Legal

Privacy Policy

Draft under legal review. This document describes how Preaxa works today and will be finalized with counsel before general availability. Questions meanwhile: privacy@preaxa.com.

Short version: your health information exists to prepare your consultation, it is visible only to the doctor you choose, and you stay in control of it.

What we collect

Account: your mobile number (your login), name, year of birth, sex.
Health information you give us: your intake conversation, the docket you approve, reports you upload, follow-up messages.
Consultation records: appointments, prescriptions issued by your doctor, payment records.
Security records: sign-in events and an audit trail of every access to your records.

Why we collect it (purposes)

Preparing your consultation docket — with your explicit consent, taken before your first intake and re-taken if you withdraw it.
Delivering the consultation: booking, payment, video, prescription.
Follow-up care you initiate with your doctor.
Legal duties: medical record retention, audit, and grievance handling.

We do not sell your data. We do not use your health information for advertising.

Who can see it

The doctor you consult — and no other doctor, and no "partner". Limited technical processors act on our instructions under contract (cloud hosting, payment processing, and, when enabled, SMS/WhatsApp delivery and video infrastructure). AI assistance is provided via an API that does not use your data to train models.

Your rights (and where to use them)

Right	How
See your data	Account → Privacy → Download my data (instant JSON export)
Correct it	Account → Your details; docket corrections happen before you approve
Withdraw consent	Account → Privacy → Withdraw consent (stops new intakes immediately)
Erase it	Account → Privacy → Request deletion — processed within medical record-retention rules, confirmed on your number
Complain	Grievance process, then the Data Protection Board of India

Security & retention

Data is encrypted in transit and at rest, hosted in India, and every access to your records is logged. Sign-in uses one-time codes; there are no passwords. Medical records are retained for the period required of clinical records under applicable law; the exact schedule will be published here after counsel review.

Grievances

privacy@preaxa.com · grievance process.