1. Introduction
Alogeriatric ("we," "our," or "us") operates the Alogeriatric mobile application and this website (collectively, the "Service"). Given the sensitive nature of the medical and health data our Service processes, we are deeply committed to protecting your personal data.
This Data Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.
By using our Service, you consent to the practices described in this Policy. If you do not agree, please discontinue use of the Service.
Data Controller: Alogeriatric, Uttar Panchanna Gram VIP Nagar, South 24 Parganas, West Bengal, India – 700100.
2. Data We Collect
We collect the following categories of personal data:
2.1 Personal Information
- Full name, date of birth, gender
- Email address and phone number
- Home address (used for scheduling doctor visits)
- Profile photograph (optional)
- Language preference
2.2 Medical & Health Information (Sensitive Personal Data)
This is sensitive personal data under Indian law. We collect it solely to provide appropriate healthcare services:
- Medical conditions (e.g., Diabetes, Hypertension, Heart Disease, Asthma)
- Health overview and general health status
- Appointment notes and visit records created by your assigned doctor
- Prescription-related information shared with your doctor
- Any health information you voluntarily provide in the app
2.3 Payment Information
Subscription payments are processed by our Payment Gateway partner. We do not store your raw card or bank account details. We receive only:
- Transaction status (success, pending, failed)
- Transaction ID and timestamp
- Plan name and duration purchased
Payment data is handled under our payment partner's own privacy policy.
2.4 Technical & Device Information
- IP address, device type, operating system version
- App version and usage logs
- Crash reports and diagnostic data
2.5 Location Data (Optional)
Location is requested solely for address autofill and care logistics. You may deny location access; address entry will then be manual.
3. How We Use Your Data
We use your data for the following purposes:
- Service delivery: scheduling and managing monthly doctor visits, processing subscriptions, facilitating video consultations (coming soon).
- Healthcare continuity: sharing relevant medical data with your assigned doctor to enable personalised, informed care.
- Payments: initiating and verifying transactions via our Payment Gateway partner.
- Communication: appointment reminders, subscription updates, and important service announcements.
- Safety & security: fraud prevention, abuse detection, and safeguarding users.
- Legal compliance: meeting our obligations under Indian law, including medical records regulations and tax requirements.
- Service improvement: aggregated, anonymised analytics to improve the app. No identifiable data is used for this purpose.
We do not use your personal or medical data for marketing to third parties, and we do not sell your data under any circumstances.
5. Data Retention
We retain your data for the following periods:
- Account and profile data: Retained while your account is active. Upon account deletion, personal identifiers are removed within 30 days (subject to our Account Deletion Policy regarding medical records).
- Anonymised medical records: Retained for a minimum of 7 years after the last interaction, as detailed in our Account Deletion Policy.
- Payment records: Retained for 7 years in compliance with the Income Tax Act, 1961 and applicable GST regulations.
- Session and authentication data: Retained for 90 days, then automatically purged.
- Crash and diagnostic logs: Retained for 30 days.
6. Security
We implement industry-standard security measures to protect your data:
- Encryption in transit: All data transmitted between the app and our servers uses TLS/SSL encryption.
- Encryption at rest: Data stored in Our Cloud Infrastructure Provider is encrypted at rest using AES-256.
- Access controls: Row-level security policies ensure doctors can only access the data of patients assigned to them. Internal staff access is restricted on a need-to-know basis.
- Authentication: Login is handled via Google Sign-In using OAuth 2.0.
- Audit logging: Access to sensitive medical data is logged and monitored.
While we take all reasonable precautions, no system is completely immune to security risks. In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.
7. Your Rights Under the DPDP Act 2023
Under India's Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:
- Right to access: Request a summary of the personal data we hold about you and how it is being used.
- Right to correction: Request correction of inaccurate or incomplete personal data. You can update most information directly in the app.
- Right to erasure: Request deletion of your personal data (subject to the medical record anonymisation explained in our Account Deletion Policy and our legal retention obligations).
- Right to grievance redressal: Lodge a complaint with our Grievance Officer (see Section 9) or, if unresolved, with the Data Protection Board of India.
- Right to nominate: Nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.
To exercise any of these rights, email support@alogeriatric.comwith the subject line "Data Rights Request." We will respond within 30 days.
8. Changes to This Policy
We may update this Data Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we do, we will:
- Update the "Last Updated" date at the top of this page.
- Notify registered users via email or in-app notification for material changes.
Your continued use of the Service after changes are posted constitutes your acceptance of the updated Policy.
9. Grievance Officer
As required under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated a Grievance Officer to address concerns related to this Policy and the use of your data:
Name: Dr. Partha Mondal
Designation: Grievance Officer
Email: partha94mondal@gmail.com
Response time: Within 48 hours of receiving your complaint
Resolution time: Within 30 days per IT Rules 2021
You may also refer unresolved complaints to the Data Protection Board of India once it is constituted under the DPDP Act 2023, or to the Ministry of Electronics and Information Technology (MeitY) under existing IT Act provisions.
10. Contact Us
For any questions about this Data Privacy Policy or your personal data:
Alogeriatric
Uttar Panchanna Gram VIP Nagar, South 24 Parganas, West Bengal, India – 700100
support@alogeriatric.com