Privacy Policy
Last updated: 18 August 2026
Drishya Health (“Drishya”, “we”, “us”) builds an integrated health-records and hospital platform for patients and providers in India. We take the privacy of your health information seriously. This policy explains what we collect, why, how we protect it, and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Who is responsible for your data
The data fiduciary is Drishya Health. For any privacy question or to exercise your rights, contact our Grievance Officer at privacy@drishyahealth.com.
2. Information we collect
- Identity & contact: name, date of birth, gender, phone number, email, and — if you link it — your ABHA number/address.
- Health records: conditions, medications, allergies, immunisations, lab and imaging results, vitals, appointments, prescriptions, and clinical notes created during your care.
- Documents you upload: reports, scans, and other files you add to your record.
- Consent & access records: a log of the consents you grant or withdraw and of who accessed your records, kept as a safeguard and to meet legal obligations.
- Technical data: device and app-diagnostic information needed to keep the service secure and working.
3. Why we use your information (purposes)
- To provide healthcare services and maintain your personal health record.
- If you choose to link an ABHA (Ayushman Bharat Health Account) in the future, to share records across the ABDM network — only with your explicit consent. ABDM connectivity is being developed and is not enabled by default today.
- To provide features you ask for, such as data export, reminders, and AI assistance on content you submit.
- To keep the platform safe, prevent misuse, and comply with law.
We rely on your consent as the legal basis for processing, as required by the DPDP Act. You are asked for consent through a clear, itemised notice, and you can withdraw it as easily as you gave it.
4. What we do not do
- We do not sell your personal or health data.
- We do not use your health data for advertising or share it with advertisers.
- We do not use your identifiable health data to train AI models without a separate, explicit opt-in.
5. Sharing and disclosure
We share data only:
- with healthcare providers you consent to (and, once ABDM connectivity is enabled and you link an ABHA, ABDM participants you consent to);
- with service providers who process data on our behalf under strict contractual safeguards;
- where required by law or a valid legal request.
6. Where your data is stored
Your data is hosted on cloud infrastructure located in India (Google Cloud, Mumbai region), consistent with India’s data-localisation expectations for health data. It is encrypted in transit and at rest.
7. How long we keep it
We retain health records for the periods required by applicable medical-records and legal-hold rules. When you delete your account, we erase or irreversibly anonymise your personal data except where a specific law requires us to retain certain records for a defined period. See our Data Deletion page for details.
8. Your rights under the DPDP Act
- Access: get a copy of the personal data we hold about you.
- Correction: fix inaccurate or incomplete data.
- Erasure: delete your account and data (subject to legal-hold exceptions).
- Withdraw consent: at any time, without affecting processing already done.
- Grievance redressal: raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.
You can exercise access, export, and deletion directly in the app under Settings → Privacy & data.
9. Children
Accounts for children are managed by a parent or guardian. We process a child’s data only with verifiable guardian consent and never for tracking or targeted advertising.
10. Changes to this policy
We may update this policy. Material changes will be notified in the app, and the “last updated” date above will change.
11. Contact
Grievance Officer, Drishya Health
Email: privacy@drishyahealth.com