Privacy Policy

Applies to the MedRelief Patient and MedRelief Doctor apps and the MedRelief lab platform.
Last updated: 16 August 2026 · Version 1.0

This policy explains what personal data MedRelief collects, why, how it is protected, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP). By using the MedRelief apps and services you agree to this policy.

Who we are

Med Relief Healthcare Pvt Ltd ("MedRelief", "we") operates diagnostic laboratories and the MedRelief software platform. Registered address: 50 metres North of Bhainsasur Chowk, Opp. Sudha Dairy, Bihar Sharif (Nalanda) — 803101, Bihar, India.

What data we collect

• Identity & contact: your name, mobile number, gender, age.
• Health data: diagnostic test orders, results and lab reports relating to you (or, for doctors, patients you have referred).
• Booking details: when you book a home collection or centre visit, your address, pincode, preferred date and time, and the tests or package you chose, and — only if you choose to share it — your device location, used once to check that you are within our home-collection area.
• Billing: bills, payment status and payment method (we do not store card numbers or bank credentials — payments are processed by our payment gateway).
• Technical: app version, device type and log data needed to run the service securely.

How we use it

• To register you, deliver your lab reports, and manage bills and payments.
• To arrange a home sample collection or a centre visit you book with us, and to contact you about it.
• To let a doctor view a patient's reports only after the patient grants consent.
• To provide optional AI-generated report summaries (assistive only, grounded solely in the report's own result values, with personal identifiers removed).
• To secure the service, prevent misuse, and meet legal/regulatory obligations.

Consent & sharing

• A patient's reports are never shown to a doctor unless the patient grants consent in the app, and the patient can revoke it at any time.
• We do not sell your data. We do not share it with third parties for advertising.
• Limited processors act on our behalf under contract: our hosting provider, our WhatsApp/SMS provider (to send reports, receipts and one-time passwords), and our payment gateway.

Data security

Data is encrypted in transit (HTTPS). Access is role-restricted and audited. Reports are served through short-lived, signed links.

Retention

We retain lab and account records for the period required by applicable medical-records and tax regulations, after which they are deleted or anonymised.

Your rights (DPDP)

• Access & correction of your personal data.
• Erasure — request deletion of your data (subject to legal retention limits).
• Withdraw consent — including revoking a doctor's access to your reports.
• Grievance redressal — contact our Grievance Officer below.

Children

Minors' data is handled on behalf of, and with the consent of, a parent/guardian, consistent with DPDP.

Grievance Officer / Contact

Changes

We may update this policy; material changes will be notified in-app. The "Last updated" date above reflects the current version.