Privacy Policy

1. Introduction

This Privacy Policy describes how HMS (Hospital Management Service) (referred to as "we", "our", "us") collects, uses, stores, and protects the personal information of users (referred to as "you", "your") who use our mobile application available on the Google Play Store.

By downloading, accessing, or using the HMS application, you agree to the terms and conditions of this Privacy Policy. If you do not agree with any part of this policy, please do not use our application.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Email address, name, and password (provided during registration)
• Profile Information: Gender, age, postal address, and phone number
• Profile Photo: Uploaded by you from your camera or device gallery
• Medical Documents: Documents you choose to upload for medical purposes
• Appointment Details: Doctor selection, appointment date and time, and hospital information

2.2 Information Collected Automatically

• Device Information: Device model, operating system version, and basic technical information required for app functionality
• Usage Data: Basic app interaction data to improve our services and user experience

2.3 Payment Information

We use UPI (Unified Payments Interface) for processing payments for healthcare services. We do NOT store or have access to your bank account numbers, UPI PINs, card numbers, or any sensitive financial credentials.

3. How We Use Your Information

We use the collected information for the following purposes:

• To create and manage your user account
• To verify your identity using One-Time Passwords (OTP) sent to your email
• To process and manage doctor appointment bookings
• To send appointment confirmation and reminder emails
• To manage hospital services, prescriptions, and medical records
• To process payments through UPI
• To provide customer support and respond to your inquiries
• To improve and enhance our application's functionality and user experience
• To comply with applicable legal and regulatory requirements

4. Permissions We Request

To provide you with the best possible experience, our application requires the following permissions:

All permissions are used strictly for the stated purposes and nothing else.

5. Sharing of Information

We do NOT sell, rent, or trade your personal information to third parties. Your trust is our priority.

We may share your information only in the following circumstances:

• With Hospitals and Healthcare Providers: To facilitate your appointments and healthcare services
• With Payment Service Providers: To process UPI payments (only transaction-related data is shared, never your financial credentials)
• With Legal Authorities: When required by law, regulation, or legal process
• With Service Providers: Trusted partners who assist us in operating the app (e.g., email service providers) and are bound by confidentiality agreements

6. Data Storage and Security

• Your data is stored on secure servers with restricted access
• Authentication tokens and profile data may be stored locally on your device using secure local storage
• We use industry-standard security measures to protect your personal information
• We do not store your payment credentials, passwords, or financial details on our servers
• You are responsible for keeping your login credentials confidential and secure

7. Data Retention

We retain your personal information only for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account or request data deletion, we will securely remove your personal information from our servers within a reasonable time period, except where we are required to retain it by law.

8. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information in your profile
• Deletion: Request deletion of your account and personal data
• Withdrawal of Consent: Withdraw consent for data processing at any time
• Portability: Request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at the email address provided in the Contact section below.

9. Children's Privacy

Our application is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If you believe a child has provided us with personal information, please contact us immediately, and we will take steps to remove such information from our systems.

10. Third-Party Services

Our application integrates with the following third-party services:

• Google Play Services: For app distribution and core functionality
• UPI Applications (Google Pay, PhonePe, Paytm, etc.): For payment processing
• Email Services (Gmail SMTP): For sending OTPs, appointment confirmations, and notifications

These third-party services have their own privacy policies. We encourage you to review their privacy policies to understand how they handle your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: