Effective date: To be set on publication
TrackMyDoctor provides a clinic OPD management platform. For privacy queries, contact privacy@trackmydoctor.in. (Registered entity name, address, and GSTIN to be added after company incorporation.)
Clinic information (name, address, contact, registration number); user account data (name, username, email, mobile, role); patient data (name, gender, date of birth, contact, visit history); health data (diagnoses, prescriptions, visit notes); usage data (login times, actions); and technical data (IP address, browser, device).
To provide the OPD management service; to send login credentials and system notifications; for billing and subscription management; for security monitoring and fraud prevention; and for service improvement using aggregated, anonymised data only — never individual patient data.
Patient health information is processed on behalf of clinics (our customers), who are the data controllers for their patients. TrackMyDoctor does not use patient data for any purpose other than providing the service to the clinic, and does not sell, licence, or share patient data with any third party for marketing or commercial purposes.
We share stored data only with infrastructure providers that operate the service: Supabase (database hosting), Vercel (application hosting), and ZeptoMail / Zoho (email delivery); and with legal authorities where required by law. We do not share data with advertisers, data brokers, or analytics companies.
On subscription expiry: days 0–7 — data download window; days 8–127 — data retained; day 128 onward — permanent deletion with no recovery.
Data is encrypted in transit (HTTPS/TLS 1.2+) and at rest. Access is role-based; session tokens are signed and expire after 24 hours; audit logs are maintained for sensitive operations.
You may request access to, correction of, or deletion of your personal data (subject to legal retention requirements). Contact privacy@trackmydoctor.in; we respond within 30 days.
TrackMyDoctor uses a single signed session cookie (tmd-auth) for authentication. No tracking, advertising, or analytics cookies are used.
TrackMyDoctor is a B2B platform for clinics. Patient profiles may include minors when registered by the clinic on the patient's behalf. We provide no direct services to children.
We provide notice before material changes. Continued use after the effective date constitutes acceptance.
Privacy queries: privacy@trackmydoctor.in