Privacy Policy
Last Updated: August 18, 2026
A Note From Engineering
"Patient data isn't just sensitive; it's sacred. We utilize bank-grade encryption and strict access controls so you can sleep well knowing your clinic's data is bulletproof. We engineered Doctor Diary with security as the absolute foundation."
This Privacy Policy describes how NatureXpress ("Company", "we", "us", or "our"), the creator of Doctor Diary, collects, uses, and shares your personal information when you use our website, application, and software services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
A. Information provided by Clinics/Practitioners: When you register for an account, we collect your name, clinic name, email address, phone number, billing information, and professional credentials.
B. Information provided by Patients: When patients book appointments through the Services, we collect their name, phone number, appointment details, and any notes they provide. Important Notice to Clinics: Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, you (the clinic) act as the Data Fiduciary for your patients' data. NatureXpress acts solely as a Data Processor on your behalf. It is the clinic's strict responsibility to obtain necessary consent and ensure that any collection of patient data complies with the DPDP Act and other applicable healthcare privacy regulations.
C. Automatically Collected Information: We collect certain data automatically, such as IP addresses, browser types, device information, and usage patterns (e.g., pages visited, clicks) to improve our Services.
2. How We Use Your Information
We use the collected information for various purposes, including:
- To provide, maintain, and improve our Services.
- To process transactions and manage your subscription.
- To send automated appointment reminders via third-party services (e.g., WhatsApp).
- To communicate with you regarding updates, security alerts, and support messages.
- To detect, prevent, and address technical issues or fraudulent activities.
- To aggregate anonymized data for analytical and business purposes.
3. Data Sharing and Third Parties
We do not sell your personal data. We may share information with third-party service providers that assist us in operating our business (e.g., hosting providers like Supabase/Vercel, communication APIs like Twilio/WhatsApp, and payment processors). These third parties are bound by confidentiality obligations.
We may also disclose information if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations, protect our rights or property, or prevent fraud.
4. Data Security
We implement industry-standard security measures to protect your data. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot and do not guarantee absolute security. By using our Services, you acknowledge that you provide data at your own risk. NatureXpress shall not be held liable for any data breaches, unauthorized access, or loss of data to the maximum extent permitted by applicable law.
5. Disclaimer Regarding Medical Information
Doctor Diary is a scheduling and practice management tool, not a medical records system. We strongly advise against storing sensitive health information (PHI/ePHI) within our platform unless strictly necessary for booking purposes. Clinics assume all liability for the type of data they request from patients through our platform.
6. Your Rights & DPDP Act Compliance
In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), Data Principals (users and patients) have the right to access, correct, update, or erase their personal data. If you are a Clinic, you can manage this directly in your account. If you are a Patient, you must contact your respective Clinic (the Data Fiduciary) to exercise these rights, and we will assist the Clinic in fulfilling your request.
7. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time, at our sole discretion. Any changes will be effective immediately upon posting on this page. Your continued use of the Services following any updates constitutes your acceptance of the revised Privacy Policy.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us at support@doctor.naturexpress.in.