Privacy Policy

1. Who we are

Dawai Saathi is run by the project owner named on the contact page (the "data fiduciary"). You can write to us at the contact e-mail shown in the footer of this site. The grievance officer's name and details will be added here before launch.

2. What we collect

Only what is needed to do what you ask:

• Your WhatsApp number. We keep a one-way keyed hash (to recognise you) and an encrypted copy (to send you messages). We never store it readable.
• Your messages: text, button taps and voice notes. Text is stored with phone numbers, e-mails and similar identifiers removed.
• Photos and PDFs you send (prescriptions, lab reports). They are kept in a private, encrypted storage bucket.
• What we read from them: medicine names, strengths, doses, timings and lab test names and values. We do not keep the doctor's or patient's name, address or phone number in this data.
• Reminder settings, your replies to reminders (taken, snoozed, skipped) and, if you add one, a family member's number and the name you gave them.
• Technical records such as message ids, error codes and timings. Our logs never contain phone numbers, names or the text of your documents.

3. Why we use it

To read your documents and explain them, to suggest cheaper medicines with the same salt, to check your medicines against each other, to send reminders, to alert a family member you chose, to keep the service safe (for example to show emergency numbers) and to find and fix faults. We do not sell your data and we do not use it for advertising.

4. Who processes it for us

We use these service providers, only for the purposes above:

• Meta (WhatsApp Cloud API): carries your messages.
• AI model providers (currently Anthropic and OpenAI): read your document images and understand your text. Personal details in text are removed first.
• Speech providers (for example OpenAI Whisper and Sarvam AI for voice-to-text; if you switch spoken replies on, a text-to-speech provider such as Smallest.ai, Sarvam AI or OpenAI).
• Amazon Web Services, Mumbai region (ap-south-1): database, queues and file storage. Your data is kept in India.
• Monitoring tools that receive technical data with personal details removed.

5. How long we keep it

Photos and PDFs are deleted automatically after 30 days. Your account, medicines, reminders and lab values stay until you send DELETE. Backups are kept for a limited time and are then overwritten; the exact period will be stated here before launch. After DELETE we keep one anonymous record that an erasure happened, with no personal data.

6. Your rights

Under the DPDP Act you can:

• Erase your data: send DELETE on WhatsApp and confirm. We delete your messages, documents, medicines, reminders, family contacts and stored files.
• Withdraw your consent at any time. Today this is done with DELETE.
• Ask what data we hold about you, and ask us to correct it (use the "Something is wrong" button or write to us).
• Complain to our grievance officer, and to the Data Protection Board of India if you are not satisfied.
• Name another person to exercise these rights for you if you cannot.

7. How we protect it

Phone numbers are hashed and encrypted. Files are stored privately with server-side encryption and short-lived access links. Only people who need to operate the service can see data, and viewing a document in the admin area needs a written reason and is logged.

8. Children

Dawai Saathi is for people aged 18 and over. A child's prescription should be sent only by a parent or guardian, with their consent.

9. Family alerts

A family member is added only if you give their number and they reply YES themselves. Alerts say only your chosen name for you and the time of a missed dose. They never include a medicine, dose or condition. They can reply STOP at any time.

10. This website and the live demo

The website uses no advertising or analytics trackers. The demo accepts sample or anonymised documents only: please never upload a real patient's document. An uploaded file is processed, then deleted immediately (and in any case within 24 hours); it is never linked to a user. To limit abuse we keep a keyed hash of your IP address for rate limiting for up to one day. The admin area uses a sign-in cookie for operators only.

11. Not medical advice, and emergencies

Dawai Saathi explains what is written on your documents. It is not a doctor and gives no diagnosis or treatment advice. In an emergency call 112 or 108 or go to the nearest hospital. If you feel you may harm yourself, call Tele-MANAS on 14416.

12. Changes and contact

If we change this policy we will update the date at the top and, for important changes, tell you on WhatsApp. Questions: use the contact e-mail in the footer.