Privacy Policy

NOD Healthcare Technologies Pvt Ltd ("NOD", "we") operates the NOD Care patient app, the NOD Care Partner app for doctors, clinics, hospitals, caretakers, diagnostic centres and pharmacies, and this website. NOD is the data fiduciary for the personal data described here. Healthcare providers you book through NOD are responsible for the care they deliver and for the clinical records they keep.

We collect only what we need to run the service:

• Account details: your mobile number (used to sign in with a one-time code), name, email, date of birth, gender and an optional profile photo.
• Booking details: the provider, date and time you choose, the patient you book for (name, age, gender, relation), the reason for the visit and any notes you add.
• Health information you choose to share: symptoms, medical history, prescriptions you upload for medicines, lab reports and medical records you store in the app, and visit summaries or prescriptions your provider records after a visit.
• Addresses and location: saved addresses for home visits and deliveries, and, only if you allow it, your device's approximate location while using the app so we can show nearby providers. We do not track location in the background.
• Payments: amounts, payment status and references. Card, UPI and bank details are entered directly with our payment partner, Razorpay; NOD never sees or stores them.
• Device and usage data: a push notification token, app version, device type, and technical logs (IP address, request times, errors) used for security and reliability.

• To create and secure your account and verify your number.
• To send your booking request to the provider you choose, and to tell you when they accept, decline or cancel it.
• To process payments, refunds and pay-at-clinic records.
• To deliver medicines and arrange home visits at the address you provide.
• To send service notifications (booking updates, reminders, payment receipts).
• To provide support, prevent fraud and misuse, and meet legal obligations.
• To improve NOD using aggregated, de-identified statistics. We do not sell your data and we do not use your health information for advertising.

• The provider you book: the patient details, visit reason and history you share, so they can prepare for and deliver your care.
• Service partners acting on our instructions: Razorpay (payments), MSG91 (SMS one-time codes), Google Firebase (push notifications), Resend (email), and our cloud hosting and storage providers.
• Authorities, when required by law or to protect someone's safety.

Partners may process data on servers outside India where permitted by law, with safeguards required by our contracts with them.

We keep your account data while your account is active. When you delete your account we erase your profile, addresses, stored medical records and notifications straight away. Records of completed transactions (amount, date, provider, and an anonymised patient reference) are retained as required by tax and accounting law. Security logs are kept for up to 180 days.

Under the Digital Personal Data Protection Act, 2023 you can:

• Access and correct your information from the Profile screen in the app.
• Withdraw consent for location or notifications in your phone's settings.
• Delete your account in the app (Profile → Settings → Delete account) or request deletion online.
• Nominate a person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and then with the Data Protection Board of India.

Data is encrypted in transit (HTTPS), access is restricted by role, one-time codes and session tokens are stored only as secure hashes, and administrative actions are audited. No system is perfectly secure; if a breach affects you we will notify you and the authorities as required by law.

NOD accounts are for adults (18+). A parent or guardian may book care for a child from their own account and is responsible for the information they share about the child.

Write to our Grievance Officer at hello@nodapp.in with "Privacy" in the subject. We acknowledge grievances within 24 hours and resolve them within 15 days. We may update this policy; we will notify you in the app before material changes take effect.