Privacy policy
Last updated: 23 October 2026
SabSehat (“we”) runs the SabSehat app, website and SabSehat Desk. This policy explains what personal data we collect, why, who we share it with, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the rules made under it. Health data is sensitive, so we collect only what each feature needs and you stay in control of who sees it.
What we collect
- Account details: your name, mobile number, town, and (for providers) email, registration or licence number and business details.
- Health records you add or receive: prescriptions, lab reports, documents you upload, medicines and reminders, readings such as blood pressure or sugar, allergies and conditions, and records of family members you manage.
- Visits and orders: appointments, tokens, lab bookings, medicine orders, and what a doctor, lab or pharmacy records for you.
- Women’s health: if you use it, your period diary, pregnancy details and children’s vaccine dates.
- Just for her / Just for him: if you use it, your lesson and quiz progress, your date of birth or age band (used to open lessons for people aged 21 and over), and any private questions you send to doctors. Doctors see only the question, whether it is from a woman or a man, and whether the person is under 21; never your name, phone number or profile. Unanswered questions are deleted after about 4 months and answered ones after about 6 months. None of this appears in shared records, doctor views, exports or caregiver alerts. The optional PIN is stored only on your phone.
- Blood donation: if you sign up as a donor, your blood group, last donation date and town. If you ask for blood, the details of the request.
- Location: only when you choose to share it, for example to find an ambulance near you. We don’t track you in the background.
- Payments: amounts, status and refunds. Card, UPI and bank details are handled by our payment provider; we don’t see or store them.
- Device and usage: a notification token for your phone, your language, and logs needed to keep the service secure.
Why we use it
- To run the features you use: booking, tokens, prescriptions, reports, orders, reminders, family profiles, blood requests and ambulance contacts.
- To show a doctor your history when you choose to share it, and to send reports to the doctor who asked for them.
- To verify doctors and providers before they are listed.
- To send alerts you asked for, in the app and, if you turn it on, by SMS or WhatsApp.
- To keep the service secure, prevent misuse, meet legal duties, and improve the service using counts that don’t identify you.
We never sell your data and we don’t use your health data for advertising.
Who can see your data
- Doctors you share with: only when you choose to, for the visit or plan you share it for. You can see a log of who opened your record, and hide any report.
- Labs and pharmacies: only the orders you send them and what they need to fulfil them.
- Family and caregivers: people you add, with the access you choose. Your period diary and your Just for her / Just for him section are never visible to caregivers, and doctors see only the anonymous text of a private question.
- Blood donors and blood banks: a donor sees a family’s number only after agreeing to help; the family sees the donor’s number only after the donor says yes.
- Employers: if your employer pays for your care, they see totals only, never your medical details.
- Service providers who work for us, under contract and only for the purpose stated: cloud hosting and storage, SMS and WhatsApp delivery, payments, sign-in, push notifications, and, only when you tap “Read it for me”, an AI service that transcribes the document you chose. Some of these providers may process data outside India, with safeguards required by law.
- Authorities, when the law requires it.
Your choices and rights
- See and download your records at any time (Profile → Export).
- Correct your details in the app, or ask us to.
- Withdraw consent, stop sharing with a doctor, turn off SMS or WhatsApp copies, or stop being a blood donor, at any time.
- Delete your period diary, or close your account from the app. Closing erases your health data, except what we must keep by law (for example, payment records) and what doctors and providers must keep in their own records of your care.
- Nominate someone to exercise these rights for you if you die or can’t act, by writing to our grievance officer.
- Complain to our grievance officer (below) and, if not satisfied, to the Data Protection Board of India.
Children
Profiles for children are created and managed by a parent or guardian, who gives consent on the child’s behalf. We don’t track children’s behaviour or show them advertising.
How long we keep it
We keep your records while your account is open, so they are there for your next doctor. When you close your account we erase them, except where the law requires us to keep something for longer. Sign-in codes expire within minutes; security logs are kept for a limited time.
Security
Data is encrypted in transit, access within our team is limited and logged, files are served through short-lived links, and providers see only what you share. If a breach affects you, we will tell you and the Data Protection Board as the law requires.
Contact and grievances
Grievance officer: , . We reply within 7 days and resolve complaints within 30 days.
Address:
Changes
If we change this policy in a way that affects you, we will tell you in the app before it applies.