Privacy Policy

1. Introduction

Minsos ("we", "our", or "us") is a healthcare management platform operated by Tecsoui Technologies Private Limited, registered under the Companies Act 2013, India. This Privacy Policy explains how we collect, use, store, and protect your personal and health data when you use the Minsos mobile application and website (minsos.net).

By creating an account or using the Minsos platform, you explicitly consent to the collection and use of information described in this policy. If you do not agree, please do not use the platform.

2. Information We Collect

2.1 Personal Information

• Full name, email address, phone number
• Date of birth, blood group, address
• Profile photo (optional)
• UHID (Unique Health Identification Number assigned by Minsos)

2.2 Sensitive Personal Data (Health Data)

• Medical records, prescriptions, lab reports, X-rays, scan reports, and clinical documents you upload
• Diagnosis history and medical notes added by doctors during consultations
• Medicine names, dosages, and schedules
• Appointment records and consultation notes
• SOS alert history and GPS location (only at the moment you trigger an SOS alert)
• Vitals or health metrics you enter manually

2.3 Doctor & Healthcare Professional Data

• NMC/MCI registration number
• Specialisation, hospital/clinic affiliation
• Consultation history and prescriptions issued

2.4 Device & Usage Data

• Device type, operating system, app version
• Push notification tokens
• App usage logs and anonymised crash reports
• IP address (for security logging only)

2.5 Payment Data

• Transaction ID, payment status, amount paid
• Payment method type (card, UPI, net banking)
• We do not store full card numbers or UPI PINs — all payments are processed by Razorpay

3. How We Use Your Information

We use your data strictly for the following purposes:

• Providing healthcare management services (records, appointments, medicines, SOS alerts)
• Enabling doctor consultations, pathologist test requests, and video calls
• Sending medicine reminders and appointment notifications via push notifications and WhatsApp
• Sharing your records with nominees you explicitly authorise
• Sending WhatsApp alerts to your emergency contacts when you trigger an SOS event
• Processing payments for appointments and platform services
• Improving app performance, fixing bugs, and developing new features
• Complying with applicable Indian laws including the DPDP Act 2023, IT Act 2000, and Telemedicine Practice Guidelines 2020

We do not use your health data for advertising, targeting, behavioural profiling, or sale to third parties.

4. Legal Basis for Processing (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, we process your data based on:

• Explicit consent — obtained at registration and before sensitive data collection. You may withdraw consent at any time.
• Contractual necessity — to provide the services you signed up for.
• Legal obligation — to comply with Indian health, tax, and data protection laws.
• Legitimate interests — for security monitoring, fraud prevention, and platform integrity.

Withdrawal of consent will not affect processing that already occurred lawfully. Withdrawal may affect your ability to use certain features of the platform.

5. Data Sharing

We share your data only in the following circumstances:

We do not share your health data with any insurance company, pharmaceutical company, advertiser, data broker, or employer.

6. Data Storage & Security

• All data is stored on secured cloud servers (Supabase / PostgreSQL) with encryption at rest
• Medical documents are stored in private storage — never publicly accessible
• Document access uses signed URLs that expire after 24 hours — even if a URL is copied, it becomes invalid
• All data in transit is encrypted via HTTPS/TLS 1.2+
• JWT-based role authentication ensures only authorised users access your records
• We maintain audit logs of all document access events
• Payment data is handled exclusively by Razorpay, which is PCI DSS compliant

7. Data Retention

After these periods, data is permanently deleted from our systems and all backups.

8. Your Rights Under DPDP Act 2023

You have the following rights under the Digital Personal Data Protection Act 2023:

• Right to Access — request a copy of all personal data we hold about you
• Right to Correction — request correction of inaccurate or incomplete data
• Right to Erasure — request deletion of your account and all associated data (subject to legal retention obligations)
• Right to Withdraw Consent — at any time, for any specific processing activity
• Right to Nominate — appoint a person to exercise your data rights in case of death or incapacity
• Right to Grievance Redressal — file a complaint with our Grievance Officer (see Section 13)

To exercise any of these rights, contact: privacy@minsos.net

We will respond within 72 hours and resolve within 15 days.

9. Children's Privacy

Minsos is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If a parent or guardian believes their child has registered on the platform, please contact us immediately at privacy@minsos.net and we will delete the account within 72 hours.

10. Telemedicine Consent

In compliance with the Telemedicine Practice Guidelines 2020 issued by the Ministry of Health & Family Welfare (MoHFW), Government of India:

• You provide explicit consent before every teleconsultation session
• All doctors on Minsos are verified registered practitioners under NMC/MCI — their registration number is displayed on every prescription
• Prescriptions issued via Minsos include the doctor's NMC registration number, date, and digital signature
• Certain medications (narcotics, psychotropics, and Schedule X drugs) cannot be prescribed via telemedicine — this is enforced by our platform
• Consultation records including consent logs are retained for 7 years

11. Cookies & Website Tracking

When you visit minsos.net, we may use the following types of cookies:

• Essential cookies — required for the website to function (login sessions, CSRF protection)
• Analytics cookies — anonymised usage data to improve the website (e.g. page views, traffic sources)
• Preference cookies — remember your language or theme settings

You can control cookie settings via your browser. Disabling essential cookies will affect your ability to use the platform. We do not use advertising or cross-site tracking cookies.

12. ABDM / ABHA Integration

Minsos may in the future integrate with the Ayushman Bharat Digital Mission (ABDM) operated by the National Health Authority (NHA), Government of India. If and when this integration is enabled:

• You will be notified and asked for separate explicit consent before any data is shared with NHA/ABDM systems
• Your ABHA (Ayushman Bharat Health Account) number, if linked, will be stored securely
• ABDM integration is governed by NHA's own data sharing policies

This section will be updated when ABDM integration goes live.

13. Grievance Officer

In accordance with the IT Act 2000, Intermediary Guidelines 2021, and DPDP Act 2023, our Grievance Officer is:

If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India (once constituted under DPDP Act 2023).

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you via:

• In-app notification (at least 7 days before material changes take effect)
• Email to your registered address

Continued use of the platform after changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you may delete your account before they take effect.

15. Contact Us