Privacy policy
This explains what we collect when you use the Evani Healthcare app or website, why we hold it, who else sees it, and what you can ask us to do about it. Health information deserves plain language, so this is written in it.
Who is responsible for your data
Evani Multispeciality Centre Private Limited (CIN U85110KA2022PTC161166), trading as Evani Healthcare, with hospitals in Chennai and Bengaluru. Under India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciaryfor the information described here — we decide why and how it is used, and we are answerable for it.
What we collect
Only what a hospital needs to treat you and to be paid for it.
When you create an account
- Your mobile number, which is how you sign in.
- Your name, and your email address if you give one — it is optional, and used to send copies of reports.
People you book for
- Name, relationship to you, and where you provide them, gender and date of birth of family members you add. You are responsible for having their agreement before adding them.
Where to come to you
- The address and PIN code you enter for a home sample collection, a nurse visit or an ambulance.
- Your precise location, only if you choose to share it from the app, and only to find the address. We do not track your location in the background.
Your health information
- The tests, scans, consultations, home-care visits and ambulance trips you book, and their status.
- Reports and prescriptions — the documents themselves, and who released them to you.
- For inpatient care: admission details, diagnosis, treatment, procedures and medicines dispensed.
Payments
- What you were charged, what you paid and when. We never see or store your card number, UPI PIN or bank credentials — those go directly to our payment gateway.
Technical
- A notification token for your device, so we can tell you a report is ready. It identifies the app installation, not you.
- Your IP address, briefly, to stop abuse of the sign-in and booking endpoints.
- An audit record of which member of staff viewed or changed a record, which exists to protect you.
Why we hold it
- To provide the care you asked for, and to let the right clinician or partner laboratory do their part of it.
- To tell you what is happening — a confirmation, a collection on its way, a report released, a follow-up your doctor asked for.
- To bill you, issue a GST invoice, and handle refunds and insurance claims.
- To keep the medical and accounting records the law requires us to keep.
- To keep the service secure and to investigate misuse.
We do not sell your data, and we do not use your health information to advertise to you. Promotional messages are separate, optional, and can be switched off in the app at any time without affecting your care.
Who else sees it
Only those who need to, and only the part they need. Each of these processes data on our instructions under a contract with us.
- Partner laboratories and imaging centres — the order they are fulfilling, and the details needed to collect a sample or receive you. Not your wider history.
- Google (Firebase) — sends the SMS code you sign in with, and delivers app notifications.
- Asli One Global — delivers our email, SMS and WhatsApp messages.
- Razorpay — takes the payment.
- Amazon Web Services — hosts the service and stores your reports, in their Mumbai region.
- Agora — carries video consultations. The call is not recorded.
We also disclose information where the law requires it — a court order, a statutory authority, a notifiable disease — and to your insurer or TPA when you ask us to make a claim.
Where it is kept
Your records are stored in India, in Amazon's Mumbai region. Some of the service providers above operate globally and may process limited data — a phone number, a message, a payment reference — outside India in order to deliver it.
How long we keep it
Medical records are kept for as long as the rules that govern clinical establishments require, and longer where a case is medico-legal or a claim is open. Billing and tax records are kept for the period tax law requires. When you close your account we delete what we are not obliged to retain, and keep the remainder restricted — visible only for the purpose that requires it. You can delete your account in the app, or atevanihealthcare.com/account-deletion, which also sets out exactly what is kept and for how long.
How it is protected
- Everything travels over an encrypted connection.
- Sign-in codes and staff passwords are stored only as one-way hashes — nobody at Evani can read them, including us.
- Reports are served through links that expire, not public addresses.
- Staff see only what their role requires: a laboratory sees its own orders, a partner sees no record beyond the one it is fulfilling.
- Access to records is logged.
No system is perfect. If a breach occurs that is likely to affect you, we will tell you and the Data Protection Board as the Act requires.
Your rights
Under the DPDP Act you may ask us to:
- Show you what we hold about you and who we shared it with.
- Correct or complete anything wrong or missing.
- Erase what we are not legally required to keep.
- Withdraw your consent. Care already given and records we must retain are not undone by this, but we will stop using your data for anything that depends on that consent.
- Nominate someone to exercise these rights if you die or become incapable of exercising them yourself.
Write to evanihealthcareservice@gmail.com. We will verify that the request is really from you — health records are not handed over on an unverified email — and answer within the time the Act allows.
Children
A child's account is opened and managed by a parent or guardian, who must confirm they are one. We do not profile children, track them for advertising, or send them marketing.
Complaints
If something about your data has gone wrong, tell us first —evanihealthcareservice@gmail.com, marked for the Grievance Officer. If you are not satisfied with our answer you may complain to the Data Protection Board of India.
Changes
When this policy changes we update the date at the top. If a change materially affects how your information is used, we will tell you in the app rather than expect you to notice.
Contact
Evani Multispeciality Centre Private Limited
Evani Multispeciality Hospital, No. 4/4, Rajiv Gandhi Salai, Raj Nagar, Thoraipakkam, OMR, Chennai — 600096 · +91 78453 21945
Evani Hospital, No. 52, 53 & 54, Meenakshi Layout, Opp. Police Quarters, Hosa Road, Choodasandra, Bengaluru — 560099 · +91 91875 13545
Evani Hospital, Padur, OMR Road, Kelambakkam, Chennai — 603103 · +91 78453 21945
evanihealthcareservice@gmail.com