Privacy Policy | Liffyy Healthcare Platform

IMPORTANT NOTICE: Draft prepared for pre-production compliance under the Digital Personal Data Protection (DPDP) Act 2023 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Requires final owner and legal counsel review prior to commercial launch.

1. Information We Collect

To deliver healthcare services, Liffyy collects:

Identity & Account Data: Mobile phone number, full name, age/date of birth, gender, and saved delivery addresses.
Family Profile Data: Names and demographic details of family members added voluntarily to your account.
Clinical & Service Data: Requested diagnostic tests, doctor appointment notes, digital prescriptions, and laboratory reports.
Technical & Session Data: Masked IP address, device telemetry for WebRTC video connectivity, and secure authentication tokens.

2. Purpose & Use of Data

Your data is processed strictly for:

Authenticating your patient account via secure OTP verification.
Connecting you with verified doctors, laboratories, pharmacies, and home health workers.
Generating digital prescriptions and transmitting diagnostic test reports securely to your account.
Processing payments and tracking order fulfilment status.

3. Health Record Privacy & Non-Commercialization

We NEVER sell, rent, or trade your personal health data to third-party advertisers, data brokers, or pharmaceutical marketers.

Your clinical records (prescriptions, diagnostic test values, medical histories) are accessible only to you, the treating doctor, and authorized healthcare laboratory personnel directly responsible for fulfilling your request.

4. Data Storage & Security Standards

All communications are encrypted in transit using Transport Layer Security (TLS 1.3).
Clinical PDF documents are stored in private, zero-public-access Cloudflare R2 object storage with time-limited signed access URLs.
All server databases enforce strict multi-tenant row-level access controls and tenant isolation.

5. Patient Rights & Account Deletion

Under the DPDP Act 2023, you have the right to review, update, or request the deletion of your account. You can submit an account deletion request directly through your My Health & Account dashboard. Historical medical records are retained only where mandated by Indian clinical establishment regulations and tax laws.

6. Data Protection & Grievance Officer

In accordance with the Information Technology Act 2000 and DPDP Act 2023, the details of the Liffyy Grievance Officer are: