Privacy Policy

Compliance with Indian Laws

PrisBee complies with theInformation Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

• By using PrisBee, users agree to data collection and processing as outlined in this policy.
• Users can request data modification or deletion via support@prisbee.com.

Information We Collect

• Personal Data: Name, contact, age, medical history, prescriptions.
• Non-Personal Data: Device info, usage logs, cookies.
• Permissions: Camera (for uploads), storage (for reports), notifications (for reminders).

How We Use Your Information

• Facilitate prescription management, appointment booking, and reminders.
• Improve user experience and ensure data security.
• Send transactional notifications (e.g., prescription updates).
• Ensure compliance with legal obligations under Indian data protection laws.

Patient Consent & OTP Authorization

By default, the consent checkbox is already marked, but the patient may request to uncheck this option at any time.

Patients are the primary decision-makers regarding access to their prescription history. If another doctor needs access to an active prescription from a different doctor, the patient must provide OTP consent.

The OTP is sent to the patient's registered mobile number and must be entered by the doctor to access past prescriptions.

Patients can revoke consent at any time. If a doctor requires consent in the future, they must request it again, and the patient has full control over granting or denying access.

This ensures that the patient receives the best possible treatment while maintaining control over their medical data.

Patient Consent Revocation

Patients can revoke previously granted consent at any time.

Once consent is revoked, the doctor will no longer have access to the patient's past prescriptions.

If the same doctor requires access in the future, they must request new consent, which the patient can approve or deny.

This ensures full patient control over their medical data and prescription history.

Data Sharing

• Data is shared only with authorized doctors, pharmacies, and service providers as necessary for patient care.
• Legal compliance: Data may be disclosed per government/legal requirements.
• No unauthorized third-party sale of personal data.
• Patients have control over who accesses their prescription history via OTP-based consent.
• If PrisBee integrates with third-party platforms (e.g., cloud storage, analytics tools, or payment gateways), we ensure that these providers follow data protection standards.

No Advertisements or Promotions

PrisBee is completely ad-free and does not allow any third-party advertisements or promotions. Users will never receive ads within the platform.

Data Security & Protection

We implement strict security measures to protect personal and medical data from unauthorized access, alteration, or disclosure. These measures include:

• End-to-end encryption & access controls to protect personal data.
• Secure authentication and encryption for data storage and transmission.
• Regular security audits to ensure data safety.
• Limited access control based on user roles (Receptionist, Doctor, Patient).

User Rights Under the DPDP Act, 2023

• Right to Access: Users can request access to their personal and medical data.
• Right to Correction: Users can request corrections to inaccurate or incomplete data.
• Right to Erasure: Users can request deletion of their data unless legally required to retain it.
• Right to Grievance Redressal: Users can file complaints about data processing practices via the Grievance Officer.

Cookies & Tracking

Used to enhance performance and user experience.

Users can disable cookies in browser settings.

Consent Management

Patients control data-sharing with doctors via OTP/in-app consent.

Patients can revoke their consent at any time. If the same doctor requires consent in the future, the doctor must request it again, and it is 100% up to the patient whether to grant or deny it.

Retention of Data

Medical records and prescription data are retained as per applicable healthcare regulations.

Patients may request the deletion of their data unless legal retention is required.

Data Backup & Recovery

PrisBee automatically backs up data to prevent loss in case of system failure.

Backup data is securely stored and not shared with third parties unless legally required.

Protection of Minors' Data

If PrisBee services are used by minors, we ensure that personal data is collected and processed in compliance with applicable child protection laws.

Parental or guardian consent may be required where necessary.

Right to Refuse Service

PrisBee reserves the right to refuse service to users who violate legal, ethical, or platform policies.

Users engaging in fraudulent activities, misinformation, or misuse of PrisBee may have their accounts suspended or terminated.

Language Accessibility

PrisBee supports English, Hindi, and Gujarati and will add more regional languages for better accessibility.

Future updates will ensure greater accessibility, including simplified medical terms for better understanding by all users.

Future Enhancements & Integrations

PrisBee may introduce AI-based diagnostics, telemedicine, and billing solutions while ensuring data privacy compliance.

Grievance Redressal Mechanism

PrisBee appoints a Grievance Officer to address user complaints and requests.

Users can contact the Grievance Officer via email at support@prisbee.com for any privacy concerns.

Complaints will be addressed within 30 days as per Indian data protection regulations.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be communicated to users via email or app notifications.