What we hold, and what you can do about it

The hospital you are treated at decides what goes into your medical record and why. Hosvi provides the software that holds it and acts on that hospital's instructions. In the language of India's Digital Personal Data Protection Act, the hospital is the Data Fiduciary and we are its Data Processor.

When you create a Hosvi account without going through a hospital, that account and anything you keep in it are yours and ours alone until you choose to share it with a hospital.

Who you are: your name, date of birth, sex, mobile number, email address if you give one, and the area you live in. A date of birth is required because age decides which screenings are due and how medicines are dosed.

Your care: appointments, prescriptions, laboratory results, scan reports, admissions, bills and payments — whatever the hospitals treating you record.

What you add yourself: documents and photographs you upload, symptoms you log, and, in the Women's Health space, cycle, fertility, pregnancy and menopause entries.

How you use the app: sign-in times, the device type, and an audit record of who opened your record and when. We do not track you across other apps or websites, and we run no advertising identifiers.

Cycle, fertility, pregnancy and menopause entries are excluded from family access by default. Somebody who can see your other records cannot see these.

A clinician sees them only while you have switched sharing on, and you can switch it off at any time.

A partner sees only what you have explicitly allowed, one category at a time, and you can end that at any time.

Notifications about this space say only that you have an update, unless you choose more detailed wording yourself.

We never use reproductive-health information to target anything at you, and we never sell it.

The hospital treating you sees the record it holds about you. It cannot see records held by a different hospital.

Family members see only what you have granted, and a grant can be withdrawn.

Our own staff do not browse patient records. Access for support is time-limited, requires a reason, and is written to an audit log that the hospital can read.

We share with others only where the law requires it, or where a service is needed to run the product: messaging and email delivery, payment processing, cloud hosting and document reading. Those providers act on our instructions and may not use your information for anything else.

Patient data is stored in India, in the Mumbai region of Amazon Web Services. It is encrypted on disk with keys held per hospital, and encrypted in transit.

Documents you upload are stored separately from the database and are served only to a signed-in person entitled to see them.

Clinical and financial records are kept for as long as the hospital's own obligations require. Medical records in India are commonly retained for years after the last visit, and some, such as records relating to a birth, longer still.

Operational data is cleared on a schedule: one-time sign-in codes within a day, delivery logs at ninety days, expired sessions at thirty.

Removing your account removes your access. It does not delete the hospital's medical record of your treatment, which the hospital is required to keep.

See everything held about you, and get a copy of it, from the portal.

Correct anything that is wrong, or ask the hospital to correct what only it can change.

Withdraw a share — from a family member, a partner or a clinician — at any time.

Choose plainer notifications, so nothing sensitive appears on a lock screen.

Ask us to delete your account. Write to the address below and we will confirm what can be removed and what the hospital must keep.

A child's record is held by a parent or guardian and cannot be claimed by the child. At eighteen it becomes theirs, and the guardian's access ends unless they renew it with the young adult's consent.

If this policy changes in a way that affects what we do with your information, we will tell you in the app before it takes effect.