Privacy Policy

iDrishti Mobile App · Last updated: 8 June 2026

This Privacy Policy explains how Disha Medical Services Pvt LTD ("we", "us", or "our") collects, uses, stores, and protects information when you use the iDrishti mobile application (the "App"). iDrishti is a companion application to the iDrishti electronic medical records (EMR) system, used by iDrishti hospital's authorized staff. By using the App, you agree to the practices described in this policy.

1. Who Uses This App

iDrishti mobile app is intended for use by authorized healthcare staff of iDrishti Hospitals only, not by the general public. Access requires valid login credentials issued by iDrishti. Patient data is entered and accessed by these authorized users in the course of providing eye-care services.

2. Information We Collect

2.1 Account and Login Information

User name and email address
Login credentials and authentication tokens used to verify your identity
Role and access permissions within your organization

2.2 Patient and Health Information

The App processes protected health information on behalf of the healthcare organization, which may include:

Patient identifiers (name, age, contact details, record numbers)
Clinical and ophthalmic examination data, diagnoses, and visit records
Documents and reports associated with a patient's medical record

2.3 Camera and Scanned Documents

The App uses your device camera, with your permission, to scan and capture documents.
Scanned images and the resulting files (e.g. PDFs) are uploaded to the secure EMR and attached to the relevant patient record.
Camera access is used solely for document capture and is never enabled in the background.

3. How We Use Information

To authenticate users and provide secure access to the EMR
To create, view, and manage patient records and clinical documentation
To upload and associate scanned documents with patient records
To operate, maintain, secure, and improve the App
To comply with legal, regulatory, and professional obligations

We do not sell personal or health information, and we do not use it for advertising.

4. How Information Is Stored and Protected

Data is transmitted over encrypted connections (HTTPS/TLS).
Patient and clinical data is stored on secured servers operated for the iDrishti EMR.
Access is restricted to authorized users through authentication and role-based permissions.
We apply administrative, technical, and physical safeguards designed to protect data against unauthorized access, disclosure, alteration, or destruction.

5. Sharing and Disclosure

We share information only as necessary to provide the service, specifically:

With your healthcare organization, which controls the patient records
With service providers that host or support the EMR infrastructure, under confidentiality obligations
When required by law, regulation, or valid legal process

6. Data Retention

Patient and clinical records are retained in accordance with India's policies and applicable medical record retention laws. Account information is retained for as long as your account remains active.

7. Your Rights

Because patient records are controlled by the healthcare organization, requests to access, correct, or delete patient information should be directed to Disha Medical Services Pvt LTD. For questions about your own account information, contact iDrishti Adminsitrator using the details below.

8. Children's Privacy

The App is a professional tool for healthcare staff and is not directed to children. Any patient information relating to minors is entered by authorized staff as part of medical care, not by the minors themselves.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to users.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact:
Kiran Anandampillai, CEO (Disha Medical Services PVT LTD)
Email: kiran@idrishti.in
Address:
Website: https://idrishti.in/