Privacy Policy

Effective Date: 07/06/2025

1. Introduction

This Privacy Policy describes how SHC Technologies Pvt. Ltd. ("we," "our," or "us") collects, uses, and protects your personal and health information when you use the Maternal Health AI Platform ("Platform"). This policy complies with the Personal Data Protection Bill, 2019, Information Technology Act, 2000, and Clinical Establishments Act, 2010.

2. Information We Collect

2.1 Personal Information
  • Name, age, date of birth, and contact details
  • Aadhaar number (encrypted and stored securely)
  • Emergency contact information
  • Geographic location for nearest ANC center mapping
2.2 Health Information
  • Medical history and pregnancy-related data
  • Vital signs and biometric measurements
  • Laboratory test results and imaging data
  • Risk assessment scores and AI predictions
  • Telemedicine consultation records
2.3 Technical Information
  • Device information and IP addresses
  • Usage patterns and application logs
  • Location data for emergency services

3. Legal Basis for Processing

We process your personal and health data based on:

  • Consent: Explicit consent for health data processing
  • Medical Care: Provision of healthcare services under Clinical Establishments Act
  • Legal Compliance: Compliance with Telangana health regulations
  • Vital Interests: Protection of life and health in emergency situations

4. Data Usage

4.1 Primary Purposes
  • AI-powered pregnancy risk assessment and prediction
  • Personalized care recommendations and treatment plans
  • Telemedicine consultations and remote monitoring
  • Emergency alert systems and rapid response coordination
  • Health education through AR/VR modules
4.2 Secondary Purposes
  • Anonymized research for improving maternal health outcomes
  • Population health analytics for Telangana state
  • AI model training and improvement (with de-identified data)
  • Quality assurance and compliance monitoring

5. Data Sharing and Disclosure

5.1 Authorized Healthcare Providers
  • Registered doctors and specialists on the platform
  • ASHA workers and certified healthcare professionals
  • Authorized ANC centers and hospitals in Telangana
5.2 Government Authorities
  • Telangana State Health Department (for public health initiatives)
  • National Health Mission programs
  • Medical emergency services (108 ambulance, etc.)
5.3 Research Institutions
  • Anonymized data for approved medical research
  • Academic institutions with proper ethical clearance
  • Public health policy development initiatives

6. Data Security Measures

  • Encryption: AES-256 encryption for data at rest and in transit
  • Access Control: Role-based access with multi-factor authentication
  • Audit Trails: Comprehensive logging of all data access
  • Data Centers: Indian data centers complying with RBI guidelines
  • Regular Security Audits: Third-party penetration testing
  • Backup and Recovery: Secure backup systems with disaster recovery

7. Your Rights Under Indian Law

7.1 Access Rights
  • Request access to your personal and health data
  • Obtain copies of your medical records
  • Review AI predictions and risk assessments
7.2 Correction Rights
  • Update inaccurate personal information
  • Correct medical history entries
  • Request data verification from healthcare providers
7.3 Deletion Rights
  • Request deletion of personal data (subject to legal retention requirements)
  • Withdraw consent for non-essential data processing
  • Account deactivation with data anonymization
7.4 Portability Rights
  • Export your health data in standard formats
  • Transfer data to other healthcare providers
  • Receive machine-readable copies of your records

8. Data Retention

  • Active Medical Records: 7 years from last consultation
  • Pregnancy Records: 25 years (as per MCI guidelines)
  • Emergency Data: 10 years for legal compliance
  • Research Data: Anonymized indefinitely for medical research
  • Audit Logs: 5 years for compliance monitoring

9. Cross-Border Data Transfer

Your personal and health data is stored exclusively within India in compliance with data localization requirements. Any international collaboration for research purposes uses only anonymized datasets with appropriate legal frameworks.

10. Children's Privacy

For users under 18 years, we require parental or guardian consent. Special protections apply to pregnant minors, with additional safeguards for confidentiality and access to healthcare services.

11. Grievance Redressal

Privacy Officer Contact:

Name: Dr. Priya Sharma
Designation: Chief Privacy Officer
Email: privacy@maternalhealth.ai
Phone: +91-40-2345-6789
Address: SHC Technologies Pvt. Ltd., Hyderabad, Telangana

Response Time: Within 30 days of complaint receipt
Escalation: Telangana State Information Commission

12. Updates to Privacy Policy

We may update this policy to reflect changes in laws, regulations, or our practices. Users will be notified of material changes through:

  • Email notifications to registered users
  • In-app notifications
  • Website announcements
  • SMS alerts for critical changes

13. Regulatory Compliance

This platform complies with:

  • Personal Data Protection Bill, 2019
  • Information Technology Act, 2000 and Rules 2011
  • Clinical Establishments Act, 2010
  • Telangana Clinical Establishments Rules, 2013
  • Indian Medical Council Regulations
  • Drug and Cosmetics Act, 1940
  • Consumer Protection Act, 2019
Important Notice

By using this platform, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

Last Updated: 07 June 2025

Version: 2.1