Privacy notice
Vaidyak is operated by iQueststar Edutech Pvt. Ltd. It provides private health-record organisation, reminders, appointment and clinic workflows, consented care communication, and optional connected-device summaries. Health and fitness information is not sold and is not used for advertising.
Information Vaidyak may collect
- Account and profile: name, email, account identifier, password verifier, phone, address, date of birth, sex and the profile details a user chooses to save.
- Health and care: uploaded reports, confirmed results, medicines, readings, symptoms or notes, appointments, consultation records, prescriptions, referrals, care messages and consent choices.
- Optional fitness and device data: data types a patient approves, such as steps, exercise, calories, distance, heart rate, sleep, body measurements, oxygen saturation, respiratory rate, glucose and blood pressure.
- Optional location: location requested in context for nearby-care search or a patient-started walk. Exact walking routes are not uploaded by the browser walking feature.
- Files and communications: report files, profile images, appointment messages and service-support information a user submits.
- Billing and operation: clinic invoices, receipts and payment references; notification/device-connection identifiers; security, consent, audit and error records needed to operate and protect the service.
How information is used
Information is used to create and secure accounts, provide the feature requested by the user, organise a selected patient record, deliver reminders and service messages, support provider workflows, process or reconcile billing, prevent abuse, troubleshoot errors, meet applicable recordkeeping duties and improve service reliability. AI-assisted ranking or extraction uses only the configured workflow and applicable consent; it does not silently change medicines or create a diagnosis.
Website and app analytics
Vaidyak uses Google Tag Manager and Google Analytics on public website pages to understand visits and technical usage. Android versions with Firebase Analytics measure app opens and technical usage after that update is installed and the service is configured. These tags are not loaded for signed-in portal pages or inside the Android web view. We do not send medical reports, diagnoses, medicines, account identifiers, form contents or private portal routes as analytics events. Google may process basic device and usage data under its service terms.
Health Connect and connected services
Health Connect and supported Samsung Health access is optional and requested by data type in the connection flow. Vaidyak reads approved data to show private trends, populate the user's record and support reminders or a summary the patient chooses to share. Health Connect data is not transferred for advertising, sold, or used by data brokers.
Patients can disconnect Vaidyak and revoke Android health permissions. Availability and source accuracy depend on the device and source application.
Service providers and disclosure
Vaidyak does not publish a patient's private record. Information may be disclosed to a provider workspace only when the patient requests care or grants the applicable access. Depending on the feature a user chooses and the production configuration, limited information may be processed by infrastructure, email/push delivery, mapping/routing, payment (including Razorpay), video-conferencing, consented document-extraction or connected-wearable providers. These services receive only the information needed for that function and are subject to their own terms where they act directly for the user. Information may also be disclosed when required by law or to protect users and the service.
Patient choice and control
Patients choose whether to upload a record, connect a device, use location, enable notifications or share selected categories with a provider. Sharing can be time limited or revoked. Permissions can also be changed in Android settings.
Patients can permanently close their sign-in and delete patient-controlled data from You → Privacy & account. Read the public account deletion guide.
Protection and retention
Vaidyak uses encrypted transport, isolated provider workspaces, minimum-role access, protected credentials, controlled backups and audit records. Data is retained while required to provide the service and for the stated security, continuity and legal purposes. After account deletion, provider-authored clinical records and necessary consent/security history may be retained under a pseudonymous identifier when required for care continuity, safety, audit or applicable recordkeeping.
Clinical limits
Vaidyak supports record organisation and communication. Educational guidance and device trends do not replace diagnosis, emergency services or professional medical care, and the service is not emergency monitoring. Seek qualified or urgent medical help when appropriate.
Questions and requests
Use the in-app Vaidyak Help desk for access, correction, deletion or privacy requests, or email info@myvaidyak.com. Provider-organisation closure requires a reviewed handover because it can affect staff access and signed patient records.