Privacy Policy

1. Who this policy applies to

This policy applies to visitors to ambimed.in, users of the Ambimed client and caregiver mobile applications, families booking care, caregivers on our platform, and anyone who contacts us by phone, email, or WhatsApp.

2. Information we collect

• Identity & contact: name, phone number, email address, home address, city, and emergency contact details.
• Booking & care information:service type, visit dates, care instructions, and notes you provide about the patient's needs (which may include health-related information).
• Account & authentication: mobile number and OTP verification records for secure sign-in.
• Payment & billing: invoice details, transaction references, and billing history (payment card data is processed by third-party payment providers where applicable — we do not store full card numbers on our servers).
• Technical data: device type, browser, IP address, app version, and usage logs for security and service improvement.
• Caregiver workforce data: for assigned professionals — identity documents, background-verification status, training records, and visit logs.

3. How we use your information

We use personal data to:

• Provide, schedule, and manage home healthcare services you request
• Verify your identity and secure your account (OTP login)
• Communicate about bookings, caregiver assignments, visit updates, and support
• Process billing, invoices, and payment reconciliation
• Conduct background checks and compliance processes for caregivers
• Improve our website, apps, and service quality
• Comply with applicable laws, respond to lawful requests, and protect against fraud

4. Legal basis (India — DPDP Act, 2023)

We process personal data based on your consent (e.g. when you book care or create an account), performance of a contract (delivering services you requested), and legitimate uses permitted under the Digital Personal Data Protection Act, 2023 and related rules, including compliance with law and prevention of fraud.

5. Sharing with third parties

We may share data with:

• Assigned caregivers and nurses — only information needed to deliver your care safely
• Technology providers — cloud hosting, authentication (e.g. Supabase), analytics, and messaging infrastructure under contractual confidentiality obligations
• Payment processors — to complete transactions you authorise
• Verification partners — for background and identity checks of care professionals
• Regulators or authorities — when required by applicable law

We do not sell your personal data to third parties for marketing purposes.

6. Data retention

We retain personal data for as long as needed to provide services, meet legal and accounting obligations, resolve disputes, and enforce agreements. Booking and billing records are typically retained for the period required under Indian law. You may request deletion subject to exceptions where retention is legally required.

7. Security

We implement reasonable technical and organisational measures — including access controls, encrypted connections (HTTPS), and staff training — to protect personal data. No method of transmission over the internet is 100% secure; we encourage you to use strong device security and not share OTP codes.

8. Your rights

Under applicable Indian law, including the DPDP Act, you may have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent where processing is consent-based
• Request erasure, subject to legal retention requirements
• Nominate another person to exercise rights on your behalf in certain circumstances
• Grieve to us and, where applicable, to the Data Protection Board of India

9. Children's data

Our services may involve care for minors as patients under a parent or guardian's booking. We do not knowingly collect data directly from children without parental or guardian involvement. Contact us if you believe we have collected a child's data in error.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change, and material changes may be communicated via the website or app where appropriate.

11. Contact & data requests

For privacy questions, access requests, corrections, or complaints, contact:

Ambimed Healthcare Private Limited
Email: info@ambimed.in
Phone: +91- 9205868247