DocsReach Privacy Policy

Last updated: October 2026

Who we are

The DocsReach app ("DocsReach", "we", "us") is provided by DOCSREACH TECHNOLOGIES PRIVATE LIMITED, Registered Office: Village and P.O. Rukunpur, Tati Para, Rukunpur, Murshidabad, West Bengal – 742166, India. We are responsible for the personal data described in this policy.

This policy explains what the app collects, why, who we share it with, how long we keep it, and the choices you have. It is also shown inside the app (Profile → Privacy Policy), in English, Hindi and Bengali.

Information we collect

• Sign-in: your mobile phone number. We send a one-time password (OTP) to it by WhatsApp or SMS to sign you in.
• Profile: your name, date of birth, gender, address (street, city, state and PIN code), emergency contact name and phone number, preferred app language and, if you choose to add them, your email address and blood group.
• Health information: allergies, existing conditions, current medications and health notes you enter; health records you upload (PDF or image files you choose from your device); the reason for visit you give when booking; medication reminders you set up; and health questions you send us, including any symptoms you describe.
• Family members: the name, date of birth, gender and relationship to you of family members (including children) you add, and optionally their blood group and health information.
• Appointments: the doctors and clinics you book with, appointment times, your booking, cancellation and rescheduling history, and your queue status on the day of a visit.
• Payments: the amount, status and Razorpay order and payment references of each payment. Your card, UPI or bank details are entered into Razorpay's checkout and processed by Razorpay; DocsReach does not receive or store them.
• Location: your approximate location, only when you tap "Use current location" on the location picker, to show your area. Location is never collected in the background, and the coordinates are not sent to DocsReach servers.
• Device and notifications: if notifications are enabled, a Firebase Cloud Messaging push token with your device platform and app version, so we can send you appointment and queue updates.
• Usage and diagnostics: basic app-usage events (for example, a screen opened or a booking completed) with a random session ID, device platform and app version, and app error reports, sent to our servers and designed not to contain your name, phone number or health details. Crash reports (crash logs, device model, operating-system version and app version) are collected through Google Firebase Crashlytics.
• Support and feedback: messages, feedback and ratings you send us.

How we use your information

We use your information to:

• create and secure your account and sign you in;
• help you find clinics and doctors, and book, pay for, reschedule and cancel appointments;
• share the details of a booking with the doctor and clinic you booked, and show your live queue status;
• store your health records and family profiles so you can manage them and attach them to bookings;
• respond to your health questions, support requests and feedback;
• send appointment, queue and payment updates (push notifications, WhatsApp or SMS) and show the medication reminders you set up;
• process payments and refunds and keep invoices;
• keep the service secure, prevent misuse, diagnose crashes and errors, and improve the app;
• meet our legal obligations.

We do not sell your personal data. The app shows no ads, and we do not use your data for advertising.

Who we share it with

• Doctors and clinics you book with: when you book for yourself or a family member, the doctor and that clinic's staff can see the patient details needed for the visit (such as name, phone number, age and gender), the reason for visit, the booking and payment status, and any health records you attach to that booking. Their access to attached records is logged.
• Health questions: questions you send through "Ask a health question" are reviewed by our support team and, if you have visited a clinic through DocsReach before, by staff of the clinic you most recently visited.
• Service providers that process data on our behalf, only for the purposes above: Razorpay (payment processing); Google Firebase — Firebase Cloud Messaging (push notifications) and Firebase Crashlytics (crash reporting); Good Domain Registry Private Limited (hosting of our application servers and database, in India); Oracle Cloud Infrastructure (storage of uploaded files such as health records and photos, in India); and MSG91 and Twilio (delivery of sign-in codes and appointment updates by WhatsApp and SMS). Some of these providers may process data outside India.
• WhatsApp (Meta): sign-in codes and appointment updates sent by WhatsApp are delivered through WhatsApp, a service of Meta Platforms, Inc. To deliver them, your phone number and the message content pass through WhatsApp. DocsReach does not use Facebook Login and does not receive any data from your Facebook or WhatsApp account.
• Your phone's location service (Google on Android, Apple on iOS) turns your coordinates into an area name when you use "Use current location".
• Authorities: when required by law, for example in response to a valid legal order.

We do not sell or rent your personal data to anyone.

Children and family members

DocsReach accounts are for adults aged 18 or over. Children and other dependants may be included only as family members added and managed by an adult account holder.

When you add a family member, you confirm that you are their parent or legal guardian, or are otherwise authorised to manage their health information, and that you consent on their behalf where the law requires it. A family member's information is visible in your account and, for a booking you make for them, to the doctor and clinic you book with. If we learn that an account was created by someone under 18, we may close it.

How long we keep your data

• We keep your data while your account is active.
• When you delete your account, sign-in is disabled and all your sessions are signed out immediately. Your personal and health data — profile, family members, health records, appointment history, health questions, reminders and device tokens — is then permanently deleted within 30 days.
• Payment and invoice records are kept longer only where required by law (for example tax and accounting records), and only for as long as that law requires.
• Crash reports are kept by Firebase Crashlytics for up to 90 days.
• Settings stored only on your device (such as your app language and selected area) are removed when you uninstall the app.

Your rights and choices

• Access and correction: you can view and edit your profile, family members and health records in the app at any time.
• Account deletion: in the app, go to Profile → Delete Account. Without the app, follow the steps at https://app.docsreach.com/delete-account. Deletion is permanent and is completed within 30 days, as described above.
• Permissions: you can turn off location and notification access at any time in your device settings.
• Other rights: subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may ask us for a summary of your data, ask us to correct or erase it, withdraw your consent, or raise a grievance. Contact us as described below.

Security

• Data between the app and our servers is encrypted in transit using HTTPS (TLS).
• Your sign-in session token is kept in your device's secure, encrypted storage (Android Keystore / iOS Keychain), not in plain text.
• Access to patient data on our side is limited to the people who need it, and clinic access to records attached to bookings is logged.

No method of storage or transmission is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.

Changes to this policy

We may update this policy as the app changes. The date at the top shows when it was last updated; for significant changes we will let you know in the app.

Contact us

For questions about this policy, your data or a deletion request, email or call us, use Help & Support in the app (Profile → Help & Support), or write to us at our registered office.