Privacy Policy for Tichuk Doctor and Tichuk Child

This Privacy Policy applies to the Tichuk Doctor app, the Tichuk Child app, Tichuk's related websites and web apps, and supporting services such as OTP login, WhatsApp reminders, notifications, and online consultations (together, the “Services”).

“Tichuk,” “we,” “us,” and “our” refer to the operator of the Services. Clinics and healthcare professionals may also be responsible for information they add to Tichuk and for complying with their own professional and legal obligations.

Technical and usage information. We may collect device and app information, app version, IP address, browser type, push-notification token, security and audit logs, feature interactions, crash or error details, and approximate activity timestamps.

Consultations. If you join an audio or video consultation, the Services process participant identity, call access details, audio/video streams, connection status, and call timing or duration. Tichuk may retain consultation events and notes. We do not record consultation audio or video unless users are clearly informed and any required consent is obtained.

Information from others. A clinic, doctor, staff member, parent, or guardian may provide information about another person where they are authorised to do so. The person providing it is responsible for its accuracy and authority.

We use information to:

• Create and secure accounts, verify mobile numbers, and manage authorised clinic access.
• Calculate and display vaccination schedules; maintain child health, growth, milestone, and nutrition journeys.
• Send OTPs, vaccine and appointment reminders, follow-ups, service messages, and push notifications.
• Support appointments, online consultations, feedback, clinic billing records, reports, and patient care workflows.
• Provide optional AI-powered summaries, forecasts, and clinic-assistant responses when a user requests them.
• Operate, troubleshoot, secure, audit, and improve the Services; prevent fraud, abuse, and unauthorised access.
• Comply with law, enforce our terms, and respond to lawful requests or protect users and the Services.

We do not use personal health information for targeted advertising, and the apps do not display third-party advertising.

We disclose information only as needed for the Services or as required by law:

• Clinics and care teams: authorised doctors and staff can access records associated with their clinic and role. Parents or guardians can access records associated with their child.
• Messaging and authentication: MSG91 and WhatsApp/Meta may process mobile numbers and message content or delivery information to send OTPs and reminders.
• Notifications: Google Firebase Cloud Messaging and web-push providers process device tokens and notification delivery data.
• Online consultations: LiveKit or another disclosed communications provider may process participant and real-time audio/video data to connect a call.
• AI features: Google Gemini may process prompts and the limited context included in a requested AI operation. Users should avoid entering information that is not necessary for the request.
• Hosting and operations: cloud hosting, database, email, monitoring, and support providers process information on our instructions to run and protect the Services.
• Legal or organisational events: information may be disclosed when legally required, to protect rights and safety, or as part of a merger, financing, acquisition, or transfer of the Services subject to appropriate safeguards.

We do not sell or rent personal information. Service providers are permitted to use information only to provide their contracted service or as otherwise allowed by law.

Tichuk Child is designed for use by a child's parent or legal guardian, and by authorised healthcare professionals—not for a child to independently create or manage an account. We collect a child's information only to provide the requested child-health and care-management features.

A parent, guardian, clinic, or healthcare professional who provides a child's information confirms that they have the authority and any consent required to do so. We do not knowingly use children's information for advertising, sell it, or ask children to make it publicly available. If you believe a child's information was provided without proper authority, contact us so we can investigate and delete it where appropriate.

Depending on the app and feature you use, Tichuk may request:

• Notifications: to deliver vaccine, appointment, consultation, and account alerts. You can disable notifications in device settings.
• Photos or media: only when you choose a clinic logo, profile image, health document, or other upload. You can deny access and continue using features that do not require an upload.
• Camera and microphone: when needed for an online consultation. Access is used during the call and can be denied or revoked through device or browser settings.

We do not request precise location, contacts, SMS, call logs, or advertising ID for the core Tichuk Doctor or Tichuk Child experience.

We retain information while an account or clinic relationship is active and for as long as reasonably needed to provide the Services, maintain care and transaction records, resolve disputes, prevent fraud, meet legal or professional record-keeping duties, and enforce agreements. Retention periods may differ by record type and applicable law. When information is no longer needed, we delete it or de-identify it.

We use administrative, technical, and organisational safeguards designed to protect information, including encrypted network transmission, access controls, role-based permissions, authentication, logging, backups, and service monitoring. No system is completely secure, so we cannot guarantee absolute security. Please keep OTPs and account access details confidential.

Information may be processed in India and in other countries where our service providers operate, subject to applicable legal safeguards.

Subject to applicable law and appropriate identity verification, you may ask to access, correct, update, export, restrict, object to certain processing of, or delete personal information. You may also:

• Change notification permission in your device settings.
• Opt out of WhatsApp reminders by following the opt-out instruction in the message or contacting your clinic or Tichuk.
• Remove an uploaded item or request correction of a child record through the app, the associated clinic, or Tichuk Support.
• Withdraw consent where processing is based on consent. This does not affect processing completed before withdrawal.

Some information may be retained where required by law, necessary for security or dispute resolution, or maintained by a clinic as part of its independent professional records.

After verification, we will delete or de-identify the account and associated information under our control within 30 days, unless a longer period is required by law or needed for security, fraud prevention, dispute resolution, financial records, or a clinic's lawful professional record-keeping. Backup copies may remain for a limited period until securely overwritten. We will confirm completion or explain any information that must be retained.

For a child record managed by an independent clinic, we may coordinate the request with that clinic because it may be the organisation responsible for the medical record.

We may update this Privacy Policy as the Services, law, or our data practices change. We will post the revised policy here and update the date above. Where required, we will provide additional notice in the app or through an appropriate communication channel.

For privacy questions, rights requests, concerns, or complaints, contact: