Privacy Policy
DRAFT — this Privacy Policy has not yet been reviewed by a lawyer. It describes how UABS actually handles data today, based on the current system, and is provided as a starting point for legal review before publication.
We collect information you provide directly (name, mobile number, email, date of birth, gender, blood group, address, medical history, allergies, insurance details, emergency contacts) to create your account and facilitate appointment booking and care coordination with the hospitals and doctors you choose to consult.
Your medical and appointment information is shared only with the hospital, doctor, and reception staff involved in the specific appointment or visit you book — it is not sold to third parties and is not shared with other hospitals or doctors you have not booked with.
We use your billing state to determine GST treatment (CGST/SGST vs IGST) on the platform fee for paid appointments, as required by Indian tax law.
Device tokens are collected to deliver push notifications (appointment reminders, status updates). You can disable notifications from your device settings at any time.
Account data is retained for as long as your account is active. Soft-deleted records (e.g. a removed doctor or emergency contact) are retained for a limited grace period to allow recovery before permanent deletion.
We do not sell personal data. Aggregated, de-identified data may be used internally for reporting and platform improvement.
This policy may be updated from time to time; material changes will be reflected here with an updated revision date.