Privacy Policy

• Account details — name, phone number, email, and for doctors, registration and KYC documents.
• Appointment details — who you are seeing, when, symptoms or a description of the issue if you provide one, and attendance.
• Health information — prescriptions, doctor's notes and reports created during care, where the doctor records them here.
• Payment records — amounts, dates and a payment reference. Card, UPI and bank details go directly to our payment provider; we never see or store them.
• Location — only if you allow it, and only to sort doctors by distance. You can decline and pick a city instead.
• Device and usage data — pages visited, device type, and notification tokens if you enable push.

• To book appointments, run the queue, and let the doctor see who is coming and why.
• To send reminders and updates about your appointment, including when a doctor is running late.
• To take payments, issue receipts and process refunds.
• To verify doctors before they appear in search.
• To keep the service secure, prevent abuse, and meet our legal obligations.

We do not sell your data, and we do not use your health information for advertising.

• The doctor and clinic you book with, and their staff, see your booking and anything you shared with it.
• Our payment provider (Razorpay) processes payments and refunds.
• Service providers who host our systems, send our email and push notifications, and store uploaded images.
• Authorities, where the law requires it.

Other patients never see your details.

Appointment and medical records are kept while your account is active, and afterwards where we must retain them under Indian medical record-keeping and tax rules. Payment records are kept as long as accounting law requires. When data is no longer needed, we delete it or anonymise it.

• Ask for a copy of your data, or for corrections to anything inaccurate.
• Ask us to delete your account. Some records must be retained where the law requires it, and we will tell you which.
• Turn off push notifications at any time, in your device settings or ours.
• Decline location access. Everything else still works.

Write to support@accessai.co and we will respond within 30 days.

Access to records is restricted to the people who need it, traffic is encrypted in transit, and payment credentials never reach our servers. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authority as required.

Accounts are for adults. A parent or guardian may book on behalf of a child, and is responsible for the information they provide about them.