Privacy policy

Only what the service needs to work:

• Your phone number. It is the account. We use it to sign you in and to match reports to you.
• Your name and date of birth. Given once when you first sign in, so that a hospital handing over a report is confident it is going to the right person.
• Your medical reports. The files themselves, plus the title, the type of test, the date and which institution issued them.
• A record of access. Each time a report is uploaded, viewed or withdrawn we log who did it and when.

We do not ask for a citizenship number, an address, an email or a payment method. The app requests no contacts, no location and no photo library access.

You can. So can the hospital or laboratory that created a particular report — they keep access to what they issued, the way they keep their own files. Nobody else sees it: not other institutions, not other patients, and not advertisers.

Our own staff do not browse patient records. Access to the production systems is limited to the engineers who operate them, and it is used for keeping the service running, not for reading reports.

We do not sell your data, and we never will. There is no advertising in Baidya ID and no analytics profile built from your health information.

Report files are held in Google Cloud Storage in Google's Mumbai region, in India. The database that holds your name, number and the list of your reports runs on Neon in Singapore. Sign-in codes are sent through Firebase Authentication, operated by Google.

Everything is encrypted in transit, and encrypted at rest by the storage providers. Passwords for institution staff are stored only as bcrypt hashes; your own account has no password at all, only the code sent to your phone.

Medical reports are meant to last — a test from five years ago is often exactly what a doctor needs — so we keep them until you ask us to delete them.

An institution can withdraw a report it uploaded in error, but only within 24 hours of uploading it. After that it is yours and they cannot remove it.

When a file is deleted, our storage keeps a recoverable copy for up to 90 days to protect against mistakes and failures, after which it is removed permanently.

• See everything we hold. The app shows every report on your number. Ask us and we will send the rest of the record too.
• Correct your details. Write to us if your name or date of birth is wrong; we verify before changing it, because reports are matched on it.
• Delete your account and data. See Delete your Baidya ID account.

A parent or guardian may hold a child's reports on their own number. We do not knowingly create accounts for children under 16 in their own name.

If this policy changes in a way that affects you, we will say so in the app before the change takes effect. Questions, complaints or requests go to legal@baidyaid.com.