Privacy Policy

This Privacy Policy explains how Moonminds Technologies Pvt Ltd ("HealBuddy", "we", "us", "our"), which operates the HealBuddy app and connects you with partner clinics, collects, uses, stores, shares and protects your personal and health information.

We handle health data, which is sensitive by nature. We treat it accordingly. By using this app, you agree to the practices described here.

1. Who we are

• Data fiduciary: Moonminds Technologies Pvt Ltd
• Contact for privacy matters: care@healbuddy.ai | +91 81971 11474

2. Information we collect

Information you give us: name, age, gender, phone number, email address; symptoms, medical history, allergies, current medication, vitals, clinical notes, diagnosis, prescriptions, and lab results; appointment details and the clinic/doctor you choose; your location, only when you use GPS check-in.

Payment information: payments are processed by our payment gateway partner (Razorpay). We do not collect or store your full card number, CVV, UPI PIN, or net-banking credentials. We receive only a transaction reference, the amount, and the payment status.

Information collected automatically: standard technical information such as IP address, device type, and pages viewed, used for security and to understand aggregate usage.

3. How we use your information

• To connect you with a clinic and doctor, and to manage your booking.
• To maintain your appointment and health record across visits.
• To process payments and refunds, and to send booking confirmations and reminders.
• To power features like live queue estimates and GPS check-in.
• To respond to your questions, feedback, and grievances.
• To comply with applicable law, including retention of records where legally required.

We do not use your health information for advertising, and we do not sell, rent, or trade your personal or health data to any third party.

4. When we share your information

• The clinic and doctor you book with, so they can provide your care.
• Payment gateway and banking partners, to process payments and refunds.
• IT and cloud service providers who host our records under contract, bound by confidentiality obligations.
• Regulators, courts, and law enforcement, where required by law or valid legal process.
• A person you authorise — for example a family member or caregiver.

5. How long we keep your data

We retain medical and appointment records for the period required under applicable Indian law and professional guidelines — in general, a minimum of three years from the date of the last entry, and longer where required. Where a record is no longer required, it is securely deleted or anonymised.

6. How we protect your data

• Access to records is restricted to authorised staff at your chosen clinic and our support team.
• Records held electronically are protected by access controls and encryption in transit.
• Payment credentials never touch our systems; they are handled by our PCI-DSS compliant gateway.

No system is perfectly secure. If we become aware of a personal data breach likely to affect you, we will notify you and the relevant authority as required by law.

7. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may:

• Access a copy of your appointment and health record and the personal data we hold about you.
• Correct information that is inaccurate, incomplete, or out of date.
• Request erasure of personal data that we are no longer required to retain.
• Withdraw consent to processing based on your consent — this may mean we can no longer provide certain features.
• Raise a grievance about how we handle your data.

To exercise any of these rights, write to care@healbuddy.ai or call +91 81971 11474. We may ask you to verify your identity first. We aim to respond within 30 days.

8. Children's data

Where the patient is a child under 18, we collect and process their health data only with the consent of a parent or lawful guardian, who exercises the rights above on the child's behalf.

9. Communications you receive from us

We may contact you by SMS, WhatsApp, or email about your appointments, prescriptions, reports, and payments — these are service communications related to your care.

10. Changes to this policy

We may update this Privacy Policy from time to time. The revised version will be posted here with an updated "Last updated" date.

11. Grievance redressal

If you have a concern about how your personal or health data has been handled, contact our Grievance Officer: