Privacy Policy - Local Doctors Doctor

The App is a professional application for doctors and
medical practitioners. It allows a doctor to create and publish a professional
profile, connect with clinics, publish consultation slots, receive and manage
patient appointments, create and share prescriptions, view patient reports and
visit history, respond to patient reviews, track earnings, and purchase
subscription plans.

This Privacy Policy explains how we access, collect, use,
disclose, retain, protect, and delete personal information when you use the App
and its related services. By creating an account and using the App, you
acknowledge the data practices described in this Privacy Policy. The
information we process depends on the features you choose to use.

This Privacy Policy covers two different categories of
information:

• Your own information as a doctor - the account, professional, practice, subscription, and device information relating to you.
• Patient information you access or create through the App - appointment, health, prescription, report, and contact information belonging to patients who book with you through the Local Doctors platform.

Both categories are described below, because both are processed through the App.

1. Our role and your role

The information we collect
depends on the features and services you use.

Entrepot Media operates the Local Doctors technology platform. We are not a healthcare provider, hospital, clinic, diagnostic center, or medical practitioner, and we do not provide medical advice, diagnosis, or treatment.

When you use the App:

• You are the treating medical professional. Clinical decisions, diagnoses, prescriptions, advice, and follow-up instructions are yours, not ours.
• Entrepot Media provides and maintains the technology that stores, transmits, and displays that information, and processes it to operate the platform, meet legal obligations, and keep the service secure.
• You remain independently responsible for your own professional, ethical, confidentiality, and record-keeping obligations under applicable medical council rules and applicable law, including in India the Digital Personal Data Protection Act, 2023 and applicable medical-record requirements.

2. Information we collect

The information we collect depends on the features you use.

2.1 Account, registration, and login information

• Full name
• Medical registration number.
• Email address and telephone number, including the country code you select.
• Password you set (stored by us only in a protected, non-readable form).
• One-time passwords (OTP) used for registration, login, and password reset, and the related verification status.
• User identifier, doctor identifier, and session and refresh tokens issued after a successful login.
• Login, logout, password-reset, and account-recovery activity.

Where the App offers a shortcut to fill in your email address, it may use the Android account-picker service to show you a list of email addresses already present on your device. You choose whether to select one. We receive only the single email address you select; we do not read your Google account contents, mail, contacts, or other accounts on the device.

2.2 Professional verification information

• Medical registration number and issuing details you provide.
• A registration certificate or equivalent verification document you upload during registration (PDF, JPG, JPEG, or PNG, up to 5 MB).
• Verification status of your profile and any review notes needed to process verification.

Verification information is used to confirm that the person creating a doctor account is a genuine practitioner, to protect patients from impersonation, and to comply with applicable requirements.

2.3 Professional profile information

During account creation and later profile editing, we may collect:

• Date of birth and gender.
• Profile photograph, including a cropped version you produce using the in-app cropping tool.
• Specialization and sub-specialization.
• Educational qualifications: institute name, degree or course, start and end dates, and description.
• Awards and recognitions you choose to add.
• Professional experience: designation or title, hospital or employer name, years of experience, address, and employment type.
• Languages spoken.
• Short bio and long biography.
• Consultation fee and availability or online status.
• Website address and social profile links you choose to publish (for example LinkedIn, Facebook, Instagram, or X/Twitter)
• Profile completion percentage.

Information in your professional profile is published to patients through the Local Doctors patient app and public booking pages. Only publish information you are willing to make public.

2.4 Clinic and practice information

• Clinics you search for, view, add to your profile, or create.
• Clinic name, description, address and location, contact number, email, licence number, services, opening and closing times, available days, images, website, and social links, where you create or manage a clinic listing.
• Which clinic you set as your primary clinic.
• Consultation fee associated with each clinic and any fee-change requests you submit.
• Connection, approval, and verification status between you and a clinic.

2.5 Schedule and consultation-slot information

• Slots you create: clinic, date, start time, and end time.
• Slot status, updates, and deletions.
• Slot history and availability records.

2.6 Appointment and patient information available to you

When a patient books an appointment with you through the Local Doctors platform, the App makes the information necessary for that consultation available to you. Depending on the booking, this may include:

• Patient name, telephone number, email address, and profile photograph.
• Gender, date of birth or age, blood group, and weight.
• City, state, country, and postal code, where provided.
• Whether the appointment was booked by the patient for themselves or for a family member or dependent, and in that case the family member's display name, relationship, gender, date of birth, and profile photograph.
• Appointment date, time, status, visit type, and whether it is the patient's first visit with you.
• Reason for the appointment, symptoms, and notes submitted by or for the patient.
• Consultation fee, payment mode, and payment status for the appointment.
• Clinic at which the appointment is scheduled.
• Medical reports and documents the patient has attached to the appointment or shared with you, including file name, file type, file size, and confidentiality flag.
• Visit history and past appointment records for that patient with you.
• Ratings and reviews the patient has submitted about you.

This information is health information and is treated as sensitive. It is made available to you only for the purpose of providing and documenting care to that patient.

2.7 Clinical records you create in the App

When you complete an appointment or write a prescription, we process the information you enter, including:

• Diagnosis.
• Advice to the patient.
• Clinical notes.
• Follow-up date.
• Prescribed medicines, including medicine name, dosage, frequency, duration in days, timing, route of administration, and instructions.
• Prescription images or files you capture with the camera or select from your device and upload.
• Whether the prescription has been released or shared with the patient.
• Appointment outcome actions you take, such as confirming, rejecting, completing, or marking an appointment as a no-show.

2.8 Reviews, replies, and feedback

• Patient ratings and written reviews relating to you and to the clinic.
• App screens viewed, features used, interactions, and usage events
• Crash logs, diagnostic information, and technical-error information

2.9 Follow-up and patient reminders

The App includes a follow-up feature. It lists patients whose appointments you have completed, together with the count of completed appointments, the last completed date, and any follow-up date you have recorded.

If you choose to send follow-up reminders for a selected follow-up date, our servers send an appointment-related reminder to the relevant patients on your behalf through notification, SMS, or email. These reminders are transactional healthcare communications relating to care you have provided; they are not marketing messages, and you must not use them for marketing or promotional purposes.

2.10 Subscription, payment, invoice, and earnings information

The App offers paid subscription plans that unlock premium doctor features. We process:

• Plan selected, plan version, plan limits, price, currency, billing interval, and tax details.
• Order identifier, payment identifier, payment status, activation status, timestamps, and payment-event timeline returned by the payment provider.
• Invoices and receipts, which you may download to your device.
• Earnings records, including per-appointment consultation amounts, the associated appointment, clinic, and patient name and contact information, and totals.

2.11 AI writing assistant (bio and biography)

The App includes an optional AI assistant that drafts a professional bio or biography for your profile. If you choose to use it, the information you have entered in your profile for that purpose - such as your name, specialization, years of experience, qualifications, areas of expertise, and any text you type into the prompt - is sent to the Local Doctors AI service to generate suggested text, which is streamed back into the editor.

• The AI assistant is optional. You can write your bio manually instead.
• You choose whether to keep, edit, or discard the generated text before saving it to your profile.
• Patient information, prescriptions, and medical records are not sent to the AI assistant.
• Do not enter patient-identifiable or confidential information into the AI prompt.
• Generated text is a suggestion only. You are responsible for verifying that your published profile is accurate and not misleading.

2.12 Notifications and messaging tokens

With your permission, the App sends push notifications about appointment requests and updates, schedule changes, patient reports, subscription and payment updates, and account and security notices.

• Firebase Cloud Messaging registration token for your installation, which we register against your account so notifications reach the correct device.
• Notification records shown in the in-app notification list, including title, message, event type, related appointment identifier, recipient role, read status, and timestamp.
• Your notification read, delete, and permission choices.

2.13 Device, technical, and diagnostic information

• Device type and model, operating-system version, and App version.
• Language and time-zone settings.
• Network or connectivity status, including whether the device is offline.
• App or installation identifiers used by the messaging service.
• Technical error and diagnostic information generated when a request fails or the App encounters an error.
• Security, authentication, and fraud-prevention information such as token issuance and refresh events.

The App integrates Firebase Core and Firebase Cloud Messaging (provided by Google) to deliver push notifications. These services process device and installation identifiers and messaging tokens for that purpose.

The App does not currently integrate an advertising SDK, an advertising identifier, or a third-party behavioral-analytics or crash-reporting SDK. If we introduce one, we will update this Privacy Policy and the Google Play Data safety declaration before or at the time the change takes effect.

2.14 Information stored on your device

• Authentication token, refresh token, user identifier, doctor identifier, and doctor name, stored in the App's private storage so you stay signed in.
• Onboarding and feature-tour progress flags.
• Cached profile and clinic images, to reduce data usage.
• Files you choose to download, such as invoices, prescriptions, and patient reports, which are saved to your device's Downloads folder and remain under your control.

Signing out or deleting the App clears the App's stored credentials. Files already saved to your Downloads folder are not removed by the App and remain your responsibility.

2.15 Information we do not collect

To be explicit, the App does not:

• Request or collect device location. The App does not request foreground or background location permission, and does not track your movements.
• Read your contacts, call logs, SMS inbox, or personal email inbox. Notifications, SMS, and emails sent by the platform are outbound messages only.
• Record audio or video in the background, or access the microphone without an action by you.
• Collect your device PIN, screen-lock credentials, banking PIN, full card number, or card security code.
• Sell personal information or health information.
• Use patient health information for advertising or unrelated marketing.

Optional information and permissions

Some information and permissions are optional. However, a feature may not work correctly if you do not provide the information or permission that feature needs. For example, appointment alerts will not appear if you deny the notification permission, and you cannot attach a prescription image if you deny access to the camera and photos.

3. Where the information comes from

• Directly from you, when you register, verify your profile, create clinics or slots, write prescriptions, reply to reviews, contact support, or subscribe to a plan.
• From patients and their family members, through bookings, reports, reviews, and information they submit in the Local Doctors patient app.
• From clinics and healthcare partners connected to your profile.
• From your device and the App, in the form of technical, diagnostic, and security information.
• From service providers acting on our behalf, such as the payment provider confirming a subscription payment or the messaging service confirming notification delivery.

4. How we use information

We use information to:

• Create, verify, authenticate, secure, and manage your doctor account.
• Verify your professional identity, medical registration, and verification documents before or during profile publication.
• Create, maintain, and publish your professional profile to patients and on public booking pages.
• Manage clinic connections, primary clinic selection, and consultation-fee configuration and change requests.
• Publish and manage your consultation slots and availability.
• Deliver appointment requests to you and process your confirmation, rejection, completion, and no-show actions.
• Make patient information necessary for a consultation available to you, and record the appointment outcome.
• Create, store, edit, and release prescriptions and prescription files to the correct patient.
• Display patient reports, visit history, and reviews relevant to your consultations, and enable you to download files where permitted.
• Send follow-up reminders to patients at your request.
• Provide, activate, renew, and support subscription plans and premium features.
• Process subscription payments through Razor pay, and maintain billing, invoice, payment-status, and transaction records.
• Produce earnings and payment-history summaries for your practice.
• Generate suggested profile bio text when you use the AI writing assistant.
• Send appointment alerts, schedule updates, subscription and payment updates, service notices, and security alerts.
• Provide customer support and respond to your enquiries and complaints.
• Understand how the App is used and improve its functionality, performance, and reliability.
• Diagnose technical problems, errors, and connectivity failures.
• Detect and prevent fraud, impersonation, abuse, unauthorized access, and security incidents.
• Enforce our terms and protect doctors, patients, clinics, Entrepot Media, and the platform.
• Establish, exercise, or defend legal claims.
• Comply with applicable legal, regulatory, healthcare, accounting, and tax obligations.

We do not sell personal information or health information. We do not use patient health information for advertising, and we do not use your professional or account information for unrelated marketing.

5. Legal basis for processing

Where the Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of your consent and, where permitted, on the basis of certain legitimate uses recognized under that Act. Where other data-protection laws apply to you, we rely on one or more of the following:

• Your consent, for example when you enable notifications, upload a verification document, or use the AI writing assistant.
• Performance of a contract with you, to provide the App, your account, and your subscription.
• Compliance with a legal obligation, including healthcare, accounting, and tax obligations.
• Our legitimate interests in operating, securing, and improving the platform and preventing fraud and abuse, where those interests are not overridden by your rights.
• Protection of vital interests and the provision of healthcare, where health information is processed to enable a consultation you and the patient have agreed to.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing carried out before the withdrawal, and some features may stop working.

6. When we disclose information

We disclose information only when reasonably necessary for the purposes described in this Privacy Policy.

6.1 Patients and their family members

Your published professional profile and the clinical output of a consultation are made available to the relevant patient. Depending on your profile and the consultation, this may include your name, profile photograph, qualifications, specialisation and sub-specialisation, experience, languages, bio and biography, consultation fee, clinic and practice details, availability and slots, ratings and reviews, your replies to reviews, and website or social links you have chosen to publish.

Prescriptions, prescription files, advice, follow-up dates, and appointment status you record are made available to the relevant patient when you release or share them.

6.2 Clinics and healthcare partners

Where you connect your profile to a clinic, relevant profile, availability, fee, and appointment information may be shared with that clinic so it can approve the connection, manage its schedule, and coordinate the consultation.

6.3 Payment provider

We share the information necessary to initiate, authenticate, process, confirm, reconcile, refund, or support a subscription transaction with Razor pay. Razor pay processes payment and transaction information as an independent processor under its own privacy practices and terms.

6.4 Service providers

We use trusted service providers that process information on our behalf, including:

• Hosting, database, storage, content-delivery, and backend infrastructure providers.
• Firebase Cloud Messaging (Google), for push-notification delivery.
• Email, SMS, and OTP delivery providers.
• The Local Doctors AI service used by the optional bio-writing assistant.
• Razorpay, for subscription payment processing and billing.
• Security, fraud-prevention, technical-support, and customer-support providers.

These providers are permitted to process information only as necessary to provide contracted services, subject to their applicable terms, privacy practices, and safeguards.

6.5 Legal, safety, and regulatory purposes

We may disclose information when reasonably necessary to:

• Comply with applicable law, regulation, court order, or valid legal process.
• Respond to authorized government, regulatory, or medical-council requests.
• Protect the rights, safety, or property of patients, doctors, clinics, Entrepot Media, or others.
• Prevent, detect, or investigate fraud, impersonation, abuse, security incidents, or unlawful activity.
• Enforce applicable agreements or policies.
• Establish, exercise, or defend legal claims.

6.6 Business transfers

Information may be transferred as part of a merger, acquisition, restructuring, financing, or transfer of business assets. Where applicable, the receiving organization will be required to handle the information subject to appropriate confidentiality and data-protection obligations.

7. Patient confidentiality and your responsibilities

Patient information reaches the App because a patient chose to book a consultation with you. That information is provided to you for that clinical purpose only.

When you use the App, you agree that you will:

• Access patient information only for patients who have booked with you, and only for legitimate clinical, administrative, or record-keeping purposes.
• Keep patient information confidential and comply with your professional and legal confidentiality obligations.
• Protect any patient reports, prescriptions, or files you download to your own device, and not share them other than as permitted by law and professional obligations.
• Not use patient contact details for marketing, promotion, or any purpose unrelated to the care you are providing.
• Not share your account credentials, and not allow another person to use your doctor account.
• Notify us promptly at supportentrepotmedia@gmail.com if you believe your account has been compromised or patient information has been exposed.

Patient medical information that you record or maintain independently, outside bookings or services made through the Local Doctors platform, is not accessed by us merely because you use the App. Information submitted through Local Doctors features is processed as necessary to provide those features.

8. Device permissions

Depending on the features you use, the App requests the
following Android permissions.

The App does not request location,
contacts, SMS, call-log, microphone, or background-activity permissions.

Permissions can be reviewed and withdrawn at any time
through your device settings. Withdrawing a permission may prevent the related
feature from working.

9. Data security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the information we process. These safeguards may include:

• Authentication with short-lived access tokens and refresh tokens.
• Role-based access controls, so a doctor account can access only that doctor's patients and records.
• Encryption of information in transit; the App does not permit cleartext network traffic.
• Restricted access to production systems on a need-to-know basis.
• Secure storage and infrastructure controls.
• Logging and security monitoring.
• Measures intended to prevent unauthorized access, alteration, disclosure, or destruction.
• Backup and recovery controls.

No electronic transmission or storage system is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your device, your login credentials, your device lock, and access to your account.

If a personal-data breach occurs that is likely to affect you, we will notify you and the relevant authority where required by applicable law.

10. Data retention

We retain information only for as long as reasonably necessary to:

• Provide the App and the services you use.
• Maintain your professional profile, verification records, clinic connections, and schedule.
• Maintain appointment, prescription, and healthcare-service records.
• Complete and reconcile subscription and payment transactions and issue invoices.
• Protect users and the platform and investigate fraud and security incidents.
• Resolve disputes and enforce agreements.
• Establish, exercise, or defend legal claims.
• Meet applicable healthcare, accounting, tax, and regulatory obligations.

Retention periods differ depending on the type of information and the reason it is processed. Medical and prescription records, and financial and tax records, are generally retained for the minimum periods required by applicable law, which may be longer than the life of your account.

When information is no longer required, we delete it or irreversibly anonymize it in accordance with our applicable procedures. Some information may remain temporarily in protected backups until those backups expire or are securely overwritten.

11. Account and data deletion

You may request deletion of your doctor account in any of the following ways:

• In the App: Profile -> Delete Account.
• On the web: https://www.localdoctors.net/doctor/dashboard/my-profile
• By email: supportentrepotmedia@gmail.com

We may verify your identity before processing a deletion request, to prevent unauthorised deletion of a professional account and the healthcare records connected to it.

Following verification, we will delete or irreversibly anonymize eligible personal information associated with your account, including:

• Account and login information.
• Professional profile information, including bio, qualifications, experience, awards, languages, and social links.
• Profile photograph and uploaded verification document, once any applicable retention requirement has expired.
• Clinic connections, consultation-fee settings, and schedule or slot records not required for completed appointments.
• Notification tokens and notification history.
• Account identifiers and session tokens.

Deletion will not include information that must be retained for:

• Applicable legal or regulatory obligations, including medical-council requirements.
• Medical, prescription, and healthcare-record requirements. Records of care already provided to a patient may need to be retained, and the patient's own copy of a prescription or report remains in the patient's account.
• Accounting, invoicing, GST, and tax requirements relating to subscription payments and earnings.
• Fraud prevention, security investigations, and platform-integrity purposes.
• Resolving disputes and enforcing agreements.
• Establishing, exercising, or defending legal claims.

Any information retained after deletion is restricted from unrelated use and is deleted or anonymised when the applicable retention requirement expires.

If you have an active paid subscription, deleting your account ends your access to premium features. Cancellation, proration, and refund outcomes are governed by the applicable subscription terms and the payment provider's rules. Deleting your account does not automatically cancel obligations already incurred.

Signing out, deactivating, or uninstalling the App is not treated as completion of a verified account-deletion request.

12. Your choices and rights

Subject to applicable law, you may:

• Review and update your account, profile, and professional information in the App.
• Update your consultation fee, availability, clinics, and slots using the controls the App provides.
• Choose whether to use the optional AI writing assistant, and edit or discard anything it suggests.
• Control notifications through the App or your device settings.
• Withdraw device permissions through Android settings.
• Request access to the personal information we hold about you.
• Request correction or updating of inaccurate or incomplete information.
• Request deletion of eligible personal information.
• Withdraw consent where processing is based on consent.
• Nominate another individual to exercise your rights in the event of your death or incapacity, where applicable law provides for this.
• Submit a privacy complaint or grievance and receive a response.

To submit a request, contact supportentrepotmedia@gmail.com. We may request information reasonably necessary to verify your identity, protect your account, and locate the relevant records. We aim to respond within the period required by applicable law.

Requests concerning records that a clinic, hospital, or patient independently controls may need to be directed to that party.

13. Children

The App is intended for professional users aged 18 years or older who are registered medical practitioners. It is not designed for, directed to, or intended to be used by children, and children cannot create or independently manage a doctor account.

Patient records shown to you may relate to a minor whose parent, legal guardian, or other authorised adult made the booking through the LocalDoctors patient app. Such information must be handled with the same confidentiality as any other patient record.

If you believe a minor has created a doctor account, contact supportentrepotmedia@gmail.com.

14. Medical, professional, and emergency notice

LocalDoctors Doctor is a technology platform. Entrepot Media does not provide medical diagnosis, treatment, or professional advice, and does not review or endorse the clinical content you record. Diagnoses, prescriptions, advice, and treatment decisions are yours and are your professional responsibility.

The App is not designed for medical emergencies or for emergency dispatch. It must not be relied upon for urgent or time-critical clinical communication.

You are responsible for ensuring that the profile information you publish, including qualifications, registration details, and experience, is accurate, current, and not misleading.

15. Third-party destinations and services

At your direction, the App may open or hand information to third-party destinations, including:

• The Razorpay checkout, when you pay for a subscription.
• Your device's telephone dialer, when you call a clinic from the App.
• Your device's share sheet, when you share your public booking link. The link contains your doctor identifier and name, and the destination is chosen by you.
• A web browser, when you open the Contact Us page or another external link.
• Your device's file and download handlers, when you save or open a downloaded invoice, prescription, or report.
• Android system pickers for photos, files, and account email hints.

Information you provide directly to a third party, and any file you forward from your device, is governed by that third party's own terms and privacy practices. Review the relevant third-party policy before providing information.

16. Where information is processed

Entrepot Media Pvt. Ltd. is established in India, and the platform is operated primarily from India. Some of our service providers, including cloud hosting and messaging providers, may process or store information on infrastructure located outside India.

Where information is transferred across borders, we take reasonable steps to ensure it remains subject to appropriate contractual, technical, and organizational safeguards, and we transfer information only to the extent permitted by applicable law.

17. Cookies and similar technologies

The App itself does not use advertising cookies or advertising identifiers. It stores authentication tokens and preference flags in the App's private storage, and caches images to reduce data usage.

Our websites, including booking and account-deletion pages, may use cookies and similar technologies to keep you signed in, remember preferences, support security, and understand how the site is used. You can control cookies through your browser settings.

18. Google Play Data safety summary

19. Changes to this Privacy Policy

• App features change.
• Our data-processing practices change.
• New service providers or integrations are introduced.
• Applicable legal or regulatory requirements change.
• Google Play requirements change.

We will publish the revised Privacy Policy with an updated “Last updated” date. Where required, we will also provide additional notice through the App, by email, or through another appropriate method, and obtain fresh consent where the law requires it.

20. Contact us and grievance redressal

For privacy questions, rights requests, complaints, account-deletion assistance, or to reach our grievance contact, write to supportentrepotmedia@gmail.com with the subject line “Privacy Request - LocalDoctors Doctor”.

We will acknowledge your request and respond within the period required by applicable law. If you are not satisfied with our response, you may escalate the matter to the relevant data-protection or consumer authority in your jurisdiction.

Entrepot Media Pvt. Ltd.

Ramdhenu Complex, Mohisgote

4th Floor, B4, Block-A

Krishnapur, Kolkata, West Bengal 700102

India

Email: supportentrepotmedia@gmail.com

Contact Us: https://www.localdoctors.net/contact

Website: https://www.localdoctors.net

End of Privacy Policy