Privacy Policy

1. Introduction

AarogyaX ("we", "our", or "us") is committed to protecting the privacy of our users and their patients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clinic management system.

By using AarogyaX, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Clinic Information

When you register, we collect your clinic name, address, contact details, and staff member information (names, email addresses, phone numbers, and assigned roles).

Patient Data

Patient data entered into AarogyaX — including names, contact information, medical histories, prescriptions, visit records, and billing information — is stored securely on your behalf. Your clinic is the data controller for patient information; AarogyaX acts as the data processor.

Usage Data

We collect anonymous usage analytics to improve our service, including pages visited, features used, browser type, and device information. This data cannot be used to identify individual patients.

3. How We Use Your Information

• To provide and maintain the AarogyaX service
• To manage your account and clinic settings
• To send appointment-related notifications via WhatsApp Business Platform (confirmations, reminders)
• To send transactional emails (account creation, password resets)
• To provide customer support
• To improve our product and develop new features
• To send service updates and important notices
• To detect, prevent, and address technical issues

4. Data Storage and Security

All data is hosted on secure servers located in India. We employ industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Automated backups and disaster recovery procedures
• Secure authentication with encrypted password storage

5. Patient Data Handling

AarogyaX takes patient data privacy extremely seriously. Your clinic owns all patient data entered into our system. We:

• Never sell patient data to third parties
• Never use patient data for advertising or marketing
• Only access patient data when required for technical support, with your permission
• Allow you to export or delete all patient data at any time
• Comply with applicable Indian healthcare data regulations

6. Data Sharing and Disclosure

We do not share your data with third parties except in the following circumstances:

• Service Providers: We use trusted third-party services (cloud hosting, WhatsApp Business API) that process data on our behalf under strict confidentiality agreements.
• Legal Requirements: We may disclose data if required by Indian law, court order, or government authority.
• Safety: If necessary to protect the safety of our users or the public.

7. WhatsApp Business Platform

AarogyaX uses the WhatsApp Business Platform (powered by Meta) to send appointment-related notifications to patients, such as booking confirmations and appointment reminders. This is done on behalf of the clinic and only with the patient's consent.

When a notification is sent via WhatsApp, we share only the minimum data required to deliver the message — specifically the patient's phone number and appointment details. This data is transmitted securely through Meta's WhatsApp Business API and is subject to Meta's Business Messaging Policy.

We do not share user or patient data with third parties for marketing or advertising purposes. WhatsApp is used strictly for transactional, appointment-related communication.

8. Cookies and Tracking

AarogyaX uses essential cookies required for the service to function (session management, authentication). We may use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

9. Your Rights

You have the right to:

• Access your data and request a copy
• Correct any inaccurate information
• Request deletion of your account and data
• Export your data in a standard format
• Withdraw consent for data processing

10. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your data within 30 days, except where we are required by law to retain certain records.

11. Children's Privacy

AarogyaX is a professional clinic management tool intended for use by healthcare professionals. We do not knowingly collect personal information directly from children. Patient records for minors are entered and managed by authorized clinic staff.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the AarogyaX application. Continued use of the service after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: aarogyaxone@gmail.com