Privacy Policy

This Privacy Policy explains how HEALTO ("HEALTO", "we", "us") handles your personal information when you use the HEALTO website at healto.in, the HEALTO Patient mobile app, the HEALTO Doctor mobile app, and the hospital admin panel (together, the "Services").

HEALTO is a booking platform. We connect you to hospitals, clinics and doctors so you can find them, book an appointment and track your token. We are not a healthcare provider and we do not give medical advice or diagnosis.

By using the Services you agree to this policy. If you do not agree, please do not use the Services.

1. Information We Collect

a. Information you give us

Patients: name, mobile number, email address, date of birth, gender, blood group, address and profile photo.
Doctors and hospital staff: name, mobile number, email address, profile photo, qualification, specialization, registration details, consultation fees, availability schedule, and verification documents you upload during onboarding.
Appointment details: the hospital, doctor and time slot you choose, your appointment and token number, appointment status, follow-up dates advised by the doctor, and any reviews or ratings you submit.
Support messages: anything you send us by email or through a support form.

b. Location

With your permission, the Patient app collects your device location (latitude and longitude) to show hospitals near you and sort them by distance. We store your most recent location and the time it was updated. You can refuse or withdraw this permission at any time in your device settings and still browse hospitals — only the "near me" ordering stops working.

c. Payment information

Payments are processed by Razorpay. Your card, UPI, netbanking and wallet details are entered on Razorpay's systems and are never stored on HEALTO's servers. We keep the transaction reference, amount, payment method type, and payment status so we can show your booking and settle with the hospital.

d. Device and technical information

A push notification token for your device, so we can send you appointment and queue updates.
A login session token issued when you sign in.
Server logs containing IP address, date and time, and the actions performed, kept for security and troubleshooting.

e. One-time passwords (OTP)

Patients sign in with a mobile number and a one-time password sent by SMS. The OTP is stored only until it is used or expires.

2. How We Use Your Information

To create and secure your account and verify your identity by OTP.
To show you hospitals, doctors, available slots and fees.
To create, confirm, reschedule and cancel your appointments, and to issue your token number.
To notify you about your appointment, your position in the queue, expected start time, and delays.
To process payments and refunds, and to settle consultation fees with hospitals.
To publish the reviews and ratings you choose to submit.
To verify hospitals and doctors before they are listed.
To provide customer support and respond to your requests.
To detect and prevent fraud and misuse, and to keep the Services secure.
To comply with legal, accounting and tax obligations.

We do not sell your personal information, and we do not use your health or appointment information for advertising.

3. Who We Share It With

The hospital and doctor you book with. When you confirm an appointment, the hospital and the treating doctor receive your name, contact details, and the details of that appointment so they can attend to you. What they record about your consultation afterwards is governed by their own privacy practices.
Razorpay, our payment gateway, to process your payment and any refund.
Our SMS provider, to deliver your login OTP and appointment messages.
Google Firebase Cloud Messaging, to deliver push notifications to your device.
Our hosting and infrastructure providers, who store the data on our behalf.
Authorities and legal parties, where we are required to disclose information by law, court order, or to protect our rights or the safety of users.
A successor entity, if HEALTO is involved in a merger, acquisition or transfer of assets — with notice to you.

4. How Long We Keep It

We keep your account information for as long as your account exists. Appointment records are kept while your account is active so you can see your history.

When you delete your account, your profile, appointment history, reviews and (for doctors) your availability schedule are permanently removed. Certain payment and transaction records may be retained for a limited period where required for accounting, tax or legal compliance. Retained records are not linked to your deleted profile and are not used for any other purpose.

5. Your Choices and Rights

Access and correction. You can view and edit your profile details at any time inside the app.
Deletion. You can delete your account and data from inside the app. See the step-by-step instructions on our Delete Account page.
Location permission. You can grant or revoke location access in your device settings.
Notifications. You can turn off push notifications in your device settings. Transactional SMS about your appointments may still be sent.
Questions and complaints. Write to us at the address below and we will respond.

6. Security

Data is transmitted over encrypted HTTPS connections. Access to personal information is restricted to the accounts that need it — a hospital sees only its own patients and appointments. Passwords are stored hashed, and OTPs and session tokens are never exposed in our APIs. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to address issues promptly if they arise.

7. Children

The Services are not intended for children under 18. We do not knowingly collect information from a child directly. A parent or guardian may book an appointment on a child's behalf using their own account, and is responsible for the information they provide. If you believe a child has created an account, contact us and we will remove it.

8. Medical Disclaimer

HEALTO does not provide medical advice, diagnosis or treatment, and does not verify the clinical decisions of any doctor or hospital listed on the platform. HEALTO is not for medical emergencies. In an emergency, contact your local emergency services or go to the nearest hospital immediately.

9. Changes to This Policy

We may update this policy as the Services change or as the law requires. The revised policy will be posted on this page with a new "Last updated" date. If the change is significant, we will also notify you in the app. Continuing to use the Services after a change means you accept the updated policy.

10. Contact Us

For any question, request or complaint about this policy or your personal information, email us at support@spidermart.in. Please write from the email address linked to your account so we can verify your identity.