Privacy Policy

1. Introduction

Gramin Sanstha ("we", "our", "us"), a Section 25 registered non-profit organization (CIN: U93000PN2013NPL147984), is committed to protecting the privacy of all users of our mobile applications — Gramin Doctor (com.grahmin.doctor), Gramin Patient (com.grahmin.patient), and Gramin Sevak (com.grahmin.volunteer), collectively referred to as the "Apps".

By using any of our Apps, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Apps.

2. Information We Collect

The data we collect depends on which app you use. Below is a detailed breakdown:

3. How We Use Your Information

We use the information collected exclusively for the following purposes:

• Healthcare Delivery — To provide free medical consultations, prescriptions, and health tracking through the Gramin network of 40+ partner doctors
• Digital Health Cards — To generate and maintain QR-coded Digital Health Cards for beneficiaries
• OPD Management — To enable doctors to look up patient history, write diagnoses, and prescribe from the standardized formulary
• Medicine Inventory — To track medicine stock levels and facilitate timely refills across the network
• AI Health Guidance — To process symptom descriptions and provide general health guidance through the AI Health Assistant (no data is used for AI training)
• Beneficiary Registration — To onboard new members into the Gramin healthcare network via the volunteer app
• Analytics & Reporting — To generate aggregate, anonymized reports on healthcare delivery (e.g., OPD volumes, disease trends) for operational improvement
• Communication — To send health alerts, appointment reminders, or system notifications

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to any third party — ever.

Your data may be shared only in the following limited circumstances:

• Within the Gramin Network — Your health records are accessible to your authorized Gramin Sanstha partner doctor during OPD consultations. Volunteers can view basic registration data for members they registered.
• Gramin Sanstha Administration — The Gramin admin has access to operational data (aggregate statistics, inventory levels, and beneficiary records) for program management.
• AI Service Providers — When you use the AI Health Assistant, your symptom description (text only) may be sent to a third-party AI provider (e.g., OpenAI, Google) for processing. No personally identifiable information (name, ID, phone) is included in these requests.
• Legal Requirements — We may disclose information if required by law, court order, or governmental authority.

5. Data Storage & Security

We implement industry-standard measures to protect your data:

• Encryption in Transit — All data transmitted between the apps and our servers is encrypted using HTTPS/TLS 1.3
• Secure Authentication — OTP-based login (Patient & Volunteer apps) and credential-based login with MCI verification (Doctor app), using JWT tokens
• Role-Based Access Control — Users can only access data relevant to their role (doctor, patient, volunteer, admin)
• Server Security — Our backend infrastructure is hosted on secure, India-region servers with standard security configurations
• Local Storage — Authentication tokens and cached data are stored securely on your device using platform-standard secure storage (SharedPreferences with encryption)

While we take all reasonable precautions, no method of electronic storage or internet transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal and health information for as long as you are an active member of the Gramin Sanstha healthcare network, and for a reasonable period thereafter to fulfill our obligations and comply with legal requirements.

• Health Records — Retained for a minimum of 5 years from the last OPD visit, in accordance with Indian medical record-keeping guidelines
• Account Data — Retained until you request deletion or your account is deactivated
• AI Chat History — Not permanently stored. Conversations with the AI Health Assistant are session-based and not linked to your permanent record

7. Your Rights

As a user of our Apps, you have the following rights:

• Access — You can view your personal and health data within the app at any time
• Correction — You can request corrections to inaccurate personal information by contacting your Gramin volunteer or the admin
• Deletion — You can request deletion of your account and associated data by contacting us at the details below. Please note that certain health records may need to be retained for legal/medical compliance
• Portability — You can request a copy of your health records in a standard format
• Withdraw Consent — You can stop using the apps at any time. Logging out will clear locally stored session data

To exercise any of these rights, please contact us using the information provided in Section 11 below.

8. Children's Privacy

Our Apps are not directed at children under the age of 18. The Gramin Doctor and Gramin Sevak apps are intended for authorized healthcare professionals and volunteers only. The Gramin Patient app is intended for adult beneficiaries of the Gramin Sanstha network.

We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal data without parental consent, we will take steps to delete such information promptly.

9. App Permissions

Our apps request only the minimum permissions necessary for their functionality:

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• We will update the "Effective Date" at the top of this page
• We may notify you through the app or via other communication channels
• Your continued use of the Apps after changes constitutes acceptance of the updated policy

We encourage you to review this page periodically for the latest information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: