Privacy Policy

1. Introduction

Vakil Health Care ("we", "our", or "us") operates the Vakil Health Patient App and website. We are committed to protecting the privacy of our patients, clinics, and all individuals using our services. This Privacy Policy details how we collect, store, secure, use, and process your Protected Health Information (PHI) and Personal Data.

By accessing or using the Vakil Health Patient App or portal, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

To provide comprehensive clinical tracking, diagnostics, and patient hub functionalities, we collect the following types of information:

• Personal Identification: Full name, telephone number, physical address, and gender.
• Protected Health Information (PHI): Clinical history, diagnostic reports, laboratory test results, vital logs, check-in timestamps, prescription notes, and allergy records.
• Billing and Financial Information: For processing online co-pays, clinic slot bookings, or pharmacy bills, we collect billing details. All online transactions are processed through secure, PCI-DSS compliant third-party payment gateways; we do not store raw card numbers on our servers.
• Technical Device Data: Device identifier, IP address, operating system, crash logs, and app performance stats.

3. In-App Device Permissions Requested

To enable advanced features of the Vakil Patient Mobile App, the application requires access to specific functions on your device:

4. How We Use Your Data

Vakil Health Care processes your personal and health parameters strictly under the following lawful grounds:

• Service Delivery: Managing patient accounts, presenting health record summaries, tracking clinic queue positions, and booking clinic slots.
• Medical Quality Assurance: Delivering accurate clinical diagnostic outputs, printing prescription PDFs, and facilitating pharmacy dispensing.
• Transaction Processing: Generating digital invoices, issuing billing codes, and processing payments securely via our payment gateways.
• Critical Notifications: Alerting patients about clinic scheduling changes or critical diagnosis updates.

No Marketing Sharing: We do not sell, rent, or lease your medical data or contact details to third-party advertising companies. Your health data is used solely to facilitate your personal care.

5. Systems Security & Encryptions

We implement comprehensive technical, physical, and administrative measures to secure your data and maintain compliance with global healthcare requirements:

• Transport Security: All data in transit between the mobile apps, web interfaces, and backend servers is encrypted using standard TLS 1.3 protocol channels.
• Storage Encryptions: Database records, backups, and clinical documents (such as PDF test reports) are encrypted at rest using AES-256 standards.
• Access Control: System authorization requires cryptographically hashed security tokens that exceed security limits and expire periodically.

6. Sharing Information with Third Parties

We share patient information only with trusted third parties in the following scenarios:

• Authorized Healthcare Providers: Your health records, vitals, and check-in reports are visible only to the clinic, hospital, or doctor that you consult with.
• Service Providers: We integrate with trusted infrastructure vendors (such as secure database hosts and notification delivery services) operating under strict data protection agreements.
• Payment Gateways: When you complete transactions (appointment booking fee or pharmacy payment), your billing metrics are securely transferred to partners like Stripe or Razorpay to complete the checkout process.
• Legal Obligations: We may disclose information if required to do so by applicable health regulation codes, a subpoena, or court rulings.

7. Patient Rights & Account Deletion (Google/Apple Mandate)

You retain absolute rights over your personal identifiers and medical history records. Depending on your jurisdiction, you enjoy the right to:

• Access the personal profiles and medical summaries registered under your patient account.
• Request the complete deletion of your account and erasure of all personal data (subject to legal retention guidelines).

8. Contact Information & Support

If you have questions, comments, or complaints regarding this Privacy Policy, your clinical data, or to execute your privacy rights, please reach out to our team: