Privacy Policy

MediReach stores patient and clinic information solely to provide clinical record-keeping, prescription, and clinic-management services.

What we collect: patient demographics and vitals you enter, consultation records and prescriptions you create, medical certificates you issue, fee and dues bookkeeping you record, scanned reports you upload, and your account, subscription, and billing details. If you create a Digital Visiting Card, the details you add to it are published on a public page you choose to share — it never contains any patient or clinical data.

How consultations are processed: on the Pro plan, your voice dictation is transcribed and structured with AI to fill clinical fields; on the Starter plan no voice or AI is used — entries are typed and expanded locally on your device. In both cases nothing is saved until the doctor reviews and confirms it.

Retention: patient and visit data — including consultation records, prescriptions, and dues — is automatically deleted after a maximum of one year, in line with the data-minimisation principle of India's DPDP Act. Medical certificates are legally significant documents that an authority, employer, or court may ask the issuing doctor to produce, so a certificate record and its PDF are retained longer — for three years from issue — before automatic deletion.

Your rights: you may request access, correction, or erasure of personal data, and withdraw consent at any time, by contacting our grievance channel below. Withdrawal is as easy as giving consent.

Processors: we use vetted vendors (cloud database, media storage, transcription, AI structuring, messaging, payments) under appropriate data-protection terms. We remain the responsible Data Fiduciary. We do not sell your data or your clinic's collections.

Grievances: email admin.medireach@gmail.com. Complaints are tracked to resolution.