Privacy Policy
Last updated: 9 November 2026
This policy explains how FonePeDoc ("FonePeDoc", "we", "us") handles your personal data when you use the FonePeDoc mobile app and this website. We process personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.
1. Who can use FonePeDoc
FonePeDoc accounts are for adults aged 18 and over. An adult account holder can book a consultation or visit for a family member, including a child, and is responsible for providing that person's information with their authority.
2. Data we collect
| Category | What | Why |
|---|---|---|
| Account | Mobile number (used to sign in with a one-time password), name, date of birth, gender, email if you add it | To create and secure your account and contact you about your service |
| Family members and nominee | Names, ages and relationship of people you book for; a nominee you choose | To book care for them; to let your nominee exercise your rights as the DPDP Act allows |
| Health information | Symptoms and reasons for a consultation, prescriptions, reports and files you upload, consultation notes, medications, vitals, diet and water logs | To provide consultations and visits, and to show your health records and reminders |
| Health Connect data (optional) | Only if you allow it: heart rate, blood pressure, blood glucose, oxygen saturation, weight, sleep and steps | To show and record your vitals in the app |
| Consultation calls | Camera and microphone during a video or audio consultation you join | To connect you with your doctor |
| Location (optional) | Approximate location, only when you allow it | To find clinics, hospitals and services near you and fill in an address |
| Orders and payments | Items ordered, delivery address, payment status and transaction references | To process orders, payments, refunds and invoices |
| Device and app | Device model, operating system, app version, notification token, signed-in devices | To deliver notifications, keep your account secure and support the app |
| Crash reports (optional) | Technical details of an app crash, with names, numbers, emails and request contents removed on your phone before sending | To fix bugs - sent only if you turn on the crash reports consent |
3. Consent
When you sign up we show you an itemised notice of each purpose we use data for. Purposes needed to run the service are required; the rest (for example crash reports and marketing messages) are off until you turn them on. You can change your choices at any time in Profile → Privacy and data. Withdrawing consent does not affect processing that happened before you withdrew it.
4. Health Connect
If you connect Android Health Connect, FonePeDoc reads and writes only the data types listed above, and only after you grant permission. Data from Health Connect is used solely to show and record your health measurements in FonePeDoc. It is not used for advertising, not sold, and not shared with third parties except as needed to provide this feature or as required by law. You can revoke access at any time in Health Connect settings.
5. Who we share data with
We share personal data only as needed to provide the service:
- Doctors, clinics, hospitals, labs and pharmacies you choose to consult, book or order from, so they can provide care or fulfil your order.
- Service providers who process data on our behalf: Razorpay (payments - we do not store your card or UPI credentials), Google Firebase Cloud Messaging (push notifications), our SMS and email providers (one-time passwords and service messages), and Sentry (crash reports, only with your consent).
- Authorities, when required by law or to protect someone's life or safety.
We do not sell your personal data.
6. How we protect your data
Data travels between the app and our servers over encrypted connections (HTTPS/TLS). Sign-in tokens are kept in your phone's secure storage. Access to personal data within FonePeDoc is limited to people who need it to provide the service.
7. How long we keep data
We keep your data while your account is open. When you close your account, we erase your personal data, except what we must keep to meet legal obligations - for example medical records, invoices and payment records that law requires us or our partner healthcare providers to retain - which is kept only for the period that law requires and then deleted.
8. Your rights
Under the DPDP Act you can:
- get a copy of and information about your personal data;
- correct or update inaccurate or incomplete data;
- withdraw consent for any optional purpose;
- close your account and have your data erased (see Delete your account);
- nominate someone to exercise your rights if you die or become incapable;
- raise a grievance with us, and if not resolved, with the Data Protection Board of India.
You can do all of this in the app at Profile → Privacy and data, or by emailing support@fonepedoc.com from the contact details on your account.
9. Grievances
For any complaint about how we handle your data, use Raise a complaint in Profile → Privacy and data, or write to support@fonepedoc.com. The current Grievance Officer contact is also shown in the app on that screen.
10. Changes to this policy
If we make material changes, we will update the date above and tell you in the app. Where a change needs your consent, we will ask for it.
11. Contact
Email support@fonepedoc.com.