Privacy & the DPDP Act

All primary data stores, object storage and backups are in AWS Mumbai (ap-south-1). No personal data is processed outside India, including by our sub-processors, without a documented assessment.

Uploaded documents — prescriptions, blood reports, imaging — sit in a private bucket and are served only through links that expire in five minutes. They are never publicly addressable.

Your mobile number, to authenticate you and to send booking confirmations and reminders. Your pet's species, breed, age, weight history, allergies and vaccination records, because a clinic needs them to treat your animal safely. Your booking, payment and invoice history, because tax law requires us to keep it.

We do not sell personal data. We do not use your pet's health records to target advertising.

Each consent is versioned and timestamped, and withdrawing one is as easy as giving it. Marketing consent is off by default and stays off unless you turn it on. Transactional messages about a booking you have made are not marketing and are always sent.

Support staff see booking metadata, not medical records. A Super Admin can read a medical record, but only with a mandatory written reason that is recorded in an append-only audit log alongside the record identifier, their name and a timestamp. Two-factor authentication is mandatory for every administrative role.

You can request a machine-readable export of everything we hold, from account settings, in two taps. You can also request erasure.

We will tell you plainly what erasure cannot cover: financial records, invoices and tax filings are retained for the statutory period and are anonymised rather than deleted. We would rather state that upfront than quietly keep them.