Privacy Policy

AYUSHUB Healthcare Technologies Private Limited ("AYUSHUB", "we", "our", or "us") values the trust you place in us when sharing your personal and healthcare information. This Privacy Policy details the types of information we collect, how it is safeguarded, the purposes for which it is processed, and your rights concerning your data.

This policy applies to all visitors, registered patients, consulting practitioners, and clinic administrators accessing ayushub.com and related subdomains.

We collect information necessary to facilitate digital healthcare operations, verified practitioner directories, teleconsultations, and product orders.

Data collection is conducted transparently, with your explicit consent or in direct fulfillment of healthcare and platform transactions you initiate.

When you register for an account, we collect basic contact details, including full name, verified Indian mobile phone number, email address, password hash, and date of birth.

For users signing in through Google Identity Services, we securely receive your authenticated name and email profile token.

To deliver personalized Ayurvedic care, patients may voluntarily provide health profile details such as age, biological sex, primary health concerns, lifestyle habits, dietary preferences, and Prakriti Dosha assessment responses.

This information helps consulting doctors understand your constitution and medical background.

Ayurvedic doctors submit professional credentials during registration, including medical qualifications (BAMS, MD/MS Ayurveda), council registration numbers, state/national council affiliation, years of clinical experience, clinic address, and verification certificates.

Doctor verification files are stored in access-restricted document storage and are only accessible by authorized administrative reviewers.

Clinical consultation data includes booked appointment dates, consultation notes, diagnosis summaries, and digital prescriptions created by your practitioner.

Teleconsultation video and audio streams are encrypted end-to-end. AYUSHUB does not record, intercept, or store real-time video consultation streams between patients and doctors.

When you make payments for consultations, doctor subscriptions, or products, financial transactions are handled directly by RBI-authorized payment processors (such as Razorpay).

AYUSHUB never stores credit card numbers, debit card details, CVVs, or UPI MPINs on our application servers or databases.

To ensure platform security and optimize service performance, our servers log technical metadata such as browser type, operating system, IP address, device model, and error telemetry logs.

Technical metadata is analyzed strictly for performance monitoring, troubleshooting, and fraud prevention.

All information collected is processed for legitimate operational and healthcare purposes to serve you efficiently, including:

1. Establishing and authenticating user identity upon login.

2. Scheduling and facilitating appointments between patients and practitioners.

3. Allowing consulting doctors to view patient health history and generate digital prescriptions.

4. Processing payments and issuing invoices.

Health profile records and clinical data are processed exclusively to enable authorized medical practitioners to conduct consultations and provide follow-up care.

We use appointment details to maintain doctor schedules, prevent double bookings, and facilitate automated appointment reminders via SMS, WhatsApp, or email.

We communicate essential service notifications, including OTP verifications, appointment confirmations, invoice receipts, and administrative alerts.

You may configure communication preferences or opt out of non-essential informational newsletters at any time.

Billing details and transaction identifiers are shared securely with licensed payment gateway partners to authorize and reconcile consultation or subscription fees.

User data is stored securely in carrier-grade cloud database infrastructure compliant with enterprise data protection standards. All stored database files are protected with encryption at rest.

AYUSHUB utilizes enterprise PostgreSQL and Supabase infrastructure equipped with point-in-time recovery, automatic failover, and strict Row Level Security (RLS) enforcement.

We employ robust security measures including Transport Layer Security (TLS 1.3 / HTTPS) for all data in transit, hardened API gateways, and encrypted credential storage.

Access to user information is governed by the principle of least privilege. Only authenticated users with verified roles (Patient, Doctor, or Platform Administrator) can access their respective authorized information.

We enforce strict architectural isolation between doctor and patient records. A consulting doctor can only access health records and prescriptions of patients who have actively booked an appointment or consultation with that specific doctor.

Doctors cannot browse, search, or view the patient lists or clinical records of other practitioners.

AYUSHUB DOES NOT sell, rent, or lease your personal, medical, or contact information to third-party advertisers, pharmaceutical marketers, or data brokers.

Data is shared only in the specific circumstances outlined in this policy (e.g., sharing health details with your chosen doctor, processing payments, or complying with legal court orders).

We engage trusted service providers for specific operational functions such as SMS/email delivery, cloud hosting, and payment processing. These providers are bound by strict contractual confidentiality agreements.

We use essential session cookies and local storage tokens to maintain your secure authenticated state and preserve your preferences. We do not use third-party tracking cookies for ad retargeting.

Personal and healthcare records are retained as long as your account remains active or as required by applicable Indian medical record retention regulations (typically 3 to 7 years for clinical consultation logs).

Under applicable data protection guidelines, you have the right to access, review, and request correction of your personal data stored on AYUSHUB. You may also request account deletion subject to mandatory medical audit retention laws.

AYUSHUB does not knowingly collect personal information directly from children under 18 years of age without verified parental consent. All pediatric appointments must be scheduled by an adult guardian.

In the unlikely event of a security incident affecting personal data, AYUSHUB will promptly take containment actions, notify affected users, and inform regulatory bodies in accordance with applicable laws.

We may periodically update this Privacy Policy to reflect enhancements in technology, healthcare law, or operational procedures. Revised versions will be published with an updated effective date.

For privacy questions, data requests, or to contact our designated Data Protection & Grievance Officer, please reach out to:

Email: support@ayushub.com | support.ayushub@gmail.com

Physical Address: AYUSHUB Healthcare Technologies Private Limited, Manish Nagar, Nagpur - 440015, Maharashtra, India.