MedNext Privacy Policy

Effective Date: April 24, 2026  |  Last Updated: April 24, 2026

1. Introduction

Welcome to MedNext, a telehealth marketplace based in Mumbai, India. MedNext provides a digital ecosystem connecting patients with clinical service providers, including doctors, physiotherapists, and nurses.

This Privacy Policy describes how we handle personal data as a Data Fiduciary under the Digital Personal Data Protection Act (DPDPA) 2023. By using the MedNext App or website, you consent to the collection and processing of your data as outlined below.

2. Information We Collect

To facilitate professional clinical care, we collect:

• Demographic & Contact Data: Name, age, gender, and contact/location details for identity verification and service delivery.
• Comprehensive Clinical Records: Medical history, symptoms, prescriptions, lab results, and notes from doctors, nurses, or physiotherapists.
• Provider Credentials: Professional registration numbers (NMC/State Council), licensing, and educational qualifications for all clinical staff.
• AI Scribe Data: Encrypted audio and transcripts generated during clinical encounters.
• Operational Metadata: Technical data (IP addresses, device identifiers) required for security and app performance.

3. Legal Basis for Processing

We process your data based on Explicit Consent, Medical Necessity (to provide healthcare services), and Legal Obligations (statutory medical record-keeping).

4. The MedNext AI Scribe & Clinical Accuracy

Our platform utilizes AI-driven technology to assist in clinical documentation.

• Physician Responsibility: The AI Scribe is a supportive tool. The Physician is solely responsible for reviewing, editing, and verifying the accuracy of all AI-generated notes before they are finalized.
• Consent: Audio recording of an encounter can only be initiated by the Physician after obtaining verbal or written consent from the Patient.

5. Children's Data (Under 18)

MedNext is not intended for unsupervised use by minors.

• Parental Consent: For any user under the age of 18, we require verifiable consent from a parent or lawful guardian.
• Safety: We do not process children's data for tracking, behavioral monitoring, or targeted advertising.

6. Data Sharing & Third Parties

We share data only as necessary for care:

• Clinical Marketplace: Sharing patient data with the specific Health Provider booked by the patient.
• Diagnostic Partners: Integrated labs for direct delivery of test results to the app.
• Regulatory Compliance: Disclosure to Indian health authorities when mandated by law.
• Zero-Sale Policy: We never sell your health data to third-party advertisers.

7. Data Storage & Localization

In compliance with the DPDPA 2023, all personal data of Indian residents is stored on secure, encrypted servers located within the territory of India. We utilize industry-standard encryption.

8. User Rights & Nomination

Under the DPDPA 2023, you have the right to:

• Access & Correct: View and update your clinical records and personal data.
• Withdraw Consent: Rescind your consent for data processing at any time.
• Right to Nominate: You may nominate any individual to exercise your data rights in the event of your death or incapacity.
• Erasure: Request data deletion (subject to statutory medical retention laws).

9. Duties of the User (Data Principal)

As a user of MedNext, you are legally obligated to:

• Provide only accurate and truthful information.
• Not suppress any material information relevant to your clinical care.
• Not file false or frivolous grievances with the platform or the Data Protection Board.

10. Account Deletion Process

To initiate the closure of your account and erasure of your personal data:

• Request Initiation: Please initiate account deletion from the app settings or our website.
• Retention Limits: Note that certain clinical data (such as prescriptions) must be retained for 3–7 years as per NMC guidelines before permanent deletion is permitted.

11. Grievance Redressal & Data Protection Officer (DPO)

If you have questions or wish to exercise your rights, please contact our designated officer:

• Name: Sunil Dhiliwal
• Email: dr.sunil.dhiliwal@gmail.com
• Address: Mumbai, Maharashtra, India.