Privacy

Your clinic's account.Your name, your email address, your clinic's details and how you use the service. We decide what happens to this, so for it we are what India's Digital Personal Data Protection Act calls a Data Fiduciary.

Your patients' records.Names, contact details, appointments, clinical notes, outcome scores, documents and bills. These are your patients' records and your responsibility. We hold and process them only on your instructions — we are a Data Processor for this, and you are the Fiduciary.

The practical difference: if a patient wants a copy of their records, or wants them corrected or deleted, they ask you, not us. We will help you do it.

On servers in India — Mumbai — with our database and file storage providers. Records are not moved outside India in the ordinary course of running the service.

Only people you have invited to your clinic. Each clinic's records are separated from every other clinic's at the database level, not merely by what the screen chooses to show.

Every time a patient record is opened is recorded, including by us. We look at your clinical data only when you ask us to — to investigate a fault you have reported, for instance — and never for any other reason.

• Sell your data, or your patients' data, to anyone.
• Use patient records to advertise anything to anyone.
• Give a third party access to clinical records.
• Train anything on your patients' records.

Hosting, our database and file storage, and an email provider that sends appointment confirmations and sign-in codes on our behalf. Each sees only what it needs to do its job, and none of them is permitted to use it for anything else.

If you switch on the optional drafting assistance for discharge summaries, the text of that draft is sent to an AI provider with the patient's identifying details removed first. It is off unless you turn it on.

Your records stay while your clinic is with us. Medical records often have to be kept for years, so we do not delete them for you on a schedule.

If nobody signs in for a long time we pause online booking and tell you, but nothing is deleted. If you leave, ask and we will give you an export and then remove what remains.

Everything travels encrypted. There are no passwords to leak, because signing in uses a code sent to your email. Access to records is restricted at the database itself as well as in the application.

If there is ever a breach affecting your clinic, we will tell you and the Data Protection Board of India as the law requires — promptly, and with what we actually know rather than a reassuring summary.

You can see and change your clinic's information in Settings at any time, ask for an export, or ask us to close the account and delete it. Write to hello@fitdoc.in, which is also the address for a complaint. A person replies.

If this changes in a way that affects you, we will email you rather than quietly reposting the page. The date at the top always says when it last changed.

See also the terms of use.