Privacy Policy & Health Data Security

1. Introduction & Scope

This Privacy Policy applies to the DoctorPlus mobile application, web portals, and associated digital services operated by DoctorPlus Technologies Private Limited ("DoctorPlus", "we", "us", or "our"). It describes how we collect, use, store, process, and protect your personal information when you access our Digital Health Card services, book verified doctor appointments, interact with 850+ cashless partner hospitals, view medical vlogs, or contact emergency trauma response units.

By downloading the DoctorPlus App, generating your Digital Health Card, or using any DoctorPlus service, you consent to the data collection and processing practices described in this Policy.

2. Information We Collect

Depending on whether you register as a patient, family primary member, healthcare provider, or hospital admin, DoctorPlus collects the following categories of data:

• Identity & Contact Details: Full legal name, verified mobile phone number (authenticated via one-time password / OTP), email address, and home location.
• Family Health Profile: Registered family members' names, relationship to primary user (spouse, child, parent), dates of birth, blood groups (A+, B+, O+, AB+, etc.), and assigned user avatars.
• Digital Health Card Data: Auto-generated unique Member ID (e.g. DP-2026-XXXX), validity period (5-year duration), cashless entitlement tier, and QR verification codes.
• Clinical & Appointment Data: Selected medical speciality, designated doctor/consultant, preferred appointment slot, token number, consultation history, rescheduling logs, and digital fee receipts.
• Hospital & Clinical Provider Data: Hospital legal name, institutional address, verified Latitude & Longitude GPS coordinates, contact email/phone, facility banner and logo, clinical specialities, cashless OPD clearance status, 24*7 emergency trauma toggles, doctor roster credentials, and Head of Department (HOD) designations.
• Technical & Device Data: Device model, operating system version, push notification tokens, IP address, and app crash analytics to ensure seamless 24x7 emergency connectivity.

3. How We Use Your Information

DoctorPlus processes your information solely for certified healthcare management and patient support services, including:

4. Information Sharing & Disclosure

DoctorPlus adheres to a strict zero unauthorized third-party sale policy. Your data is only shared with authorized participants within our healthcare delivery network:

• Accredited Hospital Partners & Cashless Desks: When you present your Digital Health Card or book an appointment, your Member ID, patient name, and blood group are shared with the receiving hospital desk to verify cashless eligibility and queue admission.
• Consulting Specialists & HODs: Your relevant appointment token and family member relation are disclosed to the consulting physician to facilitate professional medical consultation.
• 24x7 Emergency Response Services: In acute emergencies where you contact our hotline (1800-419-PLUS), caller location and registered emergency contacts may be shared with nearest ambulance trauma dispatchers.
• Statutory Authorities: Disclosures made solely when mandated by applicable law, court summons, or regulatory authorities for epidemic reporting or judicial compliance.

5. Data Security & Encryption

We employ military-grade 256-bit AES encryption in transit (TLS 1.3) and at rest across all DoctorPlus cloud servers. Sensitive health card records and family blood group passes are stored within secure ISO 27001 and HIPAA-compliant data centers physically located in India. Access to patient management consoles is restricted via role-based access control (RBAC) and multi-factor authentication.

6. Your Rights & Family Health Card Controls

Under applicable privacy laws, you possess the right to:

• Access & Download: Export your complete Digital Health Card and family passes as high-resolution PDF or Image (PNG/JPG) directly within the mobile app.
• Update Family Profiles: Modify linked dependents, update emergency contact numbers, or change profile avatars at any time.
• Delete or Anonymize: Request full deactivation of your account and deletion of historical records by submitting a query ticket in the app.
• Notification Preferences: Opt out of promotional newsletters while retaining critical appointment reminders and emergency alerts.