Privacy Policy
Last updated: 31 August 2026
This Privacy Policy describes how Kaustubha Medtech Private Limited ("Kaustubha MedTech", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use:
- our website at https://www.kaustubhamedtech.com
- the Kaustubha MedTech Android mobile application
Together, the website and the app are the "Platform". By creating an account or using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use our services.
1. Who we are
Kaustubha MedTech is a telehealth and wellness platform that lets patients book consultations with doctors, track health information, upload medical reports, chat with care providers, and make payments for consultations.
Registered office: Foundation for CfHE, Indian Institute of Hyderabad, Kandi, Medak, Sangareddy, Telangana 502285, India.
Contact: kaustubhamedtech@gmail.com | +91 96471 02668
2. Information we collect
We collect information that you provide, information generated when you use the Platform, and information from third-party services you choose to connect.
2.1 Account and profile information
When you register or update your profile we may collect your name, email address, phone number, password, profile photo, age, gender, city, state, country, and a short about/bio. Doctors also provide professional details such as legal name, date of birth, address, qualifications, specialisation, experience, consultation fees, languages, availability, medical registration numbers, and licence or certificate images.
2.2 Health and medical information
Because this is a healthcare Platform, we collect health-related data that you or your doctor enter, including:
- appointment details (date, time, purpose of visit, mode of consultation)
- uploaded medical reports, prescriptions, lab results, and similar documents
- health tracker entries such as activity, sleep, and wellness data
- health monitoring metrics such as pulse, temperature, stress level, and calories burned
- chat messages and files you share with doctors or support
- reviews you write after a consultation
This is sensitive personal data. We use it only to provide care features you request (consultations, tracking, and sharing with the doctor you choose). We do not sell health information.
We do not collect fingerprint, face, or other biometric identifiers for login. Device biometrics, if used, stay on your device and are handled by the operating system.
2.3 Authentication information
You may sign in with email and password, a one-time code (OTP) sent to your phone or email, or with Google or Facebook. If you use Google or Facebook, we receive the identifier and basic profile details those services share with us (typically name, email, and profile image), subject to your settings on that service.
2.4 Payment information
Consultation payments are processed by Razorpay. We receive payment status, amount, currency, and a payment reference. We do not store your full card number, CVV, or UPI PIN. Razorpay handles card and UPI data under its own privacy policy.
2.5 Device, usage, and cookies
We use cookies and similar technologies on the website to keep you signed in and to understand how the Platform is used. The app and servers may also store session tokens, basic device or log information needed to operate the service, and files you upload. We do not use your precise GPS location. City, state, and country are collected only if you type them into your profile.
3. How we use information
We use the information above to:
- create and manage your account
- book, reschedule, and run doctor consultations
- show health tracker and monitoring data to you and, where you have a care relationship, to your doctor
- store and display medical reports you upload
- enable in-app chat and file sharing
- process payments and issue invoices or receipts
- verify doctor licences before listing a doctor
- send OTPs, appointment updates, and service emails or SMS
- detect fraud, abuse, and security incidents
- improve the Platform and respond to support requests
- send marketing messages only if you have opted in; you can opt out at any time
- comply with law and professional or regulatory duties
4. How we share information
We share information only as needed to operate the Platform:
- Doctors and patients on the Platform. If you book a consultation, the doctor can see relevant profile, appointment, report, tracker, and chat information. Patients see the doctor profile needed to book care.
- Payment processor. Razorpay, to complete transactions.
- Cloud storage. Cloudinary, to host images and documents you or doctors upload (profile photos, licences, reports, chat files).
- Communications. Email and SMS providers (including services such as Twilio or Fast2SMS) to send OTPs and service messages.
- Sign-in providers. Google or Facebook, only if you choose to sign in with them.
- Legal and safety. We may disclose information if required by law, regulation, court order, or to protect the rights, safety, or security of users, doctors, or the public.
We do not sell personal information or health information to data brokers or advertisers.
5. Data retention
We keep account, appointment, payment records, health tracker data, reports, and chat history for as long as your account is active and for a reasonable period afterwards where we must keep records for healthcare, tax, accounting, dispute, or legal reasons. When you delete your account, we erase personal and health data we no longer need, as described below.
6. Security
We use HTTPS, access controls, hashed passwords, and reasonable organisational measures to protect personal and health data. No method of transmission or storage is completely secure. Please use a strong password and do not share OTPs or login details.
7. Your rights and account deletion
Subject to applicable law (including the Digital Personal Data Protection Act, 2023 in India), you may request access to, correction of, or deletion of your personal data, or withdraw consent where processing is based on consent.
You can update much of your profile information while signed in. To delete your account and associated personal data (including health tracker entries, uploaded reports, and chat messages), email kaustubhamedtech@gmail.com from the address on your account, or use account deletion in the app if it is available on your version. We will verify the request and then permanently delete the account. Some records (for example payment references required by tax or law) may be retained in anonymised or limited form where we are legally required to do so.
8. Children
The Platform is intended for users aged 18 and above. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.
9. International processing
Our servers and some service providers may process data in India or other countries. If you access the Platform from outside India, you understand that your information may be transferred to and processed in India and in the countries where our providers operate.
10. Third-party links
The Platform may link to third-party sites or SDKs (for example Razorpay checkout, Google, or Facebook). Their privacy practices are governed by their own policies. Please read those policies before using those services.
11. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or the law. The "Last updated" date at the top will change when we do. Continued use of the Platform after an update means you accept the revised policy. For material changes we will try to notify you by email or an in-app notice.
12. Contact us
For privacy questions, data access or deletion requests, or complaints, contact:
Kaustubha Medtech Private Limited
Foundation for CfHE, Indian Institute of Hyderabad, Kandi, Medak, Sangareddy, Telangana 502285, India
Email: kaustubhamedtech@gmail.com
Phone: +91 96471 02668
Web: https://www.kaustubhamedtech.com/contact-us
This policy is provided in English. If you need help understanding it, write to us at the email above.