This Privacy Policy describes how Opbuddy Technologies Private Limited ("Opbuddy", "we", "us", or "our") collects, uses, stores, and shares your personal information when you use the Opbuddy mobile application or website (the "Platform").
By using the Platform, you consent to the collection and use of your information as described in this Privacy Policy. This Policy is compliant with the Information Technology Act, 2000, the IT (Intermediary Guidelines) Rules, 2021, and the Digital Personal Data Protection Act, 2023.
1. Information We Collect
We collect only the minimum information necessary to provide you with our appointment booking service:
- Full Name — to identify you and your booking
- Mobile Number — for OTP-based login via WhatsApp
- Email Address — for OTP-based login, booking confirmation, and invoices
- Age / Date of Birth — required by hospitals for patient records
- Gender — required for OP registration at hospitals
- City / Location Preference — to display hospitals in your selected area
- Booking & Transaction Records — appointment details, payment history, OP tickets
- Device & Usage Data — device type, operating system, app version, and usage analytics (collected anonymously)
We do not collect medical history, symptoms, diagnoses, prescriptions, insurance details, Aadhaar number, or any sensitive health data. We strongly advise you not to share any such information on the Platform.
2. How We Use Your Information
- To verify your identity via OTP (sent via WhatsApp / email)
- To process and confirm your appointment bookings
- To share your name, mobile number, and appointment details with the selected hospital only, for the sole purpose of confirming your appointment
- To send you booking confirmations, OP tickets, and payment invoices via email
- To process payments and issue refunds
- To respond to your queries and complaints
- To improve our Platform through anonymised usage analytics
- To send you promotional messages and offers only if you have opted in
3. Information Sharing
We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:
- With Hospitals: Your name, mobile number, gender, age, and appointment details are shared with the hospital you have booked an appointment with, solely to process your OP registration.
- With Payment Gateways: Payment information is processed by our authorized payment gateway partner. We do not store card or banking details.
- With Analytics Providers: Anonymized, non-identifiable usage data may be shared with analytics tools (e.g., Google Analytics) to improve our service.
- As Required by Law: We may disclose your information if required by a court order, government authority, or applicable Indian law.
4. Data Retention
- Your account data is retained for as long as your account is active.
- Booking and transaction records are retained for 3 years from the date of the booking, as required for tax and legal compliance.
- If you delete your account, your personal data will be permanently deleted within 30 days, except where retention is required by law.
5. Your Rights (Under DPDP Act 2023)
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access: Request a summary of the personal data we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data by deleting your account. We will process this within 30 days.
- Right to Withdraw Consent: Withdraw your consent for marketing communications at any time from the app settings, without affecting your ability to use the booking service.
- Right to Grievance Redressal: Raise a complaint with our Grievance Officer (details below).
To exercise any of these rights, email us at support@opbuddy.in.
6. Data Security
- All data transmission between your device and our servers is encrypted using SSL/TLS (HTTPS).
- Personal data stored in our databases is protected with industry-standard access controls and encryption.
- Only authorised Opbuddy personnel have access to your personal data, on a need-to-know basis.
- In the unlikely event of a data breach that affects your personal data, we will notify you and the relevant authorities as required by applicable Indian law.
7. Cookies & Analytics
Our website uses cookies and similar tracking technologies to improve your browsing experience and analyse usage patterns. You can manage cookie preferences through your browser settings. We use Google Analytics to collect anonymised usage data. No personally identifiable information is shared with Google Analytics.
8. Children's Privacy
The Platform is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If a parent or guardian becomes aware that their child has provided us with personal data without consent, they should contact us at support@opbuddy.in and we will delete such data promptly.
9. Third-Party Links
The Platform may contain links to hospital websites or third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on the Platform with the revised effective date. We will notify you of material changes via email. Continued use of the Platform constitutes acceptance of the updated Policy.
11. Contact & Grievance
Opbuddy Technologies Private Limited
Email: support@opbuddy.in
Grievance Officer: Ramesh
Registered Office: # A4,A5, Beside Eureka court , Near Image hospital ,Yellareddyguda , Ameerpet , Hyderabad - 500073 , Telangana ,India