Privacy notice
Who we are. This app is run by M D Rehab (physiotherapy clinics in Vapi and Pune) and Cardiorescue (home-visit rehabilitation in Mumbai) [confirm the exact legal entity name(s), registered address and whether they are one or two Data Fiduciaries]. Phone: +91 83558 73486. Grievance / data protection contact: [name, email].
What we collect
- Identity and contact: name, phone number, address (home visits), centre.
- Health information: diagnosis, assessments, treatment notes, outcome scores, pain scores, goals, exercise plans, reports you or your doctor share with us.
- Progress videos and photos, only with your consent, used to track your recovery.
- Appointments, visit times, location at check-in for home visits (staff phone), payments and program details.
- Feedback you give in the app, and basic technical logs (log-in times, IP address) for security.
Why we use it
- To assess, treat and track your rehabilitation and to coordinate your care team.
- To schedule visits, remind you, and manage payments for your program.
- To keep records we are required to keep, and to keep the app secure.
We do not sell your data and do not use it for advertising. Videos are not published and are visible only to your treating team and, if you choose, to you in the app.
Who can see it
Only staff who need it: your treating doctor/physiotherapist, the centre manager for your centre, our operations head and owners. Every view of clinical records and videos is logged. Data is stored on a server in India [confirm: AWS Lightsail, Mumbai region] with encrypted backups [confirm].
How long we keep it
[Retention period: to be confirmed by the lawyer, taking medical-record retention requirements into account.] After that we delete or anonymise it.
Your rights
You can ask to see a copy of your data, correct it, erase it (subject to records we must keep by law), withdraw consent (including for videos) at any time, nominate someone to act for you, and raise a grievance. Ask at your clinic, call +91 83558 73486, or use Privacy & consent in the app. Withdrawing consent does not affect care already given. If you are not satisfied with our response you may complain to the Data Protection Board of India.
Children
For patients under 18 [or a person with a disability who has a lawful guardian], a parent or guardian gives consent on their behalf.
Draft prepared from the app's actual data use. Not legal advice.