Privacy Policy

This Privacy Policy explains how Dr. Harish Kumar(“we”, “us”), operating HomeopathyWorld (the “Service”), collects, uses, and protects your personal data. We act as the Data Fiduciaryunder India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”). By using the Service you consent to the practices described here.

1. Who we are

The Service is provided by Dr. Harish Kumar, [Registered business address, City, State, India]. For any privacy question or to exercise your rights, contact our Grievance Officer (Section 9).

2. Information we collect

• Account data — name, email, role, username, and profile details (bio, city/state, college, phone) you provide.
• Practice data — patient records, consultations, case notes, and analyses that practitioners enter into the Service.
• Usage & device data — pages visited, features used, AI requests, and basic session activity (last-seen time, device platform such as Android/iOS/desktop, and browser), used to operate, secure, and improve the Service.
• Payment data — processed by Razorpay. We never see or store your card, bank, or UPI details.

3. Purposes & lawful basis

We process your data on the basis of your consent and to perform our contract with you: to provide and maintain the Service, personalise your experience, process subscriptions, send service communications, ensure security, and comply with law. We do not sell your personal data, and we do not use your patient records to train AI models.

4. AI processing

Some features send content you submit — case-simulation messages, study questions, or a document you upload to auto-fill a patient record — to our AI provider, Google (Gemini), solely to generate the response or extract the details you requested. Uploaded documents are processed in memory to read their contents and are not stored by us.

5. Data security

Data is stored with our infrastructure provider (Supabase) and protected by database row-level security, so patient records are accessible only to the practitioner who created them. We use encryption in transit and apply reasonable technical and organisational safeguards. In the event of a personal-data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

6. Sharing & sub-processors

We share data only with service providers who help us operate the Service, under appropriate confidentiality obligations: Supabase (database/hosting), Google Gemini (AI processing), Razorpay (payments), Resend (email), and Vercel (hosting/CDN). Some of these may process data outside India; we rely on appropriate safeguards for such transfers. We may also disclose data where required by law. We do not sell your personal data.

7. Data retention

We retain personal data while your account is active. On a verified deletion request, we delete your personal data and patient records within 30 days (residual backups are purged within 90 days), except records we must keep to meet legal or financial obligations (for example, tax invoices).

8. Your rights (DPDP Act)

Subject to applicable law, you may: access a summary of your data; correct or update it; request erasure; withdraw consent; nominate another individual to exercise your rights in case of death or incapacity; and lodge a grievance. To exercise any right, contact our Grievance Officer. You may also complain to the Data Protection Board of India if you are not satisfied with our response.

9. Grievance Officer

Dr. Harish Kumar — Grievance Officer, HomeopathyWorld
Email: drharishkumar30@gmail.com
We aim to acknowledge grievances within 72 hours and resolve them within the timelines prescribed by law.

10. Children

The Service is intended for users 18 and older; we do not knowingly collect the personal data of children.

11. Changes

We may update this policy from time to time. Material changes will be notified through the Service or by email.