Anonymized and aggregated data may be used for healthcare research and analytics

3. Data Sharing

We may share your information with:

• Healthcare Providers: Nurses, doctors, and specialists assigned to your care, only the information necessary for service delivery
• Partner Hospitals & Labs: When you book services through partner institutions
• Payment Processors: To process transactions securely (they do not have access to your health data)
• Legal Authorities: When required by law, court order, or to protect safety
• Service Providers: Cloud hosting, analytics, and communication providers who process data on our behalf under strict confidentiality agreements

We do NOT sell your personal or health data to any third party for marketing or advertising purposes.

4. DPDP Act 2023 Compliance

RapidVaidya is fully compliant with India's Digital Personal Data Protection Act, 2023. As a Data Fiduciary, we:

• Obtain clear, informed consent before collecting personal data
• Process data only for the specific purpose for which consent was given
• Store data only as long as necessary for the stated purpose
• Implement reasonable security safeguards to prevent data breaches
• Notify the Data Protection Board and affected individuals in case of a data breach
• Do not process data of children (under 18) without verifiable parental consent
• Have appointed a Data Protection Officer (details below)

5. Your Rights

Under the DPDP Act 2023, you have the right to:

• Access: Request a summary of your personal data and how it is being processed
• Correction: Request correction or updating of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent at any time (this does not affect prior lawful processing)
• Grievance Redressal: Lodge a complaint with our Data Protection Officer or the Data Protection Board of India

6. Data Retention & Security

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Health records are retained for a minimum of 3 years as per Indian healthcare regulations.

We employ industry-standard security measures including:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Multi-factor authentication for all internal systems
• Regular security audits and penetration testing
• Role-based access controls with principle of least privilege
• Data stored exclusively on servers located within India

7. Cookies & Tracking

Our website uses essential cookies for functionality and analytics cookies to understand how visitors interact with our site. You can manage cookie preferences through your browser settings. Our mobile app uses device identifiers for push notifications and analytics, which you can disable through your device settings.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification. Continued use of our services after changes constitutes acceptance of the updated policy.

9. Contact Us

For privacy-related queries, data requests, or to exercise your rights: