Your Privacy,
Our Priority

Information you provide directly:

• Account data — full name, email address, mobile number, and hashed password upon registration
• Profile data — date of birth, gender, delivery/pickup addresses, and health preferences
• Prescription data — images and extracted text from medical prescriptions you upload for order processing
• Booking data — medicines ordered, quantities, selected pharmacy, and preferred pickup window
• Payment data — billing address only; card numbers are processed by PCI-DSS Level 1 certified payment gateways and never stored on our servers
• Support communications — messages exchanged with our support team or through the in-app AI pharmacist

Information collected automatically:

• Service delivery — processing bookings, matching you with licensed pharmacies, managing your account, and enabling prescription verification
• Personalisation — surfacing relevant medicines, nearby stores, and health recommendations tailored to your preferences and location
• AI Pharmacist — processing your queries through our in-app Meddy chatbot to provide medicine information; conversation context is anonymised after 90 days
• Communications — sending booking confirmations, prescription alerts, order status updates, and responses to support requests
• Safety & fraud prevention — detecting suspicious activity, enforcing Terms of Service, and maintaining platform security
• Legal compliance — fulfilling obligations under the Indian IT Act 2000, pharmacy regulations, and responding to lawful orders
• Platform improvement — analysing aggregated and anonymised usage patterns to improve features, fix bugs, and develop new services
• Loyalty & rewards — tracking points accrued and redeemed through our loyalty programme to calculate benefits accurately

We do not sell, rent, trade, or monetise your personal information. We share data only in these limited, documented circumstances:

• Partner pharmacies — when you confirm a booking, the fulfilling pharmacy receives only: your name, contact number, medicine details, and pickup time — the minimum necessary to serve your order
• Service providers — vetted third-party vendors (cloud hosting, payment gateways, SMS delivery, analytics) bound by strict Data Processing Agreements (DPAs)
• AI providers — anonymised, de-identified query text may be processed by Anthropic (Claude) or OpenAI solely for generating responses; no personally identifiable health records are ever transmitted
• Legal obligations — when required by Indian law, a court order, or a government authority with lawful authority to compel disclosure
• Safety emergencies — to protect the vital interests of a user or the public where there is an immediate threat to life
• Business transfers — in the event of a merger, acquisition, or asset sale, your data will be transferred under the same privacy protections and you will be notified in advance

We implement defence-in-depth security architecture across all layers of our platform:

You have meaningful rights over your personal data. Exercise any of these by contacting privacy@medigo.in — we respond within 30 days.

Our Services are designed for adults and are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has created an account or provided personal data, please contact us immediately at privacy@medigo.in and we will promptly delete the information and close the account.

Users aged 13–18 may use the platform under parental supervision, particularly when uploading prescriptions, completing bookings, or interacting with the AI Pharmacist for medication guidance.

Our platform may contain links to third-party websites, partner pharmacy portals, or external health resources. Once you leave our platform, this Policy no longer applies. We encourage you to review the privacy policies of any external sites before providing them with personal information.

Drug information displayed in our AI Pharmacist may be sourced from the OpenFDA public database — a US government open-data resource. Only de-identified medicine query terms are transmitted to external AI providers (Anthropic / OpenAI) — no personal details, health history, or prescription data are included in those requests.

We may update this Policy periodically to reflect changes in our practices, technology stack, legal requirements, or regulatory guidance. When material changes occur, we will:

• Publish the revised Policy on this page with an updated "Last Updated" date
• Send a prominent in-app notification and/or email to all active users at least 14 days before the change takes effect
• Maintain a version archive for your reference (available on request)

Your continued use of the Services after the effective date of a revised Policy constitutes your acceptance. If you do not agree with material changes, you may delete your account before they take effect.

For any privacy-related questions, data subject requests, or to report a concern about how your data is handled, please reach out to our dedicated Privacy team: