Privacy Policy

Last updated: April 2026

Your privacy matters. This Policy explains what data we collect, how we use it, and the controls you have over it.

1. Information We Collect

Account Information

When you register, we collect your name, email address, role (Patient, Doctor, or Admin), and any profile details you provide.

Health Records

Health data you upload — including vitals, lab reports, prescriptions, vaccination history, and medical notes — is stored securely and is accessible only to you and authorised healthcare providers you explicitly share it with.

Usage Data

We collect anonymised usage information (pages visited, features used, error logs) to improve the platform. This data is never linked to your identity.

Device & Technical Data

IP address, browser type, device identifiers, and session tokens are collected for security and fraud prevention purposes only.

2. How We Use Your Information

• To provide, maintain, and improve the platform.
• To authenticate your identity and secure your account.
• To send medication reminders and appointment notifications you have opted into.
• To respond to your support requests.
• To comply with legal obligations.

We do not sell, rent, or share your personal or health data with advertisers or unaffiliated third parties.

3. Data Storage & Security

All data is stored on Google Firebase infrastructure with industry-standard encryption at rest and in transit (TLS 1.2+). Access to production data is restricted to authorised personnel only, and all access is logged and audited.

4. Data Sharing

We may share data only in the following circumstances:

• With your consent — e.g., when you share records with a doctor on the platform.
• Service providers — trusted third-party vendors (e.g., cloud infrastructure) who process data on our behalf under strict data-processing agreements.
• Legal requirements — when required by law, court order, or government authority.

5. Your Rights

• Access — Request a copy of all data we hold about you.
• Correction — Update inaccurate or incomplete information.
• Deletion — Request deletion of your account and associated data.
• Portability — Export your health records in a standard format.
• Withdraw consent — Opt out of non-essential communications at any time.

To exercise any of these rights, contact us or email privacy@shishumaacare.com.

6. Cookies

We use essential cookies for authentication (session tokens) and preferences (e.g., theme). We do not use advertising or tracking cookies.

7. Children's Privacy

Shishu Maa Care is not directed at children under 13. We do not knowingly collect data from children without verified parental consent. If you believe a child has provided us data, contact us immediately.

8. Changes to This Policy

We may update this Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of the platform constitutes acceptance of the revised Policy.

9. Contact

Privacy questions or concerns? privacy@shishumaacare.com or use our contact form.