Privacy Policy

We collect only what the service needs to work:

• Phone number — your identity on Dr.incity. Used for OTP sign-in and appointment SMS updates.
• Name — shown to the clinic you book with so reception can identify you at the desk.
• Booking and queue records — which doctor and clinic you booked, your queue position and its status (waiting, checked in, in consultation, completed).
• Notification records — a delivery log of the SMS updates we send you.
• Consent records — when you accepted this policy and the terms, and which version.

Dr.incity is a queueing and booking service, not a medical records system. We do not collect: diagnoses, symptoms, prescriptions, medical history, lab reports or clinical notes; government IDs (Aadhaar, PAN, passport); insurance or financial information; your device location, contacts, or photos. The reason for your visit is between you and your doctor — we never ask for it and have nowhere to store it.

• Signing you in securely with a one-time password (no passwords stored).
• Creating and managing your bookings and live queue position.
• Sending operational SMS updates about your own appointment — for example when your turn is approaching or your position changes meaningfully. These are service messages, not marketing.
• Marketing SMS is sent only if you separately opt in, and you can withdraw that consent at any time from your account settings.

We do not sell personal data. We do not use it for advertising.

• The clinic you book with — reception staff at that clinic see your name, phone number, and queue status for your appointment there. Other clinics cannot see you; access is isolated per clinic and enforced at the database level.
• Our SMS delivery provider — receives your phone number and the message text solely to deliver appointment SMS, and may not use it for anything else.
• Our infrastructure provider (Supabase) — hosts our database. Production data for Indian users is stored in an India-region project, encrypted in transit and at rest.

No other third party receives your personal data.

You can delete your account from inside the app or the website account page — no email or phone call required. When you delete your account:

• Your name and phone number are permanently anonymized.
• Any active queue entry or upcoming booking is cancelled.
• Notification records containing your phone number are deleted.
• Appointment records are retained in anonymized form (no longer linked to you) for clinic operational history and aggregate statistics.
• You are signed out everywhere. Deletion cannot be undone.

You may sign up again later with the same phone number; that creates a fresh account with no connection to the deleted one.

Under the DPDP Act you can, at any time:

• Access the personal data we hold about you.
• Correct your name from account settings.
• Withdraw SMS marketing consent from account settings.
• Delete your account and personal data, as described above.
• Raise a grievance with our Grievance Officer (below).

All traffic is encrypted with HTTPS. Access to your data is restricted by role-based rules enforced in the database itself — a patient can read only their own records, and a clinic only its own queue. One-time passwords are never stored by us and are rate-limited against abuse. If a breach affecting your personal data ever occurs, we will notify you and the Data Protection Board of India as required by law.

If this policy changes materially, we will update the version number above and ask for your consent again in the app before the change applies to you. Continued silence is not treated as consent.

Grievance Officer: Aadarsh Mishra, GarunaCDX Software Solutions LLP. admin@drincity.com. We acknowledge grievances within 72 hours and aim to resolve them within 15 days.

See also our Terms of Service.