1. Core Privacy Commitments
MEDVAULT is built on the fundamental principle that medical information deserves a different level of care. Unlike standard consumer cloud services, personal health data is sensitive, immutable, and strictly confidential.
Zero Unsolicited Sharing
We never sell, rent, monetize, or broker medical data or patient contact details to pharmaceutical companies or advertisers.
Patient-Led Authorization
Doctors, nurses, and clinics cannot view your historical vault without active consultation tokens or time-limited OTP grants.
Cryptographic Audit Trail
Every view, upload, prescription issue, and access request generates an immutable audit record visible to you.
2. Information We Collect
To provide personal health record management and hospital care workflows, MEDVAULT processes the following categories of information:
- Account & Identity Attributes: Full legal name, date of birth, gender, 10-digit mobile phone number, unique Medical ID (e.g.
MV-7X92-K4P8), and optional ABHA Health ID. - Medical Records & Diagnostic Files: Lab test reports, radiology scans, physician consultation summaries, discharge notes, medication lists, and medical history uploaded by you or generated during visits.
- Hospital OPD Queue & Scheduling Data: Walk-in consultation token numbers, assigned consultation cabins, visit timestamps, and chief health complaints.
- Billing & Financial Ledger: Itemized consultation invoices, payment transaction modes (Cash, UPI / QR, Card POS), and receipt identifiers. Credit card numbers or bank account passwords are never stored on our servers.
- System Audit Logs: Access timestamps, remote IP addresses, and operational payloads to verify platform security and detect unauthorized access.
3. How Clinical Data is Used
All collected data is utilized exclusively for clinical operations and personal medical management:
- Coordinating patient visits across outpatient departments, doctor consultation cabins, and emergency triage.
- Displaying health timelines and longitudinal medical history for authorized healthcare providers.
- Dispensing e-prescriptions and verifying pharmaceutical drug interactions.
- Generating official hospital receipts and billing records for insurance and reimbursement purposes.
4. Doctor Access & Consent Management
MEDVAULT implements strict access segregation. A licensed doctor or hospital employee cannot arbitrarily search and browse patient medical lockers without prior authorization:
When a patient arrives for consultation, access is granted strictly for the active session window. If a doctor requests remote access to your historical medical vault, a 6-digit confirmation token is generated and requires patient approval. Access can be revoked by the patient at any time from the Doctor Access dashboard.
5. Lobby Queue Privacy & Public TV Displays
Hospital waiting rooms and reception display monitors broadcast token numbers and cabin announcements in real time. To protect patient anonymity in public lobbies:
- Public TV queue displays only broadcast Token Numbers (e.g.
#12), Cabin designations (e.g.Cabin 3), and Department names. - Patient names may be masked (e.g. R**** K****) on public display units to avoid disclosing patient presence in sensitive departments (such as Psychiatry, Oncology, or Reproductive Health).
- Medical history, diagnostic summaries, and prescription details are never shown on public monitors.
6. Encryption & Storage Standards
All communication between your browser, hospital workstations, and MEDVAULT servers is encrypted via TLS 1.3 / HTTPS. Stored files are protected with AES-256 bit encryption at rest.
Database passwords and 4-digit PINs are securely hashed using modern cryptographic algorithms (`password_hash` with Argon2/Bcrypt) with automated rate-limiting to prevent brute force attacks.
7. AI Document Extraction Safeguards
MEDVAULT offers smart clinical extraction powered by Google Gemini to convert scanned lab reports and handwritten prescriptions into searchable health timelines.
- No patient identity tokens, phone numbers, or credentials are attached to extraction payloads sent to AI endpoints.
- Clinical documents are processed strictly in transient memory for optical analysis and structured field extraction.
- Your personal health files are never used to train public generative foundation models.
8. Your Rights & Data Portability
Under applicable healthcare data privacy guidelines, you hold full authority over your records:
- Right to Access: View all documents, clinical consultations, and billing receipts at any time.
- Right to Export: Download your complete medical vault in standardized ZIP format via the Patient Export module.
- Right to Access History: Inspect every instance of a doctor or clinic viewing your files.
- Right to Deactivation: Request account deactivation and removal of uploaded health records from active clinical routing.
9. Contact & Data Protection Officer
For questions regarding this privacy policy, data access audits, or deactivation inquiries, contact our healthcare data compliance team: