IndianHealthPulse.com — Privacy Policy

1. Who operates IndianHealthPulse

IndianHealthPulse.com (“Platform,” “we,” “us,” or “our”) is operated by Social Pulse Inc, a corporation registered in the State of Oregon, USA, at Portland, OR 97236, USA. This Privacy Policy explains how we handle personal data in connection with the website and the services identified here.

Privacy contact: support@indianhealthpulse.com

This Policy should be read with our Terms of Service and Part II, our Cookie Policy. It covers our processing, not the independent activities of healthcare providers or external websites. A shared SocialPulse brand or login does not, by itself, authorise every sister site to receive your information.

2. Scope and basic choices

IndianHealthPulse is intended to provide understandable health education and, where enabled, professional discovery and related services. You can read public educational content without submitting your medical history. Technical information may still be processed to deliver pages and protect the service, as described below.

Account creation, professional onboarding, enquiries, AI assistance, subscriptions, and any record-sharing feature involve different information. We provide relevant notices at the point of collection. A planned feature described elsewhere is not an indication that we currently collect its data.

This Policy provides information; it is not blanket consent. Where consent is required, we request it separately for the relevant purpose. Silence, continued browsing, or acceptance of the Terms alone is not treated as consent to marketing, optional tracking, or unrelated health-data use.

3. Information we collect and why

Account information: name, mobile number and country code where supplied (SMS verification is not currently enabled), account identifiers, language preferences, security and consent records, and optional email where supplied. We use this to create and manage accounts, provide access, communicate service notices, and prevent misuse. Email and website fields remain optional where the form labels them optional.

Professional profiles: professional/display names, qualifications, registration details, specialisations, biography, portrait, practice affiliations, business contact details, clinic addresses and map locations, languages, services, hours, fees where supplied, and optional website or review-profile links. We use these to assess applications and manage approved listings.

Private verification material: credential certificates, renewal evidence, representative authority, reviewer notes, and related correspondence when necessary. These are for authorised verification and administration, not automatic publication. Do not send full Aadhaar details, unrelated identification, or patient records through onboarding forms.

Enquiries and bookings, if enabled: contact details, selected professional/facility, preferred time, message, request status, and necessary service information. We use these to route and administer the request. Health details are collected only where the specific service supports them and explains the need.

Contributions and feedback, if enabled: submitted text, media, chosen public identity, relevant moderation information, and any necessary experience-verification details. We use these to publish and moderate authorised content, handle reports, and maintain integrity. Do not post medical reports or identifying information about other people publicly.

AI interactions, if enabled: the questions and content you submit, responses, feature/session identifiers, and necessary safety or diagnostic records. The feature notice will identify the AI service provider, whether identifiable input leaves our systems, relevant retention, and any human review. General educational assistants should not receive identifiable patient records.

Payment information, if enabled: transaction identifiers, service purchased, amount, currency, billing information where required, payment status, and invoices. Online payment processing is not currently enabled on this site. Where appointments are available, payment is arranged with the clinic; do not submit card or bank credentials to this website.. We do not ask you to send payment PINs, passwords, or OTPs to our staff.

Technical and preference information: IP address, browser/device characteristics, request timestamps, necessary server/security logs, consent choices, and storage identifiers as applicable. Optional analytics or advertising information is handled only through the choices described in Part II. The site stores an account session for sign-in and the selected language in browser storage. Hosting and service providers may process request and security logs; their complete logging inventory has not yet been verified..

Location: a clinic address or confirmed practice pin may be public with the listing. Approximate location may be inferred from an IP address where used and disclosed. Precise device location, if offered for a “near me” function, requires a just-in-time explanation and device permission. Do not assume we track live movement.

Support and rights requests: contact information, the issue raised, proportionate identity/authority checks, and the outcome. We use these to provide support, address grievances, fulfil applicable obligations, and retain necessary evidence of how a request was handled.

4. Sources of information

We receive information from you, an appropriately authorised representative, your interactions with enabled services, and the service providers identified in our notices. Professional listing information may also come from an identified institution, professional register, or other suitable public sources.

Public availability does not mean information is always accurate or suitable for unrestricted reuse. Unclaimed or externally sourced listings should be labelled appropriately. Professionals may request correction or review of a listing by sending a copy of the webpage link emailed to support@indianhealthpulse.com

5. Public and private information

The professional-profile preview identifies what will be public: for example, an approved display name, qualification summary, services, clinic location, authorised business contacts, and selected media or links. Public pages can be indexed by search engines or copied by others. Do not select a private account number or residential address for publication unintentionally.

Private account contacts, credentials uploaded for verification, internal notes, identity evidence, private enquiries, and patient records are not public listing material. Access is restricted according to purpose and role. A family relationship or employment at another clinic does not automatically permit access to an individual’s private information.

Where authorised public profiles are distributed to selected network sites, we will identify the destinations and relevant choices. Public-content permissions do not authorise distribution of private verification files or health records.

6. Health information and patient-controlled records

Medical history, physical or mental health information, prescriptions, diagnostic reports, and related records require particular care. Do not submit them through public comments, review pages, general contact forms, or ordinary profile uploads. Educational reading does not require providing a clinical history.

If we enable a health-information or consultation feature, a separate notice will explain the exact purpose, data collected, recipients, storage arrangements, permissions, retention, and available choices. We will obtain consent where required and apply the relevant legal safeguards. Accepting this general Policy is not a substitute for required clinical or data-sharing consent.

A separate device-based medical vault must identify its own operator and privacy notice. We do not claim that all records remain on your device, that we cannot access them, or that they are end-to-end encrypted unless the actual architecture establishes that. Backups, OCR, cloud sync, AI processing, sharing links, and diagnostic logs can each create additional data flows.

When a supported sharing function is used, choose the intended recipient and information carefully. A recipient may retain downloaded copies under its own obligations even after a link is revoked. A healthcare provider may have separate clinical-record retention duties that are not erased by closing a directory account.

7. Grounds for processing and consent withdrawal

We process information for specified service purposes on the basis permitted by applicable law and the circumstances. Where consent is needed, including for applicable sensitive-data handling, we obtain the required clear permission before that processing. We do not assume that an overseas “legitimate interests” label alone establishes a valid Indian legal basis.

You can decline optional information or withdraw a consent-based permission through email to support@indianhealthpulse.com or the privacy contact. We will explain any feature that cannot operate without necessary information. Withdrawal does not automatically undo processing lawfully completed earlier or remove information we must lawfully retain.

Marketing, cross-site publication, optional analytics, advertising tracking, and private-record sharing have separate choices where relevant. Your ability to browse educational content or submit a free professional profile is not conditioned on agreeing to unrelated promotional use.

8. Who may receive information

Authorised service providers: Access should be limited by purpose, contract, and technical permissions. We do not claim a vendor is merely a processor if it also uses information independently.

Healthcare providers: the professional/facility you select may receive the contact and enquiry information needed for your request, and health information only through an appropriately disclosed process. Identify the recipient before sending. Providers’ independent clinical processing is covered by their own notices and duties.

Public visitors: information deliberately approved for a public profile, article, or review can be viewed publicly. External review-profile links are links to another service; they do not automatically authorise us to import all reviews or reviewer information.

Legal and security disclosures: we may disclose necessary information in response to a valid legal requirement or to address fraud, security incidents, or legal claims where permitted. Requests are assessed for authority, scope, and applicable safeguards. This is not an unlimited permission to disclose health information.

Business changes: if operations are reorganised or transferred, any data transfer must have an appropriate basis, safeguards, and the notices or choices required by law. A transfer does not eliminate existing privacy obligations.

Our privacy commitments: we do not sell personal health information, use health queries or records for targeted advertising, or disclose private records across the SocialPulse network merely because the sites are related.

9. AI providers and model improvement

Educational chat, translations and lab-report summaries use Lovable AI services, with OpenAI models used by the current chat and lab-summary features. Submitted prompts and consented report content are sent to the AI service to generate a response. The lab-summary feature does not persist uploaded reports in application storage. Provider retention, logging and model-improvement settings have not been fully verified; we do not promise that providers retain nothing or never use inputs for training. Do not include identifying details in general educational chat.

Private medical records and credential documents are not authorised for general model training by acceptance of this Policy. Any proposed new use requires a lawful basis, a clear specific explanation, and consent where required. Labelling information “anonymous” is appropriate only when re-identification risks have been properly addressed.

10. Processing locations and international transfers

Our actual storage and processing locations are: not yet fully verified for hosting, authentication, AI processing and their subprocessors. Some vendors or external providers may process information outside India if disclosed and legally permitted. We do not promise India-only hosting unless confirmed for the complete data flow, including support, backups, and subprocessors.

Transfers of applicable sensitive information must satisfy the safeguards, consent or necessity conditions, restrictions, and other requirements in force for that activity. We will apply any relevant Indian transfer or localisation restrictions and disclose material changes where required.

11. Retention and deletion

We keep personal information only for the period necessary for the stated purpose or a valid legal requirement. Fixed retention periods and backup deletion cycles have not yet been confirmed. Contact support@indianhealthpulse.com for information or a deletion request; we do not promise a specific deletion deadline beyond applicable legal requirements.

When the purpose ends and no valid retention requirement applies, information is deleted or appropriately de-identified. Legal holds, fraud investigations, record-preservation duties, and accounting requirements may justify limited retention. We will explain relevant limitations when responding to a request.

Deleting visible account content may not immediately remove backup copies or copies lawfully held by a healthcare provider. The backup cycle has not yet been verified; retained backup data must not be restored into ordinary use in a way that defeats a completed deletion request.

12. Security and incidents

We use safeguards proportionate to the information and risks. Account and private-file access is restricted by authenticated permissions. We do not claim independently certified security, zero-access storage or end-to-end encryption for the main website.

No system can eliminate every risk. This does not remove our responsibility to maintain required safeguards, investigate incidents, mitigate harm, preserve necessary evidence, and make required notifications. If an incident affects personal information, we will notify affected people and authorities as applicable law requires.

Protect your device, use secure account access, never disclose OTPs, and notify support@indianhealthpulse.com of suspected misuse. Please do not include confidential records in an initial security report.

13. Children, caregivers, and accessibility

Independent accounts are intended for adults aged 18 or older. Where a child-related feature is lawfully offered, the relevant notice will explain required parental/lawful guardian permission and verification. We do not rely solely on an age checkbox where verifiable parental consent is legally required.

We do not use children’s data for behavioural tracking or targeted advertising. Any legally permitted exception for a specific activity must be established, not assumed because the website concerns health.

Caregivers should submit another person’s information only with appropriate authority. Disability alone does not mean a person lacks capacity or requires another person to make decisions. We provide reasonable assistance with privacy requests through the contact routes above.

14. Your requests, choices, and grievances

You may contact us to request information about our processing, review or correct information you provided, withdraw relevant consent, seek deletion or account closure, or raise a complaint. Additional rights, including nomination where applicable, are available to the extent provided by the law in force for your situation.

Use email support@indianhealthpulse.com. We may ask for proportionate verification to protect you from unauthorised access; we do not routinely require a full identity document for every request. An authorised representative must establish appropriate authority.

We will respond within the applicable legal period and explain any relevant limitation or lawful retention. Our general grievance target is acknowledgement within 24 hours and resolution within seven days; a shorter mandatory deadline applies where required.

If dissatisfied, you may use any relevant statutory escalation, competent authority, or court remedy available under applicable law. Data-protection mechanisms and rights will be described according to their actual commencement and availability; this Policy does not falsely imply every provision of the DPDP framework was operative on the effective date.

15. External links, maps, and messages

Clicking a map, external appointment link, review profile, video, or WhatsApp button may take you to another provider with its own privacy terms. An embedded service may receive technical information even before a click unless it is blocked pending your choice; Part II explains our configured approach.

Before sending a health-related message, confirm the recipient. WhatsApp click statistics do not prove that a message was received.

16. Updates

We will show the effective and updated dates and provide appropriate notice of material changes. A materially different use requires any additional notice, consent, or other lawful basis required; posting a revised policy alone does not authorise unrelated processing. Contact us for clarification or an accessible explanation.