Privacy Policy

1. What we collect

• Account: your mobile number, name and language.
• Family members you add: name, relation, date of birth, sex, blood group and allergies you enter.
• Bookings: the doctor, time, type of consultation and the reason for the visit you write.
• Consultation records: the doctor's notes and prescriptions, and prescription photos you upload.
• Orders: medicines, delivery address and delivery status.
• Payments: amount, method and the gateway's reference number. We never receive your card number, PIN or bKash PIN.
• Support messages you send us.
• Technical information: device and browser type, IP address and sign-in times, used for security.

2. Why we use it

We do not sell your information, and we do not use it for advertising. Chikitsa has no advertising or tracking cookies.

• To run your consultations, orders, deliveries and payments.
• To keep your medical history in one place for you and the doctors you choose to see.
• To answer your support requests and send service messages, such as sign-in codes.
• To keep accounts secure, prevent fraud, and meet our legal duties.

3. Who can see it

• Doctors you book: your details for that consultation, and the notes and prescriptions they write.
• Our pharmacists: prescriptions for medicine orders, to check them before packing.
• Delivery staff: your name, mobile number and address for your order, nothing about your health.
• Chikitsa staff: only what their job needs (for example, support sees your contact details and orders, not your consultation notes). Every staff sign-in uses a password and access is recorded.
• Service providers who work for us: SSLCOMMERZ and bKash (payments), Durbar (SMS for sign-in codes), our server host, and Google Drive for encrypted backups. They may use your information only to provide their service.
• Authorities, when the law requires it.

4. How we protect it

• All traffic to Chikitsa is encrypted (HTTPS).
• Each person can see only their own records; this is enforced inside the database, not just in the app.
• Video and phone consultations are not recorded.
• Backups are made every night and encrypted before they leave our server.

5. How long we keep it

We keep your medical records for as long as your account is open, so your history is there when you need it, and afterwards for as long as the law requires. Payment records are kept for accounting as the law requires. Backups are deleted after 30 days.

6. Your choices and rights

To make a request: Call or WhatsApp 01972-744788, email chikitsa3@gmail.com, or write to us from Account → Help & support. We may ask you to confirm it is you before we act.

• See and correct your profile and family members' details in your account at any time.
• Ask for a copy of your information, or for your account to be closed and your information deleted, except what the law requires us to keep.
• Ask us any question about your information.

7. Children

Accounts are for adults. A parent or guardian can add children as family members and is responsible for their information.

8. Cookies and storage

We use one essential cookie to keep you signed in, and your browser stores small settings such as your language. Nothing is used to track you across other websites.

9. Changes

If we change this policy in an important way, we will show a notice on the site. The date at the top shows when it last changed.