Privacy Policy

1. About This Policy DPDP Act 2023 Compliant

This Privacy Policy explains how MedTalk Central — operated by ANIDM, owned by Amandeep Singh Vaseer, registered under MSME — collects, uses, stores, and protects information when you use medtalkcentral.com and our AI-powered health information assistant (the "Platform").

By using the Platform, you consent to the practices described in this Policy. If you do not agree, please discontinue use immediately.

2. Key Definitions

• Personal Data — Any information that identifies you (name, email, phone, location).
• Health Information — Symptoms, conditions, reports, or medical information you enter.
• Provider — Healthcare professionals or clinics registered on the Platform.
• User — Any person who accesses or uses the Platform.
• DPDP Act — India's Digital Personal Data Protection Act, 2023.
• AI System — The Claude AI model by Anthropic used to generate health information responses.

3. What Information We Collect

3.1 Information You Provide Directly

• Account registration: Name, email address, phone number, Google account details.
• Health queries: Symptoms, conditions, and health questions you type or speak.
• Uploaded files: Medical reports, lab results, X-rays, or photographs for AI analysis.
• Location: City or GPS coordinates to find nearby healthcare providers.
• Provider registration: Professional details, qualifications, and registration numbers.

3.2 Information Collected Automatically

• Device information: Browser type, operating system, device model, IP address.
• Usage data: Pages visited, queries made, session duration.
• Cookies and local storage: For session management and preferences.

3.3 What We Do NOT Collect

• We do not collect Aadhaar numbers, PAN numbers, or government IDs.
• We do not store payment card numbers — all payments are handled by Razorpay.
• We do not collect data from minors (under 13) without verified parental consent.

4. How We Use Your Information

4.1 To Provide the Service

• Process your health queries through our AI and return educational health information.
• Match your query with relevant healthcare providers near your location.
• Maintain your query history for registered users.

4.2 For Safety and Compliance

• Detect and prevent fraud, abuse, or misuse of the Platform.
• Comply with the DPDP Act 2023, IT Act 2000, and Consumer Protection Act 2019.
• Respond to lawful requests from government authorities or courts.

4.3 For Communication

• Send service-related notifications (account updates, security alerts).
• With your explicit consent only: health tips or feature updates.

5. AI System and Your Health Data

MedTalk Central uses Claude, an AI language model by Anthropic (USA). When you submit a health query:

• Your query text is transmitted to Anthropic's systems via a secure Cloudflare Worker proxy.
• We do not send your name, email, or account details to Anthropic — only the query text.
• Anthropic's API is used under enterprise terms that prohibit training on user queries.
• Uploaded files are processed client-side before being stored in our secure cloud storage.

6. Data Storage, Security and Retention

6.1 Where Your Data is Stored

Data is stored on Supabase (cloud database hosted on Amazon Web Services). Servers may be located outside India including the USA. By using the Platform, you consent to this international transfer.

6.2 Security Measures

• All data transmission uses HTTPS/TLS encryption (256-bit).
• API keys are stored server-side only — never exposed to browsers.
• Database access is protected by Row Level Security (RLS) policies.
• Payments are handled entirely by Razorpay — we never see your card numbers.

6.3 Data Retention

• Account data: Retained while active; deleted within 30 days of account deletion request.
• Health queries: Retained for 12 months (registered users); session-only for guests.
• Uploaded medical files: Retained for 6 months then automatically deleted.
• Analytics: Retained in anonymised, aggregated form indefinitely.

7. Your Rights Under DPDP Act 2023

• Right to Access — Request a copy of the personal data we hold about you.
• Right to Correction — Request correction of inaccurate or incomplete data.
• Right to Erasure — Request deletion of your personal data.
• Right to Grievance Redressal — Lodge a complaint with us or the Data Protection Board of India.
• Right to Nominate — Nominate a person to exercise your rights in case of incapacity.
• Right to Withdraw Consent — Withdraw consent at any time (may affect service availability).

To exercise any right, email: [email protected]. We respond within 30 days.

8. Children's Privacy

• Users under 18 should use the Platform only with parental or guardian supervision.
• We do not knowingly collect data from children under 13 without verified parental consent.
• If you believe your child has provided data without consent, contact us and we will delete it within 7 days.

9. Third-Party Services

• Supabase — Database and authentication. Privacy: supabase.com/privacy
• Anthropic — AI language model. Privacy: anthropic.com/privacy
• Razorpay — Payment processing. Privacy: razorpay.com/privacy
• Cloudflare — Security and CDN. Privacy: cloudflare.com/privacypolicy
• Google — OAuth login and Places API. Privacy: policies.google.com/privacy

10. Grievance Officer

Grievances will be acknowledged within 48 hours and resolved within 30 days.

11. Changes to This Policy

• We may update this Policy at any time. The effective date will always be shown at the top.
• For material changes, registered users will be notified via email at least 7 days in advance.
• Continued use of the Platform constitutes acceptance of any revised Policy.