Privacy Policy & Account Deletion Request

1. Purpose & Organizational Scope

Arogya Foundation of India ("Organization", "We", "Us", "Our") operates the ARC Telemedicine and Rural Healthcare Platform. Our mission is to deliver comprehensive, quality primary healthcare and specialist teleconsultations to underserved rural and tribal communities across India. This Privacy Policy governs the processing of personal and sensitive medical data across our mobile applications (ARC Sevika App and ARC Doctor App) and the web administration dashboard (https://arc.arogyafoundationofindia.in).

2. Categories of Information We Collect

To facilitate teleconsultations, clinical triage, and community health tracking, we collect and process the following categories of information:

• Patient Demographics & Vitals: Full Name, Age, Gender, Village, Sanch/Block, Contact Number, Blood Pressure, Blood Glucose, Hemoglobin, SpO2, Heart Rate, Body Weight, and Temperature readings.
• Telemedicine Audio-Visual Media: Encrypted live WebRTC video/audio streams during doctor teleconsultations, recorded audio voice consent files (audio/mp4, audio/m4a), and diagnostic photo attachments of symptoms.
• Community Health Worker (Sevika) Data: Name, Registered Phone Number, Assigned Village Scope, Daily Attendance Check-in Geolocation (GPS coordinates), and Attendance Verification Selfies.
• Medical Practitioner Credentials: Doctor Full Name, Medical Registration Number, Specialization, Assigned State Scope, and SSO Identity Tokens.

3. How We Use Healthcare Information

Personal and health information collected is strictly utilized for healthcare operations, specifically:

• Connecting rural patients with qualified medical doctors for real-time teleconsultations and digital prescriptions.
• Conducting NCD (Non-Communicable Diseases) screenings for hypertension, diabetes, and anemia in remote villages.
• Generating monthly health reports (MWR & Patrak) for healthcare supervisors to identify epidemic outbreaks.
• Verifying Sevika field presence via GPS coordinates during scheduled village visits.
• Maintaining compliance with the Telemedicine Practice Guidelines issued by the National Medical Commission (NMC) of India.

4. Data Storage, Security & Encryption

All patient clinical records adhere to HL7 FHIR R4 (Fast Healthcare Interoperability Resources) data specifications, securely stored in dedicated PostgreSQL relational databases. Diagnostic photos and voice consent recordings are hosted in private Amazon S3 buckets utilizing AES-256 Server-Side Encryption (SSE-S3). File retrieval uses time-limited presigned URLs with 15-minute expirations. Communication across mobile apps and backend services is strictly encrypted via TLS 1.3.

5. Strict Zero Data Commercialization Guarantee

6. Retention & Statutory Clinical Records Policy

Under Indian medical record retention regulations and NMC Telemedicine Guidelines, clinical consultation notes, prescriptions, and diagnosis records must be retained for statutory periods (minimum 3 years). However, personal user account credentials, login profiles, test sandbox data, and contact information can be permanently erased upon request using our Account Deletion Request process.

7. User Privacy Rights & Grievance Redressal

Every user (Health Worker, Doctor, Supervisor, or Patient) has the right to:

• Request access to and a copy of their stored personal information.
• Request correction or updating of inaccurate profile details.
• Request account deletion and revocation of SSO login credentials.
• Request data anonymization of non-statutory healthcare records.

To exercise these rights, submit the form under the Account Deletion Request tab or contact our Data Protection Officer at dpo@arogyafoundationofindia.in.