HealthDoc helps individuals and families store, organise, and securely share medical records and health-insurance documents. We know these are among the most sensitive documents you own. This policy explains, in plain language, what we collect, why, and the control you have over it.
HealthDoc (“the app”, “we”, “us”) is operated by Balancing Act Private Limited, Kamala Mills, Lower Parel, Mumbai, India. This policy applies to the HealthDoc mobile app and the website at health-doc.netlify.app, and is designed to comply with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Information we collect
Information you provide
Account details — your name, email address, and authentication credentials used to create and secure your account.
Family profile details — names, relationships, and optional photos for the profiles you create (up to five per account), plus any health details you choose to record such as allergies, conditions, and medications.
Health documents — the medical reports, scans, prescriptions, imaging, lab results, and health-insurance documents you upload, and any text automatically detected from them.
Support communications — messages you send us and the details you include in them.
Information collected automatically
Usage and device data — basic app-interaction and diagnostic data used to keep the app running reliably and to fix problems.
Purchase data — if you buy a subscription, our payments partner processes the transaction and shares subscription status with us. We do not receive or store your full card or bank details.
2. How we use your information
To provide the core service: storing, organising, searching, viewing, and letting you share your documents.
To generate features you request, such as automatically detected document details (always shown for your confirmation) and insurance-expiry reminders.
To authenticate you and keep your account and documents secure.
To manage subscriptions and provide customer support.
To maintain, troubleshoot, and improve the app.
HealthDoc does not diagnose conditions, and never alters or reinterprets your documents. Automatically detected details are suggestions you confirm; your original files are always preserved.
3. Your consent and legal basis
We process your personal data on the basis of the consent you give when you create an account and use the app, and to fulfil the service you have asked us to provide. You can withdraw consent at any time by deleting your data or your account (see section 7). Withdrawing consent does not affect processing already carried out.
4. How your information is shared
We do not sell your personal data, we do not use it for advertising, and we do not use it to train artificial-intelligence models without your explicit consent.
We share data only in these limited situations:
Service providers who process data on our behalf, under contract and only as needed to run the app: our secure cloud storage and authentication provider (which hosts your account and documents), and our subscription-management provider (which processes purchases). These providers are bound to protect your data and may process it outside India.
People you deliberately share with — when you create a secure share link, only the recipient you send it to can open it. Links can be password-protected, set to expire, and revoked by you at any time, and access is logged.
Legal requirements — where we are required to disclose data by law or valid legal process.
5. How we protect your information
Documents and account data are stored using encryption in transit and at rest.
Strict access controls ensure each account can reach only its own data.
Access and sharing activity is recorded in audit logs.
We apply the principle of least privilege across our systems.
No system can be guaranteed perfectly secure, but we work continuously to protect your information and to respond promptly to any incident.
6. Data retention
We keep your data for as long as your account is active. When you delete a document, profile, or your account, the associated data is removed from active systems and from backups within a reasonable period, except where we must retain limited records to meet legal obligations.
7. Your rights and choices
Under the DPDP Act you have the right to:
Access and review the personal data associated with your account.
Correct inaccurate or incomplete data.
Export your data.
Delete individual documents and profiles, or your entire account and all associated data, from within the app.
Withdraw consent and stop using the service at any time.
Grieve — raise a concern with our Grievance Officer (below) and, if unresolved, with the Data Protection Board of India.
Deleting your account and data
You can permanently delete your account and all associated documents at any time from within the app: open Settings → Delete account and confirm. This removes your profiles, documents, and account data. If you need help, email us at admin@bapl.com and we will action your request.
8. Children’s data
HealthDoc lets adults maintain records for family members, which may include children, entirely under the account holder’s control. The app is not intended to be used independently by children, and account holders are responsible for the profiles they create and the consent to record that information.
9. International processing
Our service providers may store and process data on servers located outside India. Where they do, we rely on providers that maintain appropriate safeguards for the protection of personal data.
10. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.
11. Contact us
For any privacy question, request, or grievance, contact our Grievance Officer: