Privacy Policy

We may collect information about you in the following ways:

Account & Profile Data

Personally identifiable information such as your name, email address, phone number, role (patient, doctor, or clinic staff), and clinic affiliation that you provide when you register or are invited to the platform.

Health & Medical Information

When you use our healthcare services, we process health-related information including medical history, consultation notes, prescriptions, diagnostic reports, and appointment records. This information is treated as confidential and is accessible only to authorized healthcare providers involved in your care.

Billing Information

Information related to invoices, payments, and receipts processed through the platform. Card and payment-instrument details are handled by our payment processors and are not stored on our servers.

Automatically Collected Data

Information about your device, including IP address, browser type, operating system, referring URLs, and pages visited, collected through cookies and similar technologies.

We use the information we collect to:

• Create and manage your account and clinic workspace
• Enable consultations, prescriptions, and medical record management
• Schedule appointments and send reminders and related notifications
• Process billing, invoices, and payments
• Provide customer support and respond to your requests
• Monitor, secure, and improve the performance and reliability of the platform
• Comply with legal, regulatory, and clinical record-keeping obligations

We may share your information in the following situations:

We use administrative, technical, and physical safeguards designed to protect your personal and medical information. While no method of transmission or storage is perfectly secure, we work to protect your data using measures including:

• Encryption of data in transit (TLS) and at rest
• Secure password hashing and storage
• Role-based access controls and authentication
• Regular security reviews and testing
• Practices aligned with healthcare data-protection standards

We retain medical records for as long as required under applicable clinical record-keeping laws and regulations. Account and profile data is retained for as long as your account is active, plus a period of 90 days thereafter, to allow for account reactivation and to comply with our legal obligations.

After the applicable retention period ends, we securely delete or anonymize your information. Where deletion is not immediately possible (for example, from backup archives), we isolate the data from further processing until deletion is possible.

In the event of a personal data breach affecting your information, we will notify affected users and the Data Protection Board of India in the form and manner required under applicable law, including the Digital Personal Data Protection Act, 2023. We will also take prompt and reasonable steps to contain, assess, and remediate the breach.

Depending on your location, you may have certain rights regarding your personal information:

We process personal data of users in India in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws. This includes processing personal data only for lawful purposes with your consent or for legitimate uses recognized under the DPDP Act, and honoring your rights as a Data Principal.

For users in the European Union and other jurisdictions with similar data protection laws, we process personal data in line with applicable regulations such as the GDPR. If you have concerns about how your data is processed, you have the right to lodge a complaint with the Data Protection Board of India or your local data protection authority.

Accounts on checkup.care are intended for patients aged 18 and over, healthcare providers, and clinic staff. Medical records for minor patients are created and managed by their healthcare providers or by a parent or legal guardian acting on their behalf. We do not knowingly allow individuals under 18 to create their own accounts.

We use cookies and similar technologies to operate and improve the platform. You can control cookie settings through your browser, though this may affect functionality. We use cookies for:

• Session management and user authentication
• Remembering your preferences
• Analytics and performance monitoring

On our public website pages, and only if you accept, we use Google Analytics to understand how visitors find and use the site. It is never loaded inside the platform itself, where patient information is handled. You can change your choice at any time.

Change analytics choice

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by updating the "Last updated" date above. Your continued use of the platform following any changes constitutes acceptance of the revised policy.

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made thereunder, the contact details of our Grievance Officer are provided below. If you have any grievance regarding the processing of your personal data, you may contact:

We will acknowledge and resolve grievances within the timelines prescribed under applicable law.

If you have questions or comments about this Privacy Policy, please contact us at:

This Privacy Policy is provided for informational purposes. For the most current and complete privacy information, please contact us directly.