MedicDay

Privacy policy

Last updated: 20 October 2026

MedicDay is provided by YRO Systems Private Limited, corporate office 17 Swamys Square, 3rd Cross Street, Vijayanagaram, Velachery 600042. This policy explains what personal data MedicDay handles, why, who else receives it, and your rights under India's Digital Personal Data Protection Act, 2023.

1. Two roles

  • For patients' and customers' records, the clinic or pharmacy you visit decides what is recorded and why. MedicDay processes those records on its behalf, only to provide the service. Questions about your health record are best sent to your clinic or pharmacy first.
  • For account holders, partners and website visitors, MedicDay decides how their data is used, as set out below.

2. What we handle

  • Clinic and pharmacy accounts: name, mobile number, email, the clinic's or pharmacy's details (address, registrations, GSTIN), the team's names and roles, sign-in times, and whether MedicDay is opened from a phone's home screen. Bank and KYC details for online payments go straight to the payment gateway; we keep only a hint for display.
  • Patients' and customers' records, kept by the clinic or pharmacy: name, mobile number, age or date of birth, gender, visits and bookings, consultation notes, diagnoses, prescriptions, bills, payments, and survey answers.
  • Doctors' dictation: the recording of a consultation, turned into a draft record for the doctor to check.
  • Online bookings and pharmacy pages: the name and mobile number you give, the one-time code check, a robot check, and for a pharmacy's page a device cookie kept for 60 days so you need not verify again.
  • Partners: name, mobile number, the doctors you introduce, and the KYC details needed to pay you (PAN and bank account, stored encrypted).
  • Security records: IP addresses, sign-ins and an audit log of important actions.

3. Why

To run the service the clinic, pharmacy or partner signed up for; to send the messages people agreed to; to take and refund payments; to keep the service secure and find faults; and to meet legal duties such as tax invoices and records the law requires. We do not sell personal data and do not use it for advertising.

4. Who else receives data

  • Google (Gemini): a doctor's dictation, and photos of supplier invoices, expense bills or (with the customer's consent) prescriptions, to turn them into drafts. Sent with storage turned off, on the clinic's or pharmacy's own key, with no patient details beyond the recording or photo itself. This processing may take place outside India.
  • Meta (WhatsApp): sign-in codes and the messages a patient or customer agreed to receive. Prescriptions go only as password-protected files, and a message never names a medicine or a diagnosis.
  • Payment gateways (Cashfree, PhonePe): what is needed to take and refund a payment.
  • Hosting and security (Google Cloud, Cloudflare): MedicDay's servers, storage and protection from attacks; Cloudflare also runs the robot check on public forms.
  • Authorities, when the law requires it.

5. How long we keep it

  • Dictation recordings are deleted within 24 hours of the record being confirmed. Prescription photos read at a pharmacy counter are not stored.
  • Records are kept while the clinic's or pharmacy's account is open, then as long as the law requires (for example, tax records), then deleted.

6. Security

Data is sent over encrypted connections. Sign-in codes are never stored as such; keys and bank details are stored encrypted; mobile numbers are masked on screen unless a person needs to see them, and showing one is recorded. Each clinic sees only its own records.

7. Cookies

MedicDay uses cookies needed to work: to keep you signed in, to protect forms, to remember which part of MedicDay you were using, and on a pharmacy's page to remember a verified device. There are no advertising or tracking cookies.

8. Your rights

You may ask to see, correct or erase your personal data, withdraw a consent you gave (for example to WhatsApp messages), or nominate someone to act for you. Patients should ask their clinic or pharmacy first; we help them respond. Anyone may write to our grievance officer.

9. Grievance officer

[Name — to fill], YRO Systems Private Limited, 17 Swamys Square, 3rd Cross Street, Vijayanagaram, Velachery 600042, email [email protected], phone +91 81898 81898. We reply within the time the law sets. If you are not satisfied, you may complain to the Data Protection Board of India.

10. Changes

We may update this policy; the date at the top shows the latest version.