Privacy Policy
Effective Date: June 2026 (v3 — adds DPDP Act 2023 & Grievance Officer clauses)
1. Introduction
Doctotalk is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal and medical information.
2. Compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act)
Doctotalk processes your personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023. We process personal data on the basis of your consent or for legitimate uses permitted by the Act, and only for the purposes described in this policy.
As a Data Principal, you have the right to:
- Obtain a summary of the personal data we process about you and how we process it.
- Request correction, completion, updating, or erasure of your personal data.
- Nominate another individual to exercise your rights in the event of your death or incapacity.
- Readily available means of grievance redressal (see the Grievance Officer section below).
- Withdraw your consent at any time, subject to our legal obligation to retain certain medical and financial records.
3. User-Generated Content (UGC) and Doctor Responsibility
The Platform hosts user-generated video and text content uploaded by doctors. Doctors are solely responsible for ensuring their content does not contain personally identifying information about patients or third parties without consent. Doctotalk acts as a hosting intermediary and reserves the right to remove any content that violates our Community Guidelines or applicable privacy law.
4. Information We Collect
Personal Information
- Name, email address, phone number, date of birth, gender
- Profile photographs (for Doctors)
- Device information and push notification tokens
Medical Information
- Symptoms and health concerns shared during consultations
- Consultation chat messages
- Prescriptions and medical recommendations
Financial Information
- Wallet transaction history
- Payment information processed through Razorpay or Apple In-App Purchase (we do not store card details)
5. How We Use Your Information
- To facilitate teleconsultations between Users and Doctors
- To process payments and wallet transactions
- To verify Doctor credentials
- To send notifications about consultations and account activity
- To detect and prevent fraud and unauthorized access
6. Data Security
- All data is transmitted using encryption (HTTPS/TLS).
- Passwords are hashed using bcrypt.
- OTP codes are hashed before storage and expire after 5 minutes.
- Access to data is restricted through role-based access controls.
7. Third-Party Integrations
- Agora: For real-time video and audio communication during consultations.
- Firebase Cloud Messaging (FCM): For delivering push notifications.
- SendGrid: For sending transactional and system emails.
- Razorpay / Apple IAP: For processing payments and wallet recharges per PCI DSS standards.
- Cloudflare R2: For secure storage of uploaded documents and videos.
8. Content Removal Rights
If you believe any content on the Platform infringes your privacy or contains your personal information without consent, you may submit a report through Settings → Report a concern or email privacy@doctotalk.com. We will review and, where appropriate, remove such content within a reasonable time.
9. Platform Liability Limitation
To the maximum extent permitted by law, Doctotalk is not liable for the content of Doctor-uploaded videos, chat messages, or prescriptions. Doctors are independently responsible for the privacy compliance of any content they share through the Platform.
10. Data Retention
- Consultation records are retained as required by medical record-keeping laws.
- Financial records are retained as required by tax regulations.
- You may request deletion of your account, subject to legal requirements.
11. Your Rights
- Access your personal data through your profile.
- Request correction of inaccurate information.
- Request deletion of your account and data.
- Opt out of marketing communications.
12. Grievance Officer
In accordance with applicable law, you may contact our Grievance Officer with any complaint regarding the processing of your personal data:
- Email: grievance@doctotalk.com
We acknowledge every grievance within 24 hours of receipt and work to resolve it within the timelines required by applicable law.
13. Contact
For privacy inquiries, contact us through in-app support or email privacy@doctotalk.com.
