Privacy Policy - Yadasutra

This Privacy Policy explains how Factor human ("we", "our", "us"), the developer of the Yadasutra mobile application (the "App"), collects, uses, shares and protects information when you use the App on Android or iOS.

Yadasutra is a private consultation and treatment management app used by registered staff of healthcare clinics (such as doctors, front-office staff, patient relations officers, therapists and administrators). Accounts are created by the clinic's administrators; the public cannot register in the App.

A. Staff account information
- Name, email address, phone number, employee ID, role, designation and branch.
- Login credentials (passwords are stored in encrypted/hashed form and are never visible to us or to administrators).

B. Patient and clinic information entered by staff
Staff use the App to record information about the clinic's patients, including:
- Patient name, mobile number, address and branch.
- Health information: consultation details, doctor's notes, treatment plans, treatment days and progress.
Voice notes recorded by the doctor during a consultation.
A profile photo of the patient added to the consultation.
- Appointment, follow-up and feedback details.
- Billing records: package amounts, charges, discounts and cash payments recorded by staff. The App does not process card, bank or online payments and does not collect payment card details.

C. Device permissions (used only for the features described)
- Location: therapists' start and end locations are recorded when they check in and out of a therapy session. With the user's permission this may happen while the App is in the background during a session.
- Microphone: to record voice notes for consultations.
Camera and photos: to take or select a patient profile photo for a consultation; to capture photos and short videos of the therapy room at check-in, to confirm the room is clean and prepared (these do not include patients); and to save generated PDF reports.
- Notifications: to send work notifications (for example new assignments, approvals and tickets).

D. Technical information
- A push notification identifier for your device (provided by our notification service, OneSignal), device type and operating system version, and basic error and usage logs needed to keep the App working.

2. How We Use Information
- To sign staff in securely and show each user only the information their role allows.
- To manage consultations, treatment plans, therapist assignments, check-ins, preparation and billing records for the clinic.
- To send work notifications.
- To provide support, fix problems and keep the App secure.
- To comply with legal obligations.
We do not use patient or staff information for advertising, and we do not sell it.

3. Sharing of Information
- Within the clinic: information is visible to the clinic's authorised staff according to their role (for example, a doctor sees the patients assigned to them; administrators can see all branches).
- Service providers: our cloud hosting and database provider, and OneSignal for push notifications. They process data only to provide their services to us.
- Legal reasons: when required by law, court order or a government authority.
We do not sell, rent or trade personal information.
4. Data Security
All data is sent over encrypted HTTPS connections and stored on secured servers. Access is restricted by user role, and passwords are stored hashed. No method of storage or transmission is 100% secure, but we take reasonable measures to protect information.
5. Data Retention
Patient and clinic records are kept for as long as the clinic needs them for treatment, legal and record-keeping purposes. Staff account information is kept while the account is active and deleted or anonymised when the clinic closes the account, unless the law requires us to keep it longer.

6. Your Rights and Account Deletion
You may request access to, correction of, or deletion of your personal information.
- Staff can ask their clinic administrator, or email us at the address below, to delete their account and associated personal data.
- Patients can ask the clinic, or email us, to access, correct or delete their information.
We will respond within 30 days. Some records may need to be kept where the law requires it.

7. Children
The App is intended only for clinic staff and is not directed at children. Information about minor patients is entered only by authorised clinic staff.

8. Changes to This Policy
We may update this Privacy Policy. Changes are shown by the "Last updated" date above.

Page updated

Google Sites

Report abuse