Privacy Policy — MedSphere AI OS

1. Overview & Commitment

TechnoConsultancy and Services ("we," "us," or "our") operates MedSphere AI OS (Package ID: com.technocons.medsphere.ai), an enterprise clinical operational system designed for hospitals, outpatient departments (OPD), inpatient wards (IPD), and pathology diagnostic laboratories.

We are fully committed to protecting patient health data privacy, clinical confidentiality, and adhering to strict international health data standards, including India's Digital Personal Data Protection (DPDP) Act 2023, ABDM (Ayushman Bharat Digital Mission) M3 guidelines, and Google Play Health Apps Policies.

2. Information We Collect

MedSphere AI OS operates as a secure clinical workflow tool. Depending on user role (Hospital Administrator, Doctor, Nurse, Receptionist, or Patient), the application processes:

• Patient Demographics & Identifiers: Full Name, Age, Gender, Mobile Number, Address, Emergency Contact, and Ayushman Bharat Health Account (ABHA ID / 14-digit Number).
• Clinical & Vital Signs Data: Blood Pressure, SpO2, Pulse Rate, Body Temperature, ESI (Emergency Severity Index) Triage Levels, and Primary Complaints.
• Diagnostic & Lab Biomarkers: Blood Counts (CBC), Hemoglobin, Liver/Kidney Function Panels, and Pathological Scanner Readings processed via MedPath AI.
• Prescription & Medical History: ICD-10 Diagnostic Codes, Doctor Prescriptions, Drug Allergies, and Medication Schedules.
• Device & System Technical Data: IP Address, App Crash Logs, Device OS Version, and Authentication Tokens for security auditing.

3. How We Use Collected Information

Collected information is strictly used for clinical execution and operational workflow management, including:

• Routing patients through AI Clinical Triage queues (ESI Levels 1 to 5).
• Executing real-time Drug-Drug Interaction Safety Checks during doctor consultation.
• Linking diagnostic lab report results to patient medical records.
• Facilitating insurance cashless authorization (Ayushman Bharat, Star Health, TPA billing).
• Generating digital OPD tokens, pharmacy gate passes, and hospital discharge summaries.

4. Data Encryption & Security Protection

We enforce multi-layered bank-grade security protocols to protect all medical data:

• Data in Transit: Encrypted using TLS 1.3 cryptographic protocols across all networks.
• Data at Rest: Encrypted using AES-256 standard encryption on secure servers.
• Role-Based Access Control (RBAC): Strict authentication permissions ensuring nurses, doctors, and billing clerks access only authorized clinical modules.

5. Data Sharing & Third-Party Disclosure

We DO NOT sell, rent, monetize, or trade any personal health information (PHI) or user data with third-party advertisers, data brokers, or marketing entities.

Data is shared strictly for authorized medical services only under the following conditions:

• With government health portals (ABDM / ABHA) upon explicit patient consent for electronic health record linking.
• With authorized third-party insurance providers (TPA) for claim settlement.
• When required by law enforcement or regulatory authorities under statutory health mandates.

6. Data Retention & Deletion Rights

Patients and healthcare providers retain complete rights over their personal data:

• Access & Correction: Users can request correction of any inaccurate personal or clinical records.
• Right to Erasure (Account & Data Deletion): Users or hospital administrators can request permanent deletion of their account profile and non-statutory records by contacting our Privacy Desk at surendra.rajhans@gmail.com. Requests are processed within 7 business days.

7. Children's Privacy

MedSphere AI OS is a clinical management software used by healthcare professionals. Paediatric patient registration occurs under direct parent or legal guardian authorization. We do not knowingly collect personal data from minors without legal guardian consent.