MediCAPS
Back to home

Your data, your control

Privacy Policy

This policy explains what personal data MediCAPS collects, why we collect it, who can see it and the choices you have. We have tried to keep it in plain language, because health information is personal.

  • Last updated: 26 October 2026
  • Applies to: Website, WhatsApp, Android app and support channels

Consent first

You choose what to share and with whom, and you can withdraw consent at any time.

One record you control

Reports, policies and logs sit in a health locker that only you and people you approve can open.

No selling, no ads

We do not sell personal data or use your health details for advertising.

Built for the diaspora

Clear rules for data that moves between India and where you live.

Who we are and what this policy covers

MediCAPS (“MediCAPS”, “we”, “us”) provides health navigation and preventive-care services for Indian families and the diaspora: nutrition coaching, insurance coverage and claims support, and care navigation, all backed by one consented health record.

This policy applies to our website, our WhatsApp channel, the MediCAPS Android app, and any call, form or message through which you deal with us. We handle personal data in line with the Digital Personal Data Protection Act, 2023 and the rules made under it, and, until those duties take full effect, the Information Technology Act, 2000 and the Reasonable Security Practices and Procedures Rules, 2011.

Family members

Where we say “you”, we also mean a parent or dependant whose information you add to your account. Please add someone’s information only if you are authorised to do so.

Information we collect

Identity and contact

ExamplesName, age, gender, phone number, email, city and country

Where it comes fromYou, at sign-up or on WhatsApp

Health & Coverage Check

ExamplesAnswers about health risks, diet, conditions and insurance gaps, and the report we create

Where it comes fromYou, during the check

Health locker

ExamplesLab reports, prescriptions, discharge summaries, sugar, BP and weight logs, ABHA link if you choose to add it

Where it comes fromYou, or providers you authorise

Insurance and claims

ExamplesPolicy details, cover and premium information, claim and pre-authorisation documents, claim status

Where it comes fromYou, or your insurer or TPA at your direction

Family view

ExamplesDetails of parents or dependants you add

Where it comes fromYou

Communications

ExamplesMessages, call notes and support requests, including WhatsApp conversations

Where it comes fromYou and our team

Device and usage

ExamplesDevice type, app version, screens used, approximate location, error logs

Where it comes fromCollected automatically

Health data is sensitive

We collect it only to deliver services you ask for, and only with your consent.

Why we use your information

Route you to the right care

What it involvesScoring your check, placing you in the Nutrition, Claims or Treatment lane and preparing your three next steps

Deliver the service

What it involvesDietician plans, claim-readiness reviews, hospital shortlists and navigator support

Keep your record

What it involvesStoring and organising documents in your health locker and family view

Follow up

What it involvesReminders, status updates and a human call for high-intent requests

Keep you safe

What it involvesEscalating red-flag symptoms to a doctor or emergency pathway

Improve and secure MediCAPS

What it involvesFixing bugs, preventing fraud and misuse, and learning which features help, using de-identified or aggregated data wherever possible

Meet legal duties

What it involvesComplying with law and responding to lawful requests

  • We do not sell your personal data.
  • We do not use your health information for advertising.
  • We do not share your record with insurers, employers or hospitals unless you ask us to.

Who we share it with

Our care team (dieticians, reviewing doctors, navigators)

When we shareTo deliver the service you requested

Hospitals, labs and clinics

When we shareOnly when you ask us to shortlist, refer or book

Insurers and TPAs

When we shareOnly to support a claim or pre-authorisation you ask for

Family members you invite

When we shareAccording to the permissions you set

Service providers

When we shareHosting, messaging and communications partners, under contract and on our instructions

Authorities

When we shareWhen the law requires it, or to protect safety and legal rights

If you use WhatsApp, Meta processes your messages under WhatsApp’s own terms and privacy policy. If you prefer, use the app or web instead of sending sensitive documents on WhatsApp.

If MediCAPS is ever merged with or acquired by another company, your data would move only to a successor bound by this policy, and we would tell you first.

Transfers outside India

Many of our users live abroad while their parents are in India, so your data may be stored or accessed in India and in other countries where our providers operate. We use contractual and technical safeguards for these transfers and follow any restrictions the Government of India notifies.

How long we keep it

  • Account and health locker: for as long as your account is active.
  • Check reports: until you delete them or close your account.
  • Claim documents: while a claim is in progress, and afterwards only as long as needed to resolve follow-ups or disputes.
  • Legal and accounting records: for the period the law requires.

When data is no longer needed, we delete or anonymise it. Where the law requires, we tell you before erasing inactive data.

How we protect it

We use technical and organisational safeguards suited to sensitive health data, such as access controls, encryption, activity logs, staff confidentiality obligations and regular reviews. No system is perfectly secure, so please also protect your phone, OTPs and passwords.

If a personal-data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

Your rights

  • Get a summary of the personal data we hold about you and how we use it.
  • Correct, complete or update your data.
  • Ask us to erase your data, unless the law requires us to keep it.
  • Withdraw your consent at any time.
  • Have your grievance heard and resolved.
  • Nominate someone to exercise your rights if you die or become unable to.

To use any of these rights, write to us using the details at the end of this page. If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process.

Children

Anyone under 18 needs a parent or lawful guardian to give consent. We do not knowingly collect a child’s data without verifiable consent, and we do not track children’s behaviour or show them targeted advertising.

Cookies and website data

Our website uses only the storage needed to make pages work. If we add analytics or marketing tools in future, we will update this policy and ask for your consent where required.

Changes to this policy

We may update this policy as our services or the law change. We will post the new version here with a new date, and for material changes we will notify you in the app, by WhatsApp or by email, and ask for fresh consent where the law requires it.

Contact us

Questions, requests or a complaint? Write to our Grievance Officer, MediCAPS. We acknowledge every request within 7 days and aim to resolve it within 30 days.

Read the Terms & Conditions →