Privacy Policy

This Privacy Policy explains how Dr. Harish Kumar (“we”, “us”), operating HomeopathyWorld (the “Service”), collects, uses, and protects your personal data. We act as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”). By using the Service you consent to the practices described here.

1. Who we are

The Service is provided by Dr. Harish Kumar, New Delhi, Delhi, India. For any privacy question or to exercise your rights, contact our Grievance Officer (Section 9).

2. Information we collect

• Account data — name, email, role, username, and profile details (bio, city/state, college, phone) you provide.
• Practice data — patient records, consultations, case notes, and analyses that practitioners enter into the Service.
• Usage & device data — pages visited, features used, AI requests, and basic session activity (last-seen time, device platform such as Android/iOS/desktop, and browser), used to operate, secure, and improve the Service.
• Payment data — processed by Razorpay. We never see or store your card, bank, or UPI details.

3. Purposes & lawful basis

We process your data on the basis of your consent and to perform our contract with you: to provide and maintain the Service, personalise your experience, process subscriptions, send service communications, ensure security, and comply with law. We do not sell your personal data, and we do not use your patient records to train AI models.

4. AI processing

Some features send content you submit — case-simulation messages, study questions, or a document you upload to auto-fill a patient record — to our AI provider, Google (Gemini), solely to generate the response or extract the details you requested. Uploaded documents are processed in memory to read their contents and are not stored by us.

5. Data security

Data is stored with our infrastructure provider (Supabase) and protected by database row-level security, so patient records, consultations and appointments are readable only by the account that created them. No other member can reach them, a signed-out visitor can reach nothing, and they never appear in the Community, on the leaderboard, or in any score. Automated checks run against the live database on every release to confirm this, and the build fails if a community or leaderboard screen ever reads clinical data. Separately, a small number of named administrators can access the database directly for support and security, under audit. We use encryption in transit and apply reasonable technical and organisational safeguards. In the event of a personal-data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

6. Sharing & sub-processors

We share data only with service providers who help us operate the Service, under appropriate confidentiality obligations: Supabase (database/hosting), Google Gemini (AI processing), Razorpay (payments), Resend (email), and Vercel (hosting/CDN). Some of these may process data outside India; we rely on appropriate safeguards for such transfers. We may also disclose data where required by law. We do not sell your personal data.

7. Data retention

We retain personal data while your account is active. On a verified deletion request, we delete your personal data and patient records within 30 days (residual backups are purged within 90 days), except records we must keep to meet legal or financial obligations (for example, tax invoices). Case-simulator transcripts used for scoring checks follow the shorter limits in Section 11.

8. Your rights (DPDP Act)

Subject to applicable law, you may: access a summary of your data; correct or update it; request erasure; withdraw consent; nominate another individual to exercise your rights in case of death or incapacity; and lodge a grievance. To exercise any right, contact our Grievance Officer. You may also complain to the Data Protection Board of India if you are not satisfied with our response.

9. Grievance Officer

Dr. Harish Kumar — Grievance Officer, HomeopathyWorld
Email: drharishkumar30@gmail.com
We acknowledge grievances within 24 hours and resolve them within 7 days. A request to remove content that invades someone’s privacy, harasses or misleads is acted on within 36 hours, and impersonation or intimate images within 2 hours, as the IT Rules require.

10. Children

The Service is intended for users 18 and older; we do not knowingly collect the personal data of children.

11. Case simulator: classes, exams and scoring checks

• Classes. If you join a class with its code, the faculty of that class can see the cases you do for its assignments: the conversation (including what the microphone heard and any correction you made), your rubrics, prescription, self-rating and scores. They cannot see your other cases. Leaving the class ends their access.
• Exam stations. A station's AI score is advisory. In a class, a faculty member signs off the score or changes it with a reason; that decision is kept as a permanent record of the assessment.
• Scoring checks (the calibration set). Only if you switch it on in Settings → Privacy, a copy of a completed case — the conversation with the simulated patient, your rubrics and your prescription, without your name or account details — may be added to the set that designated homeopath reviewers mark to check that the automatic scorer agrees with faculty. The copy is used for nothing else, and is not used to train AI models. It is off unless you turn it on.
• Retention. A copy is kept for at most 2 years and then deleted automatically. If you switch the setting off, your copies are deleted at once; they are also deleted when the case or your account is deleted.

12. Changes

We may update this policy from time to time. Material changes will be notified through the Service or by email.