Legal

Privacy Policy

Last updated: 7 October 2026

Your health information is sensitive. This policy explains, in plain language, how Homeobangla handles the personal data of patients and doctors who use the Homeobangla app and website.

1. Who we are and what this policy covers

Homeobangla ("Homeobangla", "we", "us") operates the Homeobangla mobile app, the website at homeobangla.com and the related doctor and staff tools (together, the "Platform"). The Platform lets patients find independent registered homeopathy doctors, book and pay for online video consultations and receive digital prescriptions, and lets doctors register, get verified and consult.

This policy explains what personal data we collect, why, who we share it with, how long we keep it and the rights you have. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Homeobangla is the data fiduciary for the personal data processed through the Platform. It should be read together with our Terms of Service.

2. Data we collect

Patients. When you use the app we collect:

Account details: your email address, and your name from your Google account if you choose to sign in with Google.
Profile details: full name, phone number, gender, date of birth or age, weight, height, blood group, preferred languages and your city or pincode. You can add profiles for family members (for example a child or parent) with the same details and their relationship to you.
Health information: the chief complaint, symptoms and notes you share with the doctor when booking (the "intake form"), and the diagnosis, clinical notes and prescriptions the doctor records after your consultation.
Consultation details: the doctor, date and time of each appointment, its status, and when each participant joined and left the video call.
Payment details: the amount, status and reference numbers of your payments. Card, UPI and bank details are entered on Razorpay's secure checkout and are not received or stored by us.
Saved addresses if you choose to add them in the app.

Doctors. When you apply to join as a doctor we collect your name, email address, phone number, qualifications (degree and any MD degree), council registration number, years of experience, specialty and the types of cases you prefer, languages, consultation fee, availability, and copies of your Aadhaar card, PAN card, degree certificate(s) and council registration certificate together with your Aadhaar and PAN numbers. We use these to verify your identity and your registration to practise.

Device and technical data. If you allow notifications, the app registers a push notification token for your device. Our servers record technical information such as IP address, device and app details and request logs, which we use to keep the Platform secure, prevent abuse (for example by limiting repeated sign-in attempts) and fix problems.

The website does not use advertising or analytics cookies. The staff and doctor portal uses only the cookies that are strictly necessary to keep you signed in.

3. How we use your data

We use personal data only for the following purposes:

to create and secure your account and sign you in (one-time codes by email, or Google sign-in);
to show you doctors, hold the slot you choose, take payment and confirm your appointment;
to share your profile and intake form with the doctor you book so that they can consult you, and to deliver the prescription they write to you;
to connect the video consultation between you and the doctor;
to send you messages about your account and appointments, by email and push notification;
to verify doctors' identity and registration before they can consult on the Platform;
to provide support, handle complaints and resolve disputes;
to protect the Platform and its users against fraud, abuse and security incidents; and
to comply with our legal obligations, including tax, accounting and medical-record requirements.

We process your personal data on the basis of your consent, which you give when you create an account, book a consultation or submit a doctor application, and for the legitimate uses permitted by the DPDP Act (such as complying with the law or responding to a medical emergency). We do not sell your personal data and we do not use your health information for advertising.

4. Video consultations

Consultations take place over a live video call provided by Agora. The call is transmitted between you and the doctor through Agora's network and secured with short-lived access tokens that only the two participants receive.

We do not record video consultations. If we ever introduce recording, we will tell you in advance, explain why and how long recordings would be kept, and ask for your consent where the law requires it.

As required by the Telemedicine Practice Guidelines, 2020, doctors keep a record of the consultation, such as your intake details, their notes and the prescription.

6. How we protect your data

All traffic to the Platform is encrypted in transit (HTTPS). One-time sign-in codes and passwords are stored only in hashed form, staff access to personal data is limited to those who need it for the purposes above, and our servers are protected by firewalls and accept connections only through Cloudflare. No system is completely secure, but we work to protect your data and, if a personal data breach occurs, we will notify you and the Data Protection Board of India as the DPDP Act requires.

7. How long we keep data

Account and profile data are kept while your account is open, and deleted or anonymised as soon as you delete your account, except as described below.
Consultation records and prescriptions are kept for as long as medical-record rules require (generally at least three years from the last consultation), because they may be needed for your continued care or to resolve a dispute.
Payment and invoice records are kept for the period required by tax and accounting laws.
Doctor applications and verification documents are kept while the doctor is registered with us. When a doctor deletes their account, the identity documents and Aadhaar and PAN numbers are deleted at once.
Server logs are kept for a short period for security and troubleshooting.

Database backups are kept for a limited period and are then deleted automatically.

8. Deleting your account

You can delete your account at any time, as a patient or a doctor: in the app from Settings → Delete account, or without the app on our Delete your account page. Either way you confirm with a one-time code sent to the email address of your account. Deletion takes effect at once and ends every signed-in session.

An account cannot be deleted while it has a paid consultation that has not taken place yet (or is in progress), or a paid medicine order that has not been delivered. Contact us at support@homeobangla.com and we will help you with it first.

What is deleted:

Sign-in details: your email address, phone number, password, push-notification token, and any pending one-time codes and password-reset links. The account is closed at once and every signed-in session ends.
Your profile and family-member profiles: name, date of birth or age, gender, blood group, weight, height, languages, city or pincode and relationship. Profiles never used for a consultation or order are deleted entirely; a profile linked to one is kept only as an anonymous record with all of these details removed.
Saved addresses and prescription-based medicine carts.
Intake forms (symptoms) of bookings that never became a consultation: cancelled, expired, unpaid or missed (no-show) bookings.
Bookings awaiting payment, and free (₹0) upcoming bookings, are cancelled and their slots released. A payment that still arrives for a cancelled booking is refunded automatically. Medicine orders awaiting payment are cancelled.
Doctors, in addition: your KYC documents (Aadhaar, PAN, degree and council registration certificates) are deleted from storage, together with your Aadhaar and PAN numbers, email, phone, bio, clinic name, languages, case-type preferences, staff notes, the rejection reason and any resubmission link, the reasons and changed details recorded in the review history, weekly availability and future slots, and you no longer appear in the app. A doctor application with no consultations is deleted entirely.

What we keep, detached from your identity:

Records of consultations that took place: the date and time, doctor, status, call times, the intake form (symptoms) and the prescription (diagnosis, notes and medicines), for as long as medical-record rules require (generally at least three years from the last consultation). They stay linked only to an anonymous record without your name or contact details.
Payment and refund records (amount, status and Razorpay references), for the period tax and accounting laws require.
Medicine orders: items, amounts, status and the state of delivery, which tax records need. The address lines, city, pincode and phone number are removed.
For a doctor who has consulted: name, qualifications, council registration number, specialty, experience and fee, because consultation and prescription records must identify the doctor who gave them.
A record that the account was deleted: the date, the account type, whether it was deleted from the app or the website, and counts of what was removed, with no name or contact details.
Server logs and database backups are not edited; they are deleted on their normal schedule, after a short and limited period.

9. Your rights

Under the DPDP Act and other applicable law you have the right to:

get a summary of the personal data we hold about you and how we process it, and know who we share it with;
have inaccurate or incomplete data corrected, completed or updated (much of it you can edit in the app);
have your data erased when it is no longer needed, subject to the retention duties above;
withdraw your consent at any time, as easily as you gave it (withdrawal does not affect processing already done, and we may then be unable to provide the service);
have your grievances addressed by us, and then by the Data Protection Board of India; and
nominate another person to exercise these rights on your behalf in the event of death or incapacity.

You can delete your account yourself, in the app or on the Delete your account page, as described in Deleting your account. To exercise any of the other rights, email us at support@homeobangla.com from the email address on your account. We may ask you to confirm your identity and will respond within the time the law requires.

10. Children

You must be 18 or older to create an account. A person under 18 can be consulted only through a profile created and managed by their parent or lawful guardian, who gives consent on their behalf and should be present during the consultation. We do not track children's behaviour or show them targeted advertising.

11. Grievance Officer and contact

For any question, request or complaint about your personal data, contact our Grievance Officer, in accordance with the Information Technology Act, 2000, the rules made under it and the DPDP Act:

Grievance Officer: [Grievance Officer name]
Email: support@homeobangla.com (subject line "Grievance")

We acknowledge grievances within 24 hours and aim to resolve them within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12. Changes to this policy

We may update this policy as the Platform changes, for example when we launch new features. The date at the top shows when it was last changed. If the changes are significant we will tell you in the app or by email before they take effect, and ask for your consent again where the law requires it.