Legal
Everything in force, in the version that is in force. Nothing here is written to be impressive; it is written so that you can tell what we actually do with your data and what happens when something goes wrong.
These are drafted for India — the DPDP Act 2023, the IT Act and its SPDI Rules, and the Telemedicine Practice Guidelines 2020. HIPAA is addressed as a safeguards standard we align to, not as a law that binds an Indian clinic.
Agreements
Notices
- Privacy PolicyWhat personal data MedAppz handles, why, and what you can do about it.
- DPDP Act 2023 — Notice and RightsThe specific notice the Digital Personal Data Protection Act 2023 requires, and how to exercise your rights.
- Cookie and Local Storage NoticeWhat the product stores in your browser, and why.
- Sub-processorsEvery third party that may process customer or patient data, and what for.
- Grievance RedressalWho to contact, and what happens next.
- Patient Privacy Notice (template)A privacy notice a clinic can publish to its own patients — fill in the clinic's details.
Policies
- Security PolicyThe technical and organisational measures behind the product.
- HIPAA-Aligned SafeguardsWhich HIPAA Security Rule safeguards the product implements — and an honest statement of what HIPAA does and does not mean here.
- Billing, Refunds and CancellationHow subscriptions are billed, cancelled and refunded.
Guidelines
Working out what your own clinic owes
These policies cover what we do with your data. Your obligations to your patients are separate, and there is a free self-audit for them: 29 lines, scored in the page, each one saying whether MedAppz enforces it for you, gives you the desk to do it, or cannot help at all.
Open the DPDP self-audit →