Legal
Privacy Policy
Last updated 28 October 2026
Draft for launch preparation. Have qualified counsel review it against current Indian data protection requirements (including the DPDP Act and its rules) before commercial use.
In short
Doctor Ping helps clinics schedule patient follow-up visits and remind patients to return. It is not a medical record system, and it is designed to hold as little as possible.
- Minimal by design: name, mobile number and visit dates. No diagnoses, prescriptions or medical history.
- Kept apart: each clinic's data is separated on the server. Other clinics cannot see it.
- Consent first: reminders go only to patients whose consent is recorded, and they can opt out.
- You stay in control: archive, correct or ask us to delete data at any time.
What we collect
- Clinic and staff: clinic name, doctor name, phone, email, city, time zone. Used to run the account and sign you in.
- Patient details: name, mobile number, last visit date, a short non-clinical note. Used to schedule and track follow-up visits.
- Follow-ups: due dates, type, status and the history of changes. Used to show who is due, confirmed, visited or missed.
- Consent: whether a patient agreed to reminders, and when. Used to send reminders only with permission.
- Reminders: the message prepared, when it was opened, and its status. Used to prevent duplicates and keep a record.
- Activity log: sensitive changes to consent, phone numbers and staff access. Used to protect against misuse and resolve disputes.
We do not collect diagnoses, prescriptions, treatment details or payment card numbers, and clinics must not enter them in notes. We do not sell personal data or use it for advertising.
Who can see it
Only authorised staff of the clinic that entered the data. The server checks the signed-in person's clinic on every request, so one clinic cannot read another's records, even by changing an address.
The Doctor Ping team works with clinic-level totals such as patient and reminder counts, and does not browse patient records in normal operation. The clinic decides why and how patient data is used; Doctor Ping processes it on the clinic's behalf.
Our hosting and database providers handle data on our instructions to run the service. We will list them here before launch.
Reminders and consent
Clinics should obtain the patient's agreement before sending reminders. Doctor Ping records consent with its date and blocks reminders for patients without it. A patient can opt out at any time by telling the clinic, which records the opt-out.
Messages contain only the patient's name, the clinic name, the follow-up date and the clinic's phone number. In the current version, a prepared WhatsApp message opens on the clinic's own device and the clinic sends it; WhatsApp's own terms and privacy policy then apply to that message.
How we protect it
- Data travels over encrypted (HTTPS) connections.
- Passwords are stored as one-way hashes, never in plain text.
- Sessions expire, and repeated wrong sign-in attempts are rate-limited.
- Removed staff and suspended clinics lose access on their next request.
- Consent, phone-number and staff-access changes are written to an activity log.
No system is perfectly secure. If a breach affects your data, we will tell the affected clinics promptly.
Keeping and deleting
- Active patients: kept while the clinic's account is active.
- Archived patients: hidden from lists but kept until the clinic asks for deletion. Nothing is removed by accident.
- Closed accounts: deleted on request after the account is closed.
- Reset and verification links: expire automatically and work only once.
Your rights
Patients and clinics can ask to see, correct or delete personal data, and to withdraw consent. Patients should start with their clinic, which can make most changes in Doctor Ping directly. If you cannot reach the clinic, write to us and we will help.
We will respond within a reasonable time and tell you if we cannot act on a request, and why.
Questions about privacy
Write to us and a person will reply. Please do not include patient medical details in your message.