Privacy notice

1. Who we are

ScanLink is run by [company name, address: to confirm], India. Under the DPDP Act we are the “Data Fiduciary”: the company responsible for how your data is handled.

The person whose records are stored is the “Data Principal”.

2. What ScanLink does

We store a person’s medical scans and reports safely. The person can share them with a doctor they approve, for 14 days at a time. Every view is recorded.

ScanLink is not a medical service. We do not read your scans to give opinions.

3. What we collect

• Account: your name (if you give it), your email address, and sign-in records.
• People: the name, date of birth and relationship of each person whose records you keep.
• Records: the scan files, report PDFs and photos you upload, and the details you file them under (type, date, body part, centre or hospital).
• Sharing: the doctor’s name and email, the dates access started and ended, and a log of each time a record was opened (who, when, which record).
• Technical: device type, browser, IP address and error logs needed to run and secure the service.

We do not collect your contacts, your location, or anything from other apps. [Payments: to confirm, none in the pilot.]

4. Why we use it

• To store your records and show them back to you.
• To share records with a doctor only when you approve, and to end that access after 14 days or when you stop it.
• To keep the view log, so you can see who looked at what.
• To suggest how to file a document you upload (section 5).
• To keep the service secure and fix faults.
• To answer your questions and complaints.
• To meet the law, for example a court order.

We do not use your records for advertising and we do not build profiles. ScanLink never sells data. [Whether any other legal basis than consent applies: to confirm.]

5. Filing suggestions by software

When you upload a document, we scan it to suggest how to file it: type, date, body part and centre. You see the suggestion and confirm or change it before anything is saved.

The software does not interpret your scans, does not give medical opinions, and may be wrong. [Whether the software is ours or a vendor’s, and that it runs only in India: to confirm.]

6. Founder access during the pilot

During the pilot, the founders may open your files to check that the service works. Every such view is recorded and you can see it in your activity list.

Founders can also see account details to give you support. We never sell or share what we see.

7. Where your data lives and how it is protected

Records are stored encrypted on servers in India [provider and city: to confirm]. They are encrypted while stored and while travelling over the internet.

Only you, people you add as managers, and a doctor with live approved access can open a record. Records you mark private are not shared with any doctor or manager by default.

8. Who else sees your data

• Doctors you approve, for 14 days per approval, to view only.
• Service providers who help us run ScanLink, bound to use data only for us: storage, email [providers: to confirm].
• Authorities, only when Indian law requires it.

When you use the WhatsApp or SMS button to send a doctor the ready message, your own phone sends it. That message carries the doctor’s number and the patient’s name. ScanLink never stores the number.

Nobody else.

9. How long we keep it

Records stay while your account is open. When you delete an account, everything is deleted after a 7-day waiting period. During those 7 days you can sign in and cancel.

Deleted records leave backups within [30 days: to confirm]. View logs are kept for [1 year: to confirm], then deleted. Anything the law requires us to keep is kept only as long as the law says [to confirm].

10. Your rights

• See your data: you can download everything in one zip from Settings.
• Correct or complete your data.
• Delete a record, or your whole account, from the app.
• Withdraw consent at any time. Withdrawing stops future use; it does not undo views that already happened. [How withdrawal works in the app, as easy as giving consent: to confirm.]
• Stop a doctor’s access before the 14 days end.
• Name someone to act for you if you die or cannot act. [How this works: to confirm.]

We reply within [30 days: to confirm], and never later than the law allows.

11. Questions and complaints

Our grievance contact is [name, email, phone: to confirm].

If you are not satisfied, you may complain to the Data Protection Board of India [contact: to confirm].

12. Language

This notice is in English. Hindi and other Indian languages: [to confirm which and when].

13. Children and people with a guardian

ScanLink is for adults. If the person is under 18, or has a lawful guardian, only the parent or guardian may give consent. [How we check this: to confirm.]

14. If something goes wrong

If your data is exposed in a breach, we will tell you directly in plain words, and tell the Data Protection Board within the legal time. [Process: to confirm.]

15. Changes

If we change this notice in a way that matters, we will tell you by email and in the app before it takes effect, and ask for your consent again where the law requires.