Privacy policy

Last updated: October 2026

Vimshatika Healthcare Private Limited (“Vimshatika”, “we”, “us”) builds apps that help people find and book healthcare, and that help hospitals, doctors, labs, pharmacies, nurses and insurers serve them. This policy explains what personal data we collect, why, and the choices you have. It is written to follow India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Ayushman Bharat Digital Mission (“ABDM”) framework.

Your choice comes first

You can browse providers, book appointments, consult doctors and order services without agreeing to any optional consent. Each consent below is separate. You can grant some and decline others, and you can change your mind at any time in Settings → Privacy & Consents. Declining a consent never blocks access to the core app.

Information we collect

• Account details: your name, mobile number, email address, and sign-in method (phone, Google, Apple or email). Linking your Aadhaar is optional.
• Booking details: the providers you book, appointment times, the problem you describe, and payment confirmations. We do not store full card numbers.
• Health information, only with your consent: medical history, lab reports, prescriptions and visit details.
• Insurance details, only with your consent: your insurer and plan, used to show which providers accept it.
• Location: used, with your device permission, to show providers near you.
• Website enquiries: the details you submit in our beta sign-up form.

Optional consents

• Consent 1, storing your health data: keep your reports, prescriptions and visit details in your account as a lasting health record.
• Consent 2A, sharing with providers you book: share relevant records only with the doctor, lab, pharmacy or nurse you choose, for that service.
• Consent 2B, family-doctor access: let a doctor you name view your records on an ongoing basis. Each adult family member gives their own consent.
• Consent 3A, insurance details: store your insurance details only to show acceptance. We don’t sell insurance or process claims under this consent.
• Consent 3B, reminders: send medicine, follow-up and appointment reminders on the channels you choose. Essential service messages, such as booking confirmations, are always sent.
• Consent 4, ABHA and ABDM: link your ABHA and exchange records through ABDM. Each exchange runs through ABDM’s own consent step, where you set what is shared, with whom and for how long.

How we use your information

We use your information only to provide the services you request, for the purposes you consent to, to keep the app secure, and to meet our legal obligations. We do not use your health data for advertising, and we never sell your personal or health data.

Who we share it with

• Providers you book, and only with your consent where health records are involved.
• Service providers who help us run the app, such as cloud hosting, messaging and payments, under contracts that restrict them to our instructions.
• Government authorities where the law requires it.

How we protect it

Your data is stored on secure servers in India and encrypted in transit and at rest. Access is limited to authorised personnel and the providers you choose. We keep data only as long as needed for the purpose you agreed to, or as the law requires, and then delete or anonymise it.

Your rights

• Access a summary of the personal data we hold about you.
• Correct, complete or update your data.
• Erase your data, unless the law requires us to keep it.
• Withdraw any consent at any time. Withdrawal stops future use for that purpose.
• Nominate someone to exercise your rights if you are unable to.
• Raise a grievance with us, and if unresolved, with the Data Protection Board of India.

Children

For users under 18, we require verifiable consent from a parent or legal guardian, and we don’t track or target children with advertising.

Grievance officer

For any privacy question, request or complaint, contact our Grievance Officer at contact@vimshatika.com with the subject “Privacy”. We aim to respond within 7 days.

Changes to this policy

We’ll update this page if our practices change, and notify you in the app before any change affects how we use your data.