Privacy Policy for ShifaQ

Effective Date: July 1, 2026
Last Updated: August 10, 2026

ShifaQ brings clinics, healthcare professionals and patients together through one intelligent digital ecosystem designed for modern care delivery.

SRM MEDICATE CHEMIST & DRUGGIST ("we", "us", or "our") operates the ShifaQ mobile application ("ShifaQ" or the "App"). ShifaQ is currently designed primarily to facilitate the discovery of healthcare professionals and clinics and the booking and management of appointments.

This Privacy Policy explains what information we collect, how we use it, how it may be shared, how we protect it, and the choices available to you when you use ShifaQ.

1. Information We Collect

1.1 Information Provided During Registration

When you create or maintain a patient account, we may collect information such as:

• Full name
• Mobile/telephone number
• Email address, where provided
• Date of birth
• Gender
• Address and related contact information
• Account and patient identification information required to provide the service

ShifaQ does not currently require or collect blood group information as part of patient registration.

1.2 Appointment Information

When you use ShifaQ to book or manage an appointment, we may process information necessary to complete and manage the appointment, including the selected clinic, healthcare professional, appointment date/time, appointment status, and related account information.

1.3 Health and Medical Information

ShifaQ does not currently collect medical or health information such as medical history, symptoms, diagnoses, prescriptions, laboratory reports, or medical documents through the App.

1.4 Photos, Prescriptions and Documents

ShifaQ does not currently provide functionality for patients to upload photos, prescriptions, medical reports, or other healthcare documents.

1.5 Location Information

ShifaQ does not currently collect or use GPS or precise device location information.

1.6 Device, Analytics and Diagnostic Information

ShifaQ uses analytics and crash-reporting technologies, including Firebase Analytics and Firebase Crashlytics, to help us understand application usage, monitor performance, identify technical problems, and improve the reliability of the App.

Depending on the technology and device configuration, these services may process information such as application usage information, device or application identifiers, operating system information, application version, crash reports, diagnostic information, and related technical data.

We use this information for analytics, troubleshooting, security, performance monitoring, and improvement of ShifaQ. We do not use analytics or crash-reporting information to sell your personal information.

2. How We Use Your Information

We may use information collected through ShifaQ to:

• Create and manage patient accounts
• Verify account information and authenticate users
• Facilitate and manage appointments
• Connect patients with participating clinics and healthcare professionals
• Send appointment-related notifications and communications
• Send OTPs and other account verification messages
• Provide customer and technical support
• Monitor application performance and diagnose crashes or technical issues
• Improve the functionality, security, reliability, and user experience of ShifaQ
• Detect, prevent, and investigate unauthorized access, fraud, abuse, or security incidents
• Comply with applicable legal and regulatory requirements

3. SMS, OTP and Communication Services

ShifaQ uses SMS services for purposes such as OTP verification and service-related communications.

SMS delivery services are provided through Reliance Jio Infocomm Limited. We use these services for legitimate application and service-related communication and intend to operate such communications in accordance with applicable telecom requirements and TRAI regulations.

Your mobile number may therefore be processed as necessary to deliver OTPs, appointment-related messages, and other communications associated with your use of ShifaQ.

4. Push Notifications

ShifaQ may send push notifications to provide appointment updates, reminders, account-related messages, and other service-related information.

You can manage notification permissions through your device settings. Disabling notifications may affect your ability to receive timely appointment or service updates.

5. Sharing of Information

We do not sell or rent your personal information.

We may share or provide access to information where reasonably necessary to provide and operate ShifaQ, including with:

5.1 Clinics and Healthcare Professionals

Information necessary to facilitate your appointment may be made available to the relevant clinic, healthcare professional, or authorized clinic personnel.

5.2 Technology and Service Providers

We may use trusted third-party providers for services required to operate ShifaQ, including application infrastructure, analytics, crash reporting, SMS delivery, push notifications, security, monitoring, and technical support.

5.3 Legal and Regulatory Requirements

We may disclose information where required by applicable law, regulation, legal process, court order, or governmental authority, or where reasonably necessary to protect the rights, safety, security, or property of our users, the public, or our organization.

6. Payments

ShifaQ does not currently process online payments through the App.

7. Data Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include access controls, authentication mechanisms, secure communications, server-side security measures, and other safeguards appropriate to the information processed.

However, no electronic transmission or storage system can be guaranteed to be completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide ShifaQ services, maintain account and appointment records, provide support, maintain security, resolve disputes, and meet applicable legal or regulatory obligations.

When information is no longer required for these purposes, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to applicable retention requirements.

9. Account and Data Deletion Requests

ShifaQ currently does not provide an in-app self-service account deletion function. Account deletion is handled by the ShifaQ administration team.

Users may request deletion of their account and associated personal information by contacting us using the contact details provided below. We will review and process the request in accordance with applicable law and legitimate record-retention requirements.

Certain information may need to be retained where required for legal, regulatory, security, fraud-prevention, dispute-resolution, or other legitimate purposes.

10. Your Privacy Rights

Depending on applicable law, you may have rights regarding your personal information, including the right to:

• Request access to information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to applicable requirements
• Request information about how your data is used
• Withdraw consent where processing is based on consent
• Request assistance regarding your personal information

To exercise any applicable rights, please contact us using the information provided below.

11. Children's Privacy

ShifaQ is not specifically directed toward children. We do not knowingly collect personal information from children in violation of applicable law.

Where an appointment or healthcare service involves a minor, information should be provided by or with the involvement of a parent, guardian, or other legally authorized person where required.

12. Third-Party Services

ShifaQ uses third-party services that help us operate, secure, analyze, and maintain the App. These include analytics and crash-reporting services such as Firebase Analytics and Firebase Crashlytics and SMS delivery services provided through Reliance Jio Infocomm Limited.

Third-party providers may have their own privacy policies and terms governing their handling of information. We encourage users to review the applicable policies of third-party services where appropriate.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in ShifaQ, our services, applicable laws, or our privacy practices.

When changes are made, we will update the "Last Updated" date at the top of this Privacy Policy. We encourage users to periodically review this page.

14. Contact Us

For account deletion requests, privacy questions, or concerns regarding the handling of your personal information, please contact us using the contact details above.