YOUR DATA & CHOICES
Privacy Policy
Effective 12 October 2026. This notice applies to the mDoc website, patient app, care services, support, and related communications.
Who is responsible
MDOCTOR INFO PRIVATE LIMITED (CIN U62099JH2023PTC020087), Office No. 402, Gupta Tower, Opposite Sahu Nursing Home, Radium Road, Ranchi, Jharkhand 834001, India operates mDoc. References to “mDoc”, “we”, “us”, or “our” mean this company.
The mDoc Privacy & Grievance Desk can be reached at info@mdoc.in or +91 74939 39362. Never send an OTP, UPI PIN, CVV, banking password, or complete card details to support.
Personal data, purpose, and service
We collect only the information reasonably needed to operate the feature you choose, protect accounts, meet legal obligations, and improve reliability. The categories below explain what is involved and why.
| Data | Examples | Why we use it |
|---|---|---|
| Account and identity | Name, mobile number, email, Google identity identifier, verification status | Create and secure your account, sign you in, prevent duplicate or fraudulent accounts, and contact you |
| Patient and family profiles | Age or date of birth, gender, relationship, address, identifiers you provide | Identify the intended patient and support bookings made for an authorised family member or dependant |
| Care and health information | Symptoms, notes, reports, prescriptions, booking forms, requested speciality | Route your request to selected healthcare providers and support delivery of the requested care |
| Bookings and communications | Provider, facility, dates, status, messages, notification delivery records | Create, confirm, update, and support requests across the website, app, provider, and Admin portal |
| Payments and plans | Amount, order and payment references, coupon, plan and refund status | Calculate charges, process or reconcile payments, activate benefits, prevent duplicate processing, and address disputes |
| Device, security, and usage | IP address, device/app version, push token, timestamps, audit and diagnostic events | Operate notifications, investigate failures, maintain security, and improve performance |
| Support | Queries, complaint details, attachments, and resolution history | Respond, investigate, maintain an audit trail, and meet legal or consumer-protection duties |
Data may come directly from you, from an authorised person acting for you, from a healthcare provider or facility involved in your request, from payment and identity partners, or from normal operation of the service.
Consent and withdrawal
Where processing relies on consent, mDoc asks through a clear app, website, form, or communication flow. You can withdraw consent for future processing by emailing the Privacy & Grievance Desk or using an available account control. Withdrawal does not invalidate processing already completed and may prevent a requested feature or care workflow from continuing.
Some processing is also necessary to provide a service you requested, protect users and systems, comply with law, resolve disputes, or establish and defend legal claims. We will explain material consequences when a request to stop processing cannot be fully honoured.
Healthcare providers and facilities
mDoc is a technology and coordination platform. When you select or interact with a doctor, diagnostic centre, hospital, pharmacy, or other provider, relevant patient, request, document, payment, and communication data may be shared with that provider or facility. Those providers may have their own professional, clinical, record-retention, and privacy duties and may act independently for those activities.
Data processors and international processing
We use vetted service providers for cloud hosting, communications, identity, analytics, security, customer support, file storage, and payments. They receive only data needed for their role and are expected to protect it under contracts and applicable law. Razorpay processes checkout and payment information under its own notices; mDoc does not store your complete card number, CVV, UPI PIN, or banking password.
Some providers may process or support data from locations outside your state or country. Where international processing occurs, mDoc uses contractual, technical, and organisational safeguards and follows applicable restrictions issued by Indian authorities.
Google sign-in
If you choose Google sign-in, mDoc receives the basic identity information you authorise, such as your name, email address, profile image, and a Google account identifier. We use it only to authenticate, create or link your mDoc account, and display your profile. mDoc does not request access to Gmail, Google Drive, Calendar, contacts, or passwords for this sign-in flow.
Cookies and local storage
The website and app may use cookies, secure device storage, or similar technologies for authentication, security, language, navigation, and essential preferences. We do not use an essential authentication token to sell your information. Browser or device settings can remove stored data, but doing so may sign you out or reset preferences.
Security and incident response
We use access controls, encrypted transport, secure credential storage, audit trails, validation, backups, and operational monitoring appropriate to the service. No online system can guarantee absolute security. If we confirm a personal-data breach, we will investigate, contain it, preserve evidence, notify relevant authorities where required, and communicate affected users as required by applicable law.
Retention and deletion
We retain data only while reasonably needed for the stated purposes, an active account or care relationship, required medical or financial records, fraud prevention, backups, disputes, or law. Retention periods differ by data type and provider obligation. When retention is no longer justified, data is deleted, anonymised, or securely isolated according to our operational process.
To request account deletion, use the account deletion page. Deleting an account may not erase records that mDoc or a healthcare provider must retain by law or for an unresolved payment, safety event, complaint, or legal claim.
Correction, erasure, grievance, and nomination
You may ask for a summary of personal data and processing, correction of inaccurate or incomplete data, erasure where retention is no longer required, or help exercising another applicable right. You may also nominate another individual to exercise applicable data rights in the event of death or incapacity, subject to identity and authority verification.
- Email info@mdoc.in from your registered address where possible, or include your registered mobile number.
- Describe the request and affected account or booking. Do not attach unnecessary medical or financial information.
- We may securely verify identity or authority before disclosing, correcting, or deleting data.
- The mDoc Privacy & Grievance Desk will acknowledge and investigate the request and explain the outcome or any lawful limitation.
If a privacy grievance remains unresolved, you may use the statutory complaint mechanism available under applicable Indian data-protection law after first giving mDoc a reasonable opportunity to resolve it.
Children and family profiles
A parent or lawful guardian must create or manage a child’s profile and provide authorisation required by law. Do not create a profile for another adult without authority. We may ask for reasonable verification and may restrict or remove a profile if authority cannot be established.
Your responsibilities
Keep profile and patient details accurate, protect your device and login methods, review the recipient before uploading a document, and promptly report suspected unauthorised access. Do not submit another person’s information unless you are authorised to do so.
Changes to this policy
We may update this policy when services, providers, or laws change. The effective date will be revised and material changes may be communicated in the app, website, or registered contact channel. Where required, we will request fresh consent rather than treating continued use as consent.
Contact and urgent care
Privacy questions: info@mdoc.in. General support: mDoc Support. mDoc messages and privacy channels are not emergency services. For a medical emergency, contact local emergency services or go to the nearest appropriate emergency facility.