Privacy Policy

Learn how we protect and manage your personal information.

Medoho Pvt. Ltd. (“Medoho”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Medoho collects, uses, stores, shares, and protects personal information when you use the Medoho website, web portal, patient application, healthcare management platform, or related services.

By using Medoho, you acknowledge that you have read and understood this Privacy Policy.

1. About Medoho

Medoho is a healthcare management platform designed for doctors, clinics, hospitals, laboratories, pharmacies, staff, and patients.

Medoho provides tools for:

OPD management
IPD management
Patient registration and history
Appointments and follow-ups
Digital prescriptions
Laboratory reports
Pharmacy and inventory management
Billing and payment records
Staff access and permissions
Branch management
Reports and healthcare operations

When a clinic or hospital uses Medoho to manage patient information, that clinic or hospital may decide why the information is collected and how it is used. Medoho may process that information on behalf of the clinic or hospital to provide the agreed services.

For information that Medoho collects directly, such as account details, support requests, security information, billing information, or website information, Medoho may determine how and why that information is processed.

The exact responsibilities of Medoho and each clinic or hospital may also depend on the applicable agreement between the parties.

2. Information We Collect

Depending on how you use Medoho, we may collect the following information.

Personal and Profile Information this may include:

Full name
Date of birth
Age
Gender
Blood group
Profile photograph
Mobile number
Email address
Residential address
City, state, and country
Emergency contact details
Relationship with emergency contact

Account and Login Information this may include:

Username
Login information
Password information in protected form
PIN or security information
User role
Staff designation
Clinic, hospital, or branch details
Account status
Login and access history

Medoho does not intend to store passwords in plain text.

Healthcare and Medical Information

When entered or uploaded by you, a doctor, clinic, hospital, laboratory, pharmacy, or authorised staff member, this may include:

Patient history
Consultation details
Symptoms
Diagnosis information
Prescriptions
Medication details
Laboratory reports
Imaging reports
Vital readings
Allergies
Medical conditions
Treatment information
Admission and discharge information
Nursing and care information
Doctor notes
Follow-up information
Uploaded medical documents
Insurance or claim-related information, where enabled

You should only enter or upload information that is necessary for healthcare, administrative, billing, or related purposes.

Appointment and Communication Information this may include:

Appointment details
Doctor and clinic information
Appointment status
Follow-up reminders
Messages between patients and healthcare teams
Video consultation information, where enabled
Notifications and communication preferences

Billing and Payment Information this may include:

Bills
Invoices
Receipts
Payment status
Refund information
Transaction reference numbers
Subscription and plan information
Tax-related billing information

Payment details may be processed by third-party payment service providers. Depending on the payment method, Medoho may receive transaction status or reference information instead of complete card or banking details.

Technical and Device Information

When you use Medoho, we may collect:

IP address
Browser type
Device type
Operating system
Application version
Login date and time
Usage activity
Error reports
Security logs
Device identifiers
Network information
Language and time-zone settings

We may collect location information only where it is necessary for a feature and where the feature is enabled.

Information You Provide to Support

If you contact us, we may collect:

Your name
Contact details
Support request
Feedback
Screenshots or attachments
Communication history
Information required to resolve your issue

3. How We Collect Information

We may collect information:

Directly from you
From a doctor, clinic, hospital, laboratory, pharmacy, or authorised staff member
When you create or update an account
When you book or attend an appointment
When healthcare records are created or uploaded
When you make or receive a payment
When you contact Medoho support
Automatically through the website, web portal, or application
From service providers that support Medoho
From integrations or connected services that you choose to use

If another healthcare organisation creates your account or enters your information, that organisation may provide you with additional privacy information.

4. How We Use Information

We may use personal information to:

Create and manage user accounts
Provide the Medoho platform and its features
Manage patients, doctors, clinics, hospitals, and branches
Schedule and manage appointments
Create and share prescriptions
Store and provide access to patient history
Manage laboratory reports
Manage pharmacy and inventory activities
Prepare bills, invoices, and receipts
Process payments and subscriptions
Send appointment and service notifications
Support communication between patients and healthcare teams
Manage user permissions and role-based access
Maintain audit trails and security records
Provide customer support
Detect and prevent unauthorised access, misuse, fraud, or security incidents
Improve the performance and reliability of Medoho
Understand how the platform is used
Develop and improve features
Comply with applicable laws, legal requests, and contractual obligations
Protect the rights, safety, and property of Medoho, users, clinics, hospitals, and patients

Where an AI-assisted feature is available, information submitted to that feature may be processed to provide the requested assistance. AI-generated information is for assistance only and should not be treated as a medical diagnosis or a replacement for a qualified healthcare professional.

We may use information in an aggregated or de-identified form for analytics, reporting, research, service improvement, and business planning. Aggregated or de-identified information should not reasonably identify an individual.

5. Consent and Legal Basis

Medoho processes personal information only for lawful and specified purposes.

Depending on the situation, we may process information:

With your consent
To provide a service requested by you
To perform a contract
To provide healthcare-related services through a clinic or hospital
To process payments or subscriptions
To protect security and prevent fraud
To comply with legal obligations
To respond to emergencies or protect health and safety
For other purposes permitted by applicable law

Where consent is required, we will provide information about what data is being collected and why it is needed.

You may withdraw consent where consent is the basis for processing. Withdrawal of consent will not affect processing that was already completed lawfully before withdrawal.

Withdrawal may also affect our ability to provide certain features or services.

6. How Information Is Shared

We do not sell personal information or medical records.

We may share information in the following situations.

Clinics, Hospitals, Doctors, and Staff

Information may be made available to the clinic, hospital, doctor, laboratory, pharmacy, or staff member responsible for providing or managing the relevant service.

Access should be based on assigned roles, permissions, branch access, and legitimate healthcare or administrative requirements.

Branches and Healthcare Teams

Where a clinic or hospital operates multiple branches, information may be accessed only by authorised users who have the required permissions.

Branch administrators and staff may have limited access based on their assigned branch and role.

Service Providers

We may use trusted service providers for:

Cloud hosting
Data storage
Security and monitoring
Payment processing
Email delivery
SMS and notifications
Customer support
Analytics
Video communication
Backup and recovery

These service providers may process information only for the services they provide to Medoho and must be required to protect the information.

Legal and Regulatory Requirements

We may disclose information when reasonably necessary to:

Comply with law
Respond to a valid legal request
Comply with a court, government, or regulatory order
Prevent fraud or misuse
Investigate security incidents
Protect the rights and safety of users or the public
Enforce our agreements

Business Transfers

If Medoho is involved in a merger, acquisition, restructuring, investment, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and reasonable privacy protections.

7. Data Security

Medoho uses reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

Role-based access controls
User authentication
Permission management
Audit logs
Secure data transmission
Monitoring and security alerts
Backups and recovery processes
Staff access controls
Vendor and service-provider controls
Internal security procedures

No method of storing or transmitting information is completely secure. You are responsible for keeping your login details confidential and for informing Medoho or your healthcare organisation if you believe your account has been accessed without permission.

8. Data Breach and Security Incidents

If Medoho becomes aware of a personal data breach or security incident, we will investigate the incident and take reasonable steps to control, contain, and reduce its impact.

Where required by applicable law, we may notify affected users, clinics, hospitals, regulators, or other relevant parties.

The notification may include information about the nature of the incident, the information affected, actions taken, and steps that users can take to protect themselves.

9. Data Retention and Deletion

We retain personal information only for as long as reasonably necessary for:

Providing the requested services
Maintaining healthcare and billing records
Meeting contractual obligations
Complying with legal or regulatory requirements
Resolving disputes
Preventing fraud or misuse
Maintaining security and audit records
Protecting our legal rights

Medical records may need to be retained by the relevant clinic, hospital, doctor, or healthcare organisation for clinical, legal, or regulatory reasons.

Closing an account or requesting deletion does not always mean that all information can be immediately deleted. Some information may need to be retained under law, contract, healthcare requirements, financial requirements, or security requirements.

When information is no longer required, we may delete it, anonymise it, or securely restrict access to it.

10. Your Rights and Choices

Subject to applicable law, you may have the right to:

Ask what personal information is being processed
Request access to your personal information
Request correction of inaccurate or incomplete information
Request deletion of information where legally permitted
Withdraw consent where consent is the basis for processing
Request information about how your data is used
Raise a privacy complaint
Nominate another person to exercise permitted rights on your behalf
Opt out of optional marketing communications

If your information is maintained by a clinic or hospital, your request may need to be handled by that organisation because it may control the healthcare record.

Medoho may assist with the request where the relevant information is stored or processed through the Medoho platform.

You can use the following options where available:

Manage My Data

Use this option to request access, correction, or information about your personal data.

Request Account Deletion

Use this option to request closure or deletion of your Medoho account. Some information may be retained where required by law, healthcare obligations, contracts, or security requirements.

Contact Privacy Team

Use this option to contact Medoho regarding privacy questions, data requests, or complaints.

We may ask for reasonable information to verify your identity before completing a request.

11. Children and Minors

Medoho is not intended for children to independently create accounts or use healthcare services without appropriate involvement of a parent, legal guardian, clinic, hospital, or authorised healthcare professional.

A clinic or hospital may create or maintain a patient record for a minor as part of providing healthcare services.

Where required, we will seek consent or involvement from a parent or lawful guardian.

If you believe that a child’s information has been collected or used improperly, please contact us.

12. Cookies, Notifications, and Similar Technologies

Medoho may use cookies, local storage, application technologies, logs, and similar tools to:

Keep users signed in
Maintain security
Remember preferences
Improve performance
Understand platform usage
Identify errors
Provide notifications
Measure product performance

You may be able to control cookies and notifications through your browser or device settings. Disabling certain technologies may affect the availability or performance of some features.

Optional marketing communications may be controlled through the unsubscribe option provided in the communication or by contacting us.

13. Third-Party Services and External Links

Medoho may connect with or use third-party services, such as payment providers, cloud services, messaging providers, analytics tools, video services, or other integrations.

Third-party services may have their own privacy policies and terms. Medoho is not responsible for the privacy practices of third-party services that it does not own or control.

You should review the privacy information of any third-party service before using it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we may update the “Last Updated” date and policy version shown at the top of this page.

If a change is important, we may notify users through the Medoho platform, email, application notification, or another appropriate method.

Your continued use of Medoho after the updated Privacy Policy becomes effective means that you acknowledge the updated policy, subject to any consent or notice requirements under applicable law.

15. Contact and Privacy Complaints

If you have questions, requests, or complaints about this Privacy Policy or the handling of your personal information, please contact us.

Medoho Pvt. Ltd.

214–215, Pratik Mall, Service Road,

Gandhinagar, Gujarat – 382426, India

Phone: +91 63582 92566

Email: enquiry@medoho.com

Website: www.medoho.com

Privacy Contact Email: enquiry@medoho.com

When contacting us, please include your name, contact details, the nature of your request, and any information needed to help us understand the issue.

We may request identity verification before responding to a data request.

16. Important Notice

Medoho is a healthcare management technology platform. Medoho does not replace a doctor, hospital, laboratory, pharmacy, emergency service, or other qualified healthcare professional.

Medical decisions should be made by the responsible healthcare professional or healthcare organisation.

In an emergency, contact the appropriate emergency service or visit the nearest hospital.