Privacy policy
Summary, November 2026. The full policy is shown in the My Medi Mate app before you sign up, and applies from then.
Mercquad Industries Private Limited ("My Medi Mate") is the Data Fiduciary for personal data processed through the My Medi Mate apps and website, under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
1. What we collect, and why
| Data | Why |
|---|---|
| Mobile number, device identifier | Sign-in, security, fraud prevention |
| Name, date of birth, gender, blood group, addresses, emergency contacts | Your profile, deliveries, collections and blood matching |
| Health information you add (prescriptions, reports, records), and your family members' information | Orders that need prescriptions, lab bookings, your health vault |
| Location, only while you use a feature that needs it | Services in your pincode, nearby providers, blood requests, ambulance pickup |
| Orders, bookings, payments, support tickets, chat messages | Providing the service, accounts, tax and disputes |
We do not collect card or bank details; our payment partner does.
2. Consent
We process your personal data with your consent, given when you sign up and when you first use features that need more data (health data, location, sharing records). You can withdraw consent at any time in the app; some features then stop working.
3. Who sees your data
- Providers see only what they need for your order. Phone numbers stay hidden behind masked in-app chat, except verified blood banks and ambulances you may call yourself.
- Blood donors and requesters never see each other's name or number.
- Hospitals and doctors see your records only if you allow it, for the period you choose, and every view is logged for you.
- Our service providers (cloud hosting in India, SMS and OTP, payments, notifications) process data only on our instructions.
- Authorities, when the law requires it.
We do not sell personal data. Ads are never targeted using health data.
4. Where and how long
Data is stored in India and encrypted in transit and at rest. We keep it while your account is active. When you delete your account, your profile and health records are deleted; invoices, tax and payment records and audit logs are kept for the period the law requires.
5. Your rights
You can see a summary of your data, correct it, erase it, withdraw consent, nominate someone to act for you, and raise a grievance with us and then with the Data Protection Board of India.
6. Children
We process children's data only with a parent's or guardian's consent, through the parent's account, and never target ads at children.
7. Security incidents
If a breach affects your data, we will tell you and the Data Protection Board as the law requires.
8. Contact
Write to [email protected] (Mercquad Industries Private Limited, Anantapur, Andhra Pradesh, India). Our Grievance Officer's details are published in the app.