Privacy at DivyaJivan.

Enough to create your account and to let a hospital find you again at its counter. Your mobile number is the identity the whole platform is keyed on — it is how a hospital finds your existing record instead of starting a second one for the same person.

You can add up to six other people to a household, which means you are giving us their details as well as your own. The head of the household decides whether members can see one another’s records or only their own.

This is the part that matters, and understating it would be the dishonest thing to do. The app holds your medical record. That is its entire purpose.

Most of it is not something you type in. It is written by the clinicians who treat you and appears in your app afterwards: the consultations you attended and the diagnoses recorded at them, prescriptions with their medicines and dosages, laboratory and imaging results together with the reference ranges they were read against, immunisations, hospital admissions, and the bills raised for any of it.

Some of it you add yourself, and only if you choose to. You can photograph an older paper report or prescription and file it against the right person. You can record your own height, weight and waist, from which the app works out a BMI. You can type in the values from a paper lab report you are holding — those are marked as entered by you everywhere they appear, and can never be presented as laboratory-verified.

You can also write to a clinician who has actually treated you, and those messages are part of the record. It is not a live chat and nobody is sitting at the other end, so it is not a route for anything urgent.

Your location. Not approximate, not precise, not ever. The app asks for no location permission at all, so the phone could not hand it over even if something in the app went looking for it. When you type a postcode into the address form, that postcode is looked up to fill in your city and district — a lookup of a number you typed, not a reading of where you are.

Your government ID number. There is nowhere in the app to enter one and nothing that sends one.

Payment details. The app shows what a hospital has billed and what is still outstanding; there is no payment inside it, and no card, UPI or bank information is asked for or held.

Your race, ethnicity, religion, politics or sexual orientation. There is no field for any of them anywhere.

And nothing at all for anybody else. There is no analytics in this app, no advertising, no crash-reporting service, no marketing pixel, no third-party tracker of any kind. Nothing you do in it is measured and sent to another company. That is a property of what was built, not a promise about how we behave.

The walkthrough form on the contact page, and nothing else. What you type there is sent to our own server and stored, so that a person here can read it and reply to you. There is nowhere else on this site to enter anything.

No cookies, no analytics, no trackers, no advertising pixel, no chat widget, no third-party video or map. Even the typefaces are served from this site rather than from a font company, so opening a page here does not announce your visit to anybody else.

Please keep medical details out of that form. It is an enquiry box, it is held apart from the clinical side of the platform, and an enquiry is never attached to a patient record.

Because you are a patient of a hospital that uses DivyaJivan, and this is the record of your care. The app exists to put that record in your hands instead of leaving it in a filing cabinet you cannot reach.

When you first sign in you are asked to agree to three things separately: the terms, this privacy policy, and specific consent to process health data. They are separate decisions on purpose, and each is recorded against the exact version of the document that was on your screen and the moment you accepted it. If a document changes materially, you are asked again rather than carried forward quietly.

Marketing consent is a fourth item, entirely optional. It is never pre-ticked, and declining it changes nothing about your care or your access to the app.

The hospitals and clinicians treating you. Access follows a care relationship — a hospital sees your record because you booked with them, attended them or were referred to them, not because they happen to be on the platform. A hospital you have never been to cannot look you up and read your history.

The people in your household, to the extent the head of the household allows. That setting is theirs to change, and it can be set so each person sees only their own.

A small number of people at DivyaJivan who operate and support the platform. That access is restricted, and the system keeps an audit record of who looked at what.

It is not sold, rented, swapped or handed to advertisers or data brokers. There is no arrangement of any kind under which a third party gets access to patient data, and there is no advertising anywhere in the product. The one exception any honest policy has to state: if we were required to produce something by law or by a court, we would have to comply.

Everything the app sends travels over an encrypted connection. The databases sit on servers in India and are not reachable from the public internet; getting at them takes administrator access to our own systems. Files you upload are stored with access controlled per person, rather than left open to anyone holding the link.

Passwords are stored as a one-way hash and cannot be read back — not by us, and not by anybody who obtained the database.

We are not going to dress that up any further. We hold no security certification and claim none. If that changes, this page changes with it.

You can close your account from inside the app at any time, from Settings, without asking anyone.

Closing it removes your way of signing in. It does not erase your medical records, and we would rather tell you that here than let you find out afterwards. Your consultations, prescriptions and results stay with the hospitals that created them, because a medical record is written by the doctor who treated you and forms part of their clinical and legal obligations — it is not ours alone to destroy on request. The same is true on paper: a hospital does not shred your file because you stopped visiting.

If you register again later with the same mobile number, that history is linked back to your new account.

The separate page on this site explains it in full, and can be read without installing the app.

The account holder is an adult. A child’s record can sit inside a household — that is the ordinary case of a parent holding their family’s records — but the child is a record in it rather than a user of it, and the login belongs to the adult.

The age at which a young person should hold their own account, and how their record separates from a parent’s view when they do, is a question we are taking legal advice on rather than guessing at. When it is settled it will be written here.

Write to us and ask. For a correction to something clinical — a diagnosis, a result, a prescription — the hospital that wrote it has to make the change, and we will help you reach the right person there.

Tell us the mobile number your account uses, so we can find you. We will not act on a request we cannot tie to the account it concerns; that is a protection for you rather than an obstacle.

If any of this changes, the words here change and the date at the top changes with them. Where a change materially affects what you agreed to, the app asks you to read and accept it again rather than carrying your old consent forward.