Privacy Policy

Your 10-digit mobile number, your name, your age, the department you choose, an optional priority category, and any symptoms you choose to describe. A visit record (token number, department, status, and timestamps) is stored alongside it.

No health records, diagnoses, prescriptions, or payment data are collected. The symptoms field is optional free text meant only to help staff prepare for your visit.

The mobile number is your identity in the queue: it verifies you with a one-time password, opens your own token dashboard, lets staff call you at the right time, and lets you leave the queue. Your name, age, and symptoms are shown only to the staff of the department you registered with.

The public OPD board shows department names, doctor names, consultation rooms, timings, and queue length numbers. It never shows patient names, phone numbers, or reasons for visit. Your personal dashboard is unlocked only by verifying your own mobile number with an OTP.

Visit records are retained for 90 days by default, after which they are permanently deleted (configurable by the hospital operator via the PATIENT_RETENTION_DAYS setting). The historical dataset shown on the admin dashboard is synthetic demo data, not real patient records.

Under India's Digital Personal Data Protection Act, 2023 you may request access to your data, ask for corrections, ask for erasure before the retention period ends, and withdraw consent by leaving the queue and asking the hospital desk to remove your record. Registration itself is your consent to the processing described on this page.

This deployment is a prototype. Before real patient data is used, the hospital operating this instance is responsible for consent notices, grievance redressal, and any DLT registration required for SMS senders in India.

Sessions are short-lived signed tokens; employee portals use role-checked credentials and the API enforces them on every request, not just in the page. OTPs expire after 5 minutes, are limited to 5 verification attempts, and both sending and verifying are rate-limited per phone number and per network.