Effective Date: September 28, 2026
Paltics is a patient-record and follow-up management app for registered doctors and healthcare professionals, operated by PALTICS HEALTHTECH PRIVATE LIMITED ("Paltics", "we", "us"). This policy explains what information we collect, how we use it, who we share it with, and the choices you have.
1. Information We Collect
- Account data: name, email address, phone number, age, gender (optional), medical speciality, medical registration number and city. Your password is handled securely by Firebase Authentication and is never visible to us.
- Patient data (entered by healthcare professionals): patient name, age, sex, phone number, place of visit, diagnoses, medicines, follow-up dates, prescription photos and other clinical notes. This data is entered under the healthcare professional's own professional responsibility and consent obligations.
- AI feature data: when you use the AI prescription reader or the AI assistant, the prescription photo or the clinical details you enter (such as age, sex, symptoms, signs and reports) are processed to return a result (see Section 4).
- Subscription data: your subscription plan, purchase dates and transaction IDs. Payments are processed by Apple (App Store) or Google (Google Play); we never receive your card or bank details.
- Communication data: messages or feedback you send us by email.
The app does not use analytics, crash-reporting or third-party advertising SDKs, does not access your location, and does not use advertising identifiers (such as IDFA or the Android Advertising ID).
2. How We Use Your Data
- To create and secure your account and verify that you are a healthcare professional.
- To provide the app's features: patient records, visit history, follow-ups, analytics reports and clinical data summaries.
- To provide the optional AI features.
- To manage your subscription.
- To communicate important updates or changes to our services.
- To fulfil legal obligations and prevent fraud and misuse.
3. Sponsored Content
The app may show sponsored image ads from partner companies. Ads are selected only by your medical speciality (for example, Orthopaedics or Psychiatry). Your name, contact details and patient data are never used for advertising and are never shared with advertisers. Each ad is labelled "Sponsored" - tap the label in the app to see why it is shown to you.
4. AI Features
AI features are optional and are used only when you choose them. The prescription photo or text you submit is sent through our servers to Google's Gemini API, which processes it to read medicines or generate a reference response, and the result is returned to your account. AI suggestions are for reference only and do not replace the doctor's clinical judgement.
5. Legal Basis of Processing
We process your data under applicable Indian law, including the Digital Personal Data Protection Act, 2023, based on:
- Contractual necessity: to provide the services you signed up for.
- Legitimate interest: to improve and secure the platform.
- Consent: for patient data entry and optional marketing communications.
- Legal obligation: to comply with applicable law or court orders.
6. Data Sharing & Third Parties
We do not sell user data. Data is shared only with:
- Google - Firebase and Google Cloud (hosting, database, file storage and authentication) and the Gemini API (AI features), which process data on our behalf.
- Apple and Google - to process subscription purchases made through the App Store or Google Play.
- Legal or regulatory authorities, if required by law.
All such parties are required to maintain strict data protection standards.
7. Data Retention and Account Deletion
- Your account and patient data are kept while your account is active.
- You can delete your account in the app from Profile → Delete Account, or request deletion by email - see www.paltics.com/delete-account.
- Deletion takes effect after a 7-day grace period, during which you can cancel by logging back in. After that, your account and all patient data are permanently deleted, and any remaining copies in backups are removed within 30 days, unless the law requires us to keep certain data.
8. Data Security
We implement industry-standard security practices, including:
- Encryption in transit (HTTPS/TLS) and encryption at rest (AES-256) by our infrastructure provider.
- Access rules that restrict each doctor's data to their own account.
- Manual verification of every new account before it can log in.
- Secure backups and regular security reviews.
Despite our efforts, no system is completely secure. You are responsible for keeping your login credentials safe.
9. Data Breach Response
In case of unauthorized access or a data breach:
- Affected users will be informed promptly.
- Authorities will be notified as required by applicable Indian data protection law.
- Immediate mitigation actions will be taken.
10. Your Rights
You may:
- Access a copy of your personal data.
- Request correction or deletion of your data.
- Withdraw consent for data processing.
- Request information on how your data is processed.
To exercise these rights, email admin@paltics.com. We may ask you to verify your identity for security.
11. Cookies & Local Storage
The app stores your login session and preferences in local storage on your device. Our website may use cookies for basic functionality. We do not use cookies or device identifiers for tracking or advertising.
12. Children's Privacy
- Paltics is intended only for adult healthcare professionals (18+).
- We do not knowingly collect information from minors.
- If such data is discovered, it will be promptly deleted.
13. Cross-Border Data Transfer
Data may be processed on servers located in India or abroad by our service providers. All transfers comply with applicable data protection laws and contractual safeguards.
14. Changes to This Policy
We may update this policy periodically. Updates will be posted on this page with the "Effective Date" updated accordingly, and significant changes will be communicated within the app.
15. Contact Us
Data Protection Officer (DPO)
Email: admin@paltics.com
PALTICS HEALTHTECH PRIVATE LIMITED
Dream Valley, Dagapur, Siliguri, West Bengal 734003, India
