Privacy policy
Last updated 16 October 2026 · version 2026-10-16
This explains what ProConsult keeps about you (the doctor) and about the patients you record, why, who can see it, and your rights. ProConsult is run by [Legal entity name], [Registered address].
1. Two kinds of data, two roles
- About you — we decide why we keep it, so we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
- About your patients — you enter it for your own work. You (with the clinic, where it decides) are the Data Fiduciary; we only process it for you, as your Data Processor, under section 9 of our Terms.
Patients: if you have a question about your data, please ask your doctor or clinic first. If you write to us, we will pass it to them.
2. What we keep about you
| Data | Why |
|---|---|
| Name, email, phone | your account, sign-in, receipts, renewal reminders |
| Registration number, city, specialities (optional) | your profile and printed documents |
| Password (stored only as a one-way hash); the two-step sign-in secret if you turn it on | security |
| Plan, end date, payments to ProConsult, receipts / invoices, your referral code and who referred you | billing and the referral offer |
| Support messages you send us (encrypted) | answering you |
| Security log: sign-ins and changes with date, IP address, device type and field names (never clinical text) | security, and proving what happened |
| Counts of which features are used each day (no content) | improving ProConsult |
| The Terms version you accepted, and when | proving your consent |
3. What you keep about patients (we process it for you)
- Patient name, age, gender, the clinic's patient reference.
- Health information: medical alerts and history, consultation notes (complaint, findings, diagnosis, plan, teeth), treatment plans, notes, lab work.
- Photos, X-rays and documents.
- Visits and the fees linked to them.
- Also: clinics (name, contact doctor and phone), your schedule, price list, labs, inventory, expenses, payments from clinics, and library cases.
Clinical notes, medical alerts and history, support messages and every photo, X-ray and document are encrypted at rest. Each doctor's records are walled off from every other doctor's, by the application and by the database.
4. What we do not do
- We never contact your patients. ProConsult never writes to patients; emails go only to you.
- We do not sell or rent data, show advertising, or use data to train AI.
- No advertising, analytics or crash-reporting tools are built into the app or the website.
- We do not ask for your phone's location, contacts, photo gallery, SMS or call log.
5. Who can see it
- You — and only you, through your account.
- The ProConsult team, in our admin area, sees only account data: your name, email, phone, plan, end date, last sign-in, payments to ProConsult, referral details, your support messages and feature-use counts — never your clinics, patients or income. The database refuses it.
- People with access to the server (to run, repair or restore it) are bound by confidentiality and use it only for that.
- Service providers that run ProConsult for us: Hostinger (server, India), [Email provider] (emails to you, India), Backblaze B2 (off-site copy of the encrypted backups, [Backup region]; only we hold the key) and Razorpay (only when you pay online; card and UPI details go to Razorpay, not to us).
- A person you share with — for example a de-identified library case link (photos are re-made without location or camera details), or a PDF you send from your phone.
- Authorities, only when the law requires it.
6. Where it is kept
On our server in India. The off-site copy of the encrypted backups is kept with Backblaze in [Backup region]. The Android app keeps a copy of your records on your phone so it works offline; signing out removes it.
The Android app downloads its typeface from Google Fonts the first time it opens, so Google sees the phone's internet address; no account or patient data is sent.
7. Cookies
The website uses only the cookies it needs to work: a session cookie that keeps you signed in, and a security cookie that protects forms. No tracking or advertising cookies. The session ends after 12 hours or when you sign out.
8. How long we keep it
- Your records: while your account is open.
- After you delete your account (in the app: Settings → Delete account; on the website: Settings → Password & security → Delete account; or without signing in at https://proconsult.dentfluence.in/delete-account): it is locked at once (signed out everywhere, auto-renew cancelled, share links stopped). For 14 days you can change your mind with the link in our email or by signing in and choosing “Keep my account”. After 14 days your clinics, patients, visits, consultations, notes, payments, expenses, lab work, library cases and every photo and document are erased. Download your data first — after the deletion it cannot be recovered.
- Our receipts / invoices and payment records (with the name and details printed on them) are kept for 8 years from the end of the financial year, as tax law requires.
- The security log is kept for 1 year.
- Encrypted backups that still contain your data are deleted within about 6 months. If a backup is ever restored, a deleted account and any patient you erased are erased again before the service restarts.
- A patient you erase permanently is erased at once; visits with fees, clinic payments and lab bills stay without the patient's name.
- The period you already paid for is not refunded when you delete your account.
The clinic remains responsible for its own patient records; if you need to keep records for your own professional duties, export them before you delete the account.
9. Your rights (DPDP Act)
- See your data and get a copy — Settings → Password & security → “Download my data”.
- Correct it — in Settings, or by editing any record.
- Erase it — delete your account (above); withdrawing your consent works the same way.
- Nominate someone to use these rights if you die or cannot act — write to the Grievance Officer.
- Complain — to the Grievance Officer below, and then to the Data Protection Board of India.
For your patients' rights, see section 9.8 of the Terms.
10. Children
ProConsult is for doctors aged 18 and over. Patients may be children: the doctor is responsible for the consent of a parent or guardian.
11. Security
https everywhere; encryption at rest for clinical text and files; per-doctor walls in the app and the database; sign-in limits; optional two-step sign-in; nightly encrypted backups with an off-site copy; a security log. If a breach affects you or your patients, we will tell you without undue delay.
12. Changes
When this policy changes, the date and version at the top change and you are asked to accept it again in the app and on the website.
13. Grievance Officer and contact
- Name
- [Grievance Officer name]
- [Grievance Officer email]
- Phone
- [Grievance Officer phone]
- Address
- [Registered address]
We acknowledge a complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India. Please do not send patient details by email.
Signed in: Settings → Help & support. Otherwise: contact us.