+91 7311129511/512MADHURAJ HOSPITAL PRIVATE LIMITED - KANPUR
Privacy Policy
MadhurajDoc — Doctor Application
Effective date: 1 August 2026 · Last updated: 1 August 2026
Madhuraj Hospital Private Limited (“Madhuraj Hospital”, “we”, “our”, or “us”), 113/120-1, Swaroop Nagar, Kanpur, Uttar Pradesh 208002, India, operates the MadhurajDoc mobile application (the “App”). The App is a clinical tool used exclusively by authorized doctors and medical staff of Madhuraj Hospital to view and manage patient information, including vitals, pathology and diagnostic reports, and clinical notes.
This Privacy Policy explains what data the App accesses, collects, uses, stores, and shares, how long it is retained, and how deletion can be requested. By signing in to the App, you agree to this Policy.
1. Who Uses This App
The App is not available to the general public and has no self-registration. User accounts are created, verified, and managed solely by the administration of Madhuraj Hospital. Only authorized doctors and healthcare professionals associated with the hospital are issued login credentials. Patients do not use this App directly; patient information within the App is maintained by the hospital as part of its medical records in the course of providing healthcare services.
2. Information We Collect
Information about App users (doctors and staff)
- Name, User ID, designation, and medical specialization
- Login credentials (User ID and password, transmitted securely; passwords are stored in encrypted/hashed form)
- Records of actions performed in the App (for example, entries added or updated), maintained for accountability and audit purposes
Patient medical information handled through the App
- Patient identification details (name, registration number/UHID, age, gender)
- Health and medical information, including vitals, pathology and diagnostic reports, admission (IPD/OPD) details, treatment notes, and clinical observations recorded by authorized doctors
Technical and diagnostic information
- Device type, operating system version, and app version
- Log information such as sign-in date and time and IP address
- Crash reports and performance diagnostics used to keep the App stable and secure
3. How Information Is Collected
- Directly from authorized users when they sign in and use the App’s features
- When doctors view, add, or update patient records, reports, vitals, and notes as part of clinical care
- Automatically through the App for security logging, diagnostics, and crash reporting
4. How We Use Information
- To authenticate authorized users and control access to patient information on a need-to-know, role-based basis
- To enable doctors to deliver healthcare services, including reviewing and updating patient records, reports, and vitals
- To maintain the accuracy, integrity, and auditability of hospital medical records
- To secure the App, detect and prevent unauthorized access or misuse, and comply with legal obligations
- To diagnose technical issues and improve the App’s reliability and performance
We do not use the data in this App for advertising, marketing, or profiling, and we do not sell personal data.
5. Sharing and Disclosure
Information handled through the App is shared only:
- Within Madhuraj Hospital, among authorized medical and administrative staff on a need-to-know basis for patient care and hospital operations
- With service providers who host and maintain our systems on our behalf, under obligations of confidentiality and security, and only to the extent necessary to operate the App
- Where required by law, regulation, court order, or a lawful request of a government authority
- With the patient’s explicit consent, where sharing of sensitive medical information outside the above purposes is requested
6. Data Security
We adopt reasonable security practices and procedures to protect the information handled through the App, including encryption of data in transit (HTTPS/TLS), token-based authenticated access to sensitive data, role-based access control, and password protection. Access to patient information is restricted to authorized personnel of the hospital on a need-to-know basis. While we take all reasonable and appropriate measures, no method of transmission or storage over the internet is completely secure, and absolute security cannot be guaranteed.
7. Data Retention
We retain information handled through the App as follows:
- Patient medical records (including reports, vitals, and clinical notes) are retained for as long as necessary to provide healthcare services and to comply with applicable medical record-keeping laws and regulations in India, which prescribe minimum statutory retention periods for medical records.
- Doctor and staff account information is retained for the duration of the user’s association with Madhuraj Hospital, and thereafter only as needed for audit, legal, and record-keeping purposes.
- Security logs, diagnostic, and crash data are retained only for the limited period necessary for security monitoring, troubleshooting, and service improvement.
When personal information is no longer required for these purposes and is not subject to a legal retention obligation, it is securely deleted or irreversibly anonymized.
8. Data Deletion
You may request deletion of your personal data as follows:
- Doctors and staff: Accounts are created and managed by the hospital administration. To request deactivation of your account and deletion of your associated personal data, contact the hospital administration or write to info@madhuraj.org from your registered contact details, mentioning your User ID.
- Patients: To request correction or deletion of personal information contained in your medical records, contact Madhuraj Hospital at info@madhuraj.org or the contact details below. Medical records are maintained by the hospital in accordance with applicable healthcare regulations.
Upon receiving a verified deletion request, we will delete the relevant personal information within 30 days, except where retention is required by applicable law — including statutory medical record retention requirements — or for the establishment, exercise, or defence of legal claims. Where complete deletion is not legally permissible, we will restrict further processing of the information and delete it once the legal retention period expires.
9. Your Rights
Subject to applicable law, you have the right to access the personal information we hold about you, request correction of inaccurate or outdated information, withdraw consent for processing (which may limit or prevent our ability to provide access to the App), and request deletion as described in Section 8. To exercise these rights, contact us at info@madhuraj.org. We will respond within a reasonable timeframe, subject to legal, regulatory, and technical requirements.
10. Third-Party Services
The App may use trusted third-party services for infrastructure, push notifications, and crash reporting (such as Google Firebase). These providers process limited device and diagnostic data on our behalf to deliver their functions and are bound by their own privacy commitments and our instructions. The App does not display third-party advertising.
11. Children’s Privacy
The App is intended solely for use by adult medical professionals. It is not directed at children, and we do not knowingly collect personal information from children through App accounts. Medical records of minor patients are maintained by the hospital as part of clinical care under the responsibility of their parents or guardians and in accordance with applicable law.
12. Compliance with Laws
We process personal and sensitive personal information in accordance with applicable Indian laws, including the Information Technology Act, 2000 and rules thereunder, the Digital Personal Data Protection Act, 2023 (as applicable), and applicable healthcare record-keeping regulations.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Continued use of the App after changes are posted constitutes acceptance of the updated Policy.