Privacy & Data Handling Policy

1Information We Collect

2How We Use Your Information

We use collected data strictly to:

• Generate and synchronize real-time clinic queue tokens.
• Display verified doctor profiles and clinic locations to patients searching for care.
• Send transactional appointment alerts and queue notifications via SMS or WhatsApp.
• Verify medical practitioner authenticity against statutory medical registers.
• Diagnose and optimize application performance and prevent fraudulent bookings.

3Data Storage & Security Practices

• Storage: Data is stored in secure cloud infrastructure (PostgreSQL databases on secured cloud servers with TLS encryption in transit).
• Sensitive Identifiers: Phone numbers and session tokens are protected using standard encryption and secure tokenization.
• Access Controls: Clinic token records and patient names are accessible only to the specific doctor and delegated clinic staff handling that day's queue.

4Third-Party Technical Integrations

To provide our core services, we utilize select technical service providers:

• SMS & OTP Services: Cloud telecommunication gateways to deliver one-time passwords and token updates.
• Cloud Storage: Secure object storage for profile and certificate images.
• Maps & Geolocation: Standard location APIs to assist patients in navigating to clinic addresses.

5Children's & Minors' Data

(a) JivniCare allows adult patients, parents, and legal guardians to book outpatient tokens on behalf of family members, including minors.

(b) Where an appointment is scheduled for a minor, the person booking represents and warrants that they are the parent or legal guardian authorized to provide the minor's name and details.

(c) JivniCare does not engage in behavioral profiling, tracking, or targeted advertising directed at children.

6Data Retention & Account Deletion Policy

When a Doctor or User requests account deletion via in-app settings:

• Immediate Actions: The clinic profile is immediately unlisted from public discovery, pending tokens are cancelled, and all active authentication sessions are revoked.
• Doctor KYC Records: Uploaded medical degrees and NMC registration certificates are moved to access-restricted cold storage and retained for one hundred eighty (180) days solely for statutory verification audit defense, after which they are permanently deleted.
• Historical Consultation Records: Past completed appointment logs (token numbers, dates, patient identifiers) are preserved in an immutable, read-only archive for three (3) years to comply with healthcare documentation and medical audit standards, after which they are permanently purged.

7Your Rights

You have the right to review the personal data you have submitted, update incomplete information, or request the deletion of your account through the designated settings menu in the application.

8Policy Modifications

We may update this Privacy Policy from time to time. The revised policy will be posted with an updated “Last Updated” date. Continued use of the platform after updates signifies acceptance of the revised practices.