Privacy policy
Clinic Care Assistant is software used by clinics to follow up with their patients on WhatsApp. It is run by an independent developer in India and is not yet a registered company. It is not a clinic and does not give medical advice.
This policy explains what information the service handles, why, and the choices patients have. It is written with India's Digital Personal Data Protection Act, 2023 in mind.
Who is responsible
Each clinic that uses Clinic Care Assistant decides why patient information is collected and is responsible for it. Clinic Care Assistant processes that information on the clinic's behalf, only to provide the service described here.
What we collect
- Name, age, sex and WhatsApp number, given by the clinic or by the patient
- Visit and appointment details
- Prescription details entered or confirmed by clinic staff, such as diagnosis, medicines and follow-up date
- Messages patients send to the clinic on WhatsApp, and replies from clinic staff
- Message delivery status provided by WhatsApp
- For clinic staff: the name they sign in with, and a log of dashboard access
How we use it
- To send the patient their prescription summary and follow-up check-ins
- To remind patients of follow-up visits and book them
- To alert the doctor when a reply suggests the patient needs attention
We do not sell personal data, use it for advertising, or share it with anyone other than the patient's clinic and the service providers listed below. Messages do not give medical advice; all medical decisions are made by the doctor. In an emergency, call 108 or go to the nearest hospital.
Automated processing
Replies are sorted by fixed word rules (for example "worse", "rash" or "chest pain") so the doctor can see who needs attention first. The rules only flag replies; they never decide treatment. Prescription photos can be read by an AI model to fill in the visit form, and clinic staff check every field before anything is sent to the patient.
Consent
Patients are asked for consent in the first WhatsApp message. They can withdraw it at any time by replying STOP, after which no further messages are sent. Replying START turns messages back on.
Service providers
- Meta (WhatsApp Business Platform) delivers messages between the clinic and the patient.
- Anthropic reads prescription photos when a clinic uses the photo feature. Photos may be processed outside India. This service does not keep the photo after reading it.
Where data is stored and how it is protected
During the pilot, data is stored in India, encrypted, on equipment controlled by the developer. Each clinic sees only its own patients, staff must sign in, and every dashboard access is logged. Webhook messages from WhatsApp are checked for Meta's signature before they are accepted.
How long we keep it
Data is kept for as long as the clinic uses the service, or until the patient or the clinic asks for it to be deleted.
Your rights and data deletion
Patients can ask to see, correct or delete their information. To delete your data:
- Send DELETE MY DATA on WhatsApp to the clinic's number, or to the number below, or
- Ask your clinic directly.
Messages stop immediately. Your records are deleted within 30 days and we confirm on WhatsApp.
Changes
If this policy changes, the new version will be posted on this page with a new effective date.