Privacy policy

This distinction runs through everything below, so it comes first.

• Data about our customers — the clinic, its staff logins, its billing history. We decide how this is used, so we are the data fiduciary for it.
• Data a clinic records about its patients — visits, diagnoses, prescriptions, bills. The clinic decides what to record and why; we only store and process it so the software works. The clinic is the data fiduciary for it, and we act on the clinic's instructions.

If you are a patient asking about your medical record, your clinic is the right place to start. We will help them respond.

From clinics and their staff: name, email, phone, role, qualification and registration number, clinic name and address, and subscription payment records.

From patients who create their own account: name, mobile number, email, gender, date of birth and address, plus which clinics they have joined.

Recorded by a clinic about its patients: contact details, vitals, complaints, diagnoses, prescriptions, appointments, bills and payments. This is health information, and is treated as sensitive throughout.

Technical: log data such as IP address, browser and timestamps, kept for security and debugging.

• Run the service — showing a clinic its patients, printing prescriptions, raising bills.
• Send messages a clinic has asked us to send on its behalf, such as an appointment reminder or a prescription, over WhatsApp.
• Take and record subscription payments.
• Support, security, fraud prevention and keeping backups.
• Meeting legal obligations.

We do not sell personal data. We do not use patient health information for advertising, and we do not use it to train machine-learning models.

Only the processors we need to run the service, each bound to use the data only for that purpose:

• Our hosting and database providers, for storing and serving the application.
• Razorpay, to take subscription payments. Card details are entered on Razorpay's own checkout and never reach our servers.
• WhatsApp (Meta), when a clinic sends a patient a message through the app.

One clinic never sees another clinic's patient records. Each clinic's data is held in its own database schema, and every request is checked against the clinic the signed-in person actually belongs to.

Data is stored on servers operated by our hosting providers. Some may be located outside India; where that is so, we rely on contractual safeguards with those providers.

Clinical records are kept for as long as the clinic's account is active, and for 30 days after it ends so the clinic can export them. Payment records are kept as long as tax and accounting law requires.

• Traffic is encrypted in transit with TLS.
• Passwords are stored as bcrypt hashes and are never readable by us.
• Sessions use signed, HTTP-only cookies.
• Each clinic's records sit in a separate database schema, so isolation is enforced by the database rather than by a filter someone could forget to apply.
• Access to production systems is limited to people who need it.

No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority as the law requires.

Under India's Digital Personal Data Protection Act, 2023 you may ask to access the personal data we hold about you, correct it, have it erased, nominate someone to act for you, or raise a grievance.

Write to info@thehnx.com from your registered address and we will respond within 30 days. For a medical record held by a clinic, we will pass the request to that clinic and help them act on it.

We use only what the service needs to function: a signed session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies.

A patient account is for adults. A child's clinical record may be created by a clinic where a parent or guardian has consented, as part of the care the clinic provides.

We will post any update here and change the date at the top. Material changes will also be notified by email.

The HNX
info@thehnx.com · +91 78890 02108