Privacy Policy

1. Introduction

Welcome to Opdigo ("we", "our", or "us"). Opdigo provides clinic management and outpatient department (OPD) queue solutions through our mobile application Opdigo (Package: com.opdigo.app) available on the Google Play Store, and our web application and services hosted at https://opdigo.com (collectively, the "Platform").

We are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains in detail how we collect, use, store, share, and protect your information when you access or use our mobile application and related web services.

2. Information We Collect

To provide healthcare scheduling, real-time live token tracking, and doctor-patient communication, we collect the following categories of information:

A. Personal Information You Provide to Us

• Account & Profile Information: Name, mobile phone number, email address, age/date of birth, gender, and profile photo (optional).
• Appointment & Consultation Information: Details regarding the clinic, doctor chosen, appointment date and time slot, booking tokens, reason for consultation, and appointment status (confirmed, queued, completed, cancelled).
• Health & Medical Records: Digital prescriptions, diagnosis summaries, lab test reports, and doctor clinical notes uploaded by you or issued by healthcare providers through our clinic management dashboard.
• Communications: Queries, customer support messages, feedback, and verification OTPs exchanged during login or password reset.

B. Information Collected Automatically Through the Mobile App

• Device & Hardware Details: Device brand and model, operating system version (Android/iOS), unique device identifiers, and network connection type.
• App Usage & Diagnostics: Log files, app crashes, performance metrics, and session timestamps to ensure the app is fast, secure, and bug-free.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens required to deliver real-time notifications about your appointment confirmation, live queue updates, and doctor availability.

C. Permissions Requested by the Android App

3. How We Use Your Information

We use the collected information solely for legitimate healthcare, operational, and service delivery purposes, including:

• Booking & Managing Appointments: Enabling patients to book, reschedule, or cancel doctor consultations at participating clinics.
• Live Token & Queue Management: Providing live queue status so patients can minimize waiting room time at clinics.
• Automated Communications: Sending booking confirmations, queue start notifications, and appointment completion summaries via WhatsApp, SMS, and in-app notifications.
• Access to Medical History: Allowing patients to securely review past prescriptions, medical certificates, and diagnostic reports issued by their treating doctors.
• Security & Fraud Prevention: Verifying phone numbers via OTP to prevent fake bookings and safeguard patient accounts.
• Platform Reliability: Monitoring system uptime, diagnosing bugs, and improving user interface performance.

4. Data Sharing and Disclosure

We do NOT sell, rent, trade, or monetize your personal or health data to advertisers or third-party marketing companies under any circumstances.

We only share your information under the following limited conditions:

• With Healthcare Providers & Clinics: When you book an appointment with a clinic or doctor on Opdigo, the relevant details (patient name, age, phone number, and appointment reason) are shared with that specific clinic and doctor so they can provide medical care.
• With Essential Infrastructure Providers: We use trusted third-party cloud and communication services bound by strict confidentiality and security agreements:
  • Google Firebase: For secure app authentication and push notifications.
  • WhatsApp / Meta Business Cloud API: For delivering transactional appointment notifications and token reminders directly to your WhatsApp number.
  • Cloud Hosting & Database: Secure, firewall-protected virtual private servers to store platform records.
• Legal & Regulatory Compliance: If required by applicable law, court order, or governmental authorities in accordance with healthcare compliance guidelines.

5. Data Security and Encryption

The privacy and security of health data is our top priority. We implement robust technical and organizational security measures to protect your information:

• End-to-End Encryption in Transit: All communications between the Opdigo Mobile App, website, and our backend servers are strictly encrypted using Transport Layer Security (TLS 1.2 / TLS 1.3 / HTTPS).
• Multi-Tenant Isolation: Patient records and clinic data are partitioned securely to prevent unauthorized cross-clinic access.
• Restricted Access: Only authorized clinic personnel treating the patient can view relevant medical records.

6. Data Retention and Account Deletion Policy

We retain your personal information for as long as your account remains active or as required to provide you with ongoing healthcare management services and comply with statutory medical record retention obligations.

7. Children's Privacy

The Opdigo platform is not designed to target children under the age of 13 independently. Children may use the service only with the involvement, consent, and supervision of a parent or legal guardian who manages the appointment booking on their behalf.

8. User Rights

Depending on your jurisdiction, you have the following rights regarding your personal information:

• Right to Access: View and review all personal and medical records stored on your account.
• Right to Rectification: Update or correct inaccurate profile details.
• Right to Erasure: Request the deletion of your account and associated personal data.
• Right to Opt-Out: Manage your notification preferences or opt-out of promotional alerts (transactional appointment alerts will still be delivered).

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect improvements in our app, operational changes, or new regulatory standards. When updates occur, we will revise the "Effective Date" at the top of this page. We encourage you to review this policy periodically.

10. Contact Us & Grievance Redressal

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your health data, please contact our Data Protection and Grievance team: