Privacy Policy
Last updated: May 2026
Swastram ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI Health Assistant service via Telegram, WhatsApp, or our website.
1. Information We Collect
1.1 Information You Provide
- Telegram / WhatsApp User ID - Used to identify your conversations. We do not collect your phone number from these platforms.
- Messages, Images & Voice Notes - Prescription photos, lab report images, text messages, and voice messages you send to Swastram AI for processing.
- Family Profile Data - Names, age, gender, and relationship of family members you add to your profile.
- Medicine Reminders - Medicine names and reminder times you set through Swastram AI.
- Contact Form Data - Name, phone number, and message when you contact us through our website.
1.2 Information We Process but Do Not Store
- Prescription & Lab Report Images - Processed in real-time by our AI and immediately discarded. We never save, copy, or archive your medical document images.
- Voice Messages - Audio is transcribed in real-time and the audio file is discarded after processing. Only the text transcription is used for generating a response.
1.3 Information We Store
- Scan Records - Medicine names, dosages, and doctor info extracted from your prescriptions (not the images themselves).
- Family Profiles - Patient name, age, gender, and doctor info for each family member you add.
- Medicine Reminders - Reminder times and refill dates you set, so we can send you notifications.
- Conversation Preferences - Your preferred language and response style to personalise responses.
- Conversation Context - Recent conversation history to enable follow-up questions. This is temporary and expires automatically.
- Health Preferences - Facts you share (e.g., dietary preferences, known conditions) to improve future responses. Sensitive data is encrypted at rest. You can request deletion at any time.
2. How We Use Your Information
- To process and analyse prescriptions, lab reports, and voice messages you send
- To look up medicine information in our database
- To send you medicine reminders and refill notifications at times you set
- To manage family health profiles under your account
- To remember your preferences for a personalised experience
- To respond to your enquiries via the contact form
3. Data Sharing
We do not sell, share, rent, or trade your personal information with any third party for advertising or marketing purposes.
We use third-party AI services to process your images and messages. These services process data in real-time and do not retain your information beyond the processing request. Your data is transmitted securely via encrypted connections.
Messages are delivered through Telegram and WhatsApp, which are subject to their respective privacy policies.
4. Data Security
We implement appropriate technical measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS)
- Encryption at rest for sensitive health data
- Access controls and audit logging
- Complete data deletion upon request
5. Your Rights Under DPDPA 2023
Under India's Digital Personal Data Protection Act, 2023, you have the right to:
- Access - Request a summary of the personal data we hold about you
- Correction - Request correction of inaccurate data
- Erasure (Right to Be Forgotten) - Request complete deletion of all your data including family profiles, scan history, reminders, and memory. Message us and we will erase everything within 72 hours.
- Grievance Redressal - Contact our grievance officer for any privacy-related concerns
6. Data Retention
- Prescription / Lab report images - Not retained (processed and discarded immediately)
- Voice messages - Not retained (transcribed and discarded immediately)
- Scan records - Retained until you request deletion
- Family profiles - Retained until you delete the profile or request account deletion
- Medicine reminders - Retained until you delete them or they are fulfilled
- Conversation context - Expires automatically after inactivity
- Health preferences - Retained until you request deletion
- Contact form submissions - Retained for support purposes
7. Notifications & Reminders
When you set medicine reminders or receive refill notifications:
- Reminders are sent via Telegram or WhatsApp at the times you specify
- Refill reminders are sent before your medicine is estimated to run out
- You can opt out of reminders at any time
- You can delete any reminder at any time
8. Profile Sharing
When you share a family profile with another user:
- The recipient gains access to the shared profile's health records
- You can revoke access at any time
- Shared profiles are subject to the same data protection measures
9. Children's Privacy
Swastram is not intended for use by individuals under 18 without parental or guardian supervision. We do not knowingly collect data from children under 18. The Family Profiles feature allows parents/guardians to manage children's health records under their own account.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes through Swastram AI, WhatsApp, or website.
11. Contact Us
For privacy-related questions, data deletion requests, or grievances:
This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.