Your data under the DPDP Act

JeevanPatra runs this website and the JeevanPatra patient and doctor apps. Registered name: [to be published after company registration details are confirmed].

For the accounts we run (patients, doctors, labs, pharmacies and hospital staff) we decide why and how personal data is processed, so under the Act we are the Data Fiduciary. The companies that host or support the service for us are our processors; they are listed on the processors page.

• Section 5 · Rule 3Privacy noticeThe current notice, and the itemised list of data and purposes under legal review.
• Sections 11–14Your rightsAccess, correction, erasure, nomination and grievance: how to use each one.
• Section 6Consent and withdrawalWhat we ask consent for, the defaults, and how to withdraw.
• Section 8(10) · Rule 9Grievances and contactOur privacy contact, how grievances are handled, and the Data Protection Board.
• Section 9 · Rules 10–11Children and guardiansThe 18+ rule, guardian authority and what happens at 18.
• Section 8(7) · Rule 8Data retentionHow long we keep data and what happens when you delete your account.
• Sections 8(2) and 16Processors and transfersThe service providers that process data for us, and where.
• Section 8(5) · Rule 6Security practicesThe safeguards in place today and the ones still in progress.
• Section 8(6) · Rule 7Breach notificationWhat we do, and what you can expect, if a personal data breach happens.
• Sections 4–6AI and automated processingWhat AI features do, the consent they need, and doctor review.

Our privacy controls are being brought in line with the DPDP Rules 2025 before their main obligations take effect. Some steps need people rather than code: approval of the full privacy notice and its Hindi and Marathi translations by counsel, appointment of our privacy contact, agreements with each processor and a retention schedule. Until each one is done, the relevant page says so rather than describing it as complete.

See grievances and contact for how complaints are handled.