Privacy Policy

KnockMedic Health Technologies Pvt Ltd ("KnockMedic", "we", "us", or "our") operates the KnockMedic mobile application and website connecting patients in India with registered medical practitioners, hospitals, diagnostic laboratories, and ambulance service providers. This Privacy Policy explains how we collect, process, store, and safeguard your Personal Data and Sensitive Personal Data or Information (SPDI) in compliance with the Digital Personal Data Protection (DPDP) Act 2023, Information Technology Act 2000, and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011.

We collect information to provide healthcare services, enable emergency ambulance dispatch, and ensure teleconsultation quality: • Account & Profile Information: Name, phone number, email address, age, gender, blood group, emergency contact details, and government-issued ID (when required for prescription verification). • Precise Location Data: Real-time GPS location collected strictly when requesting 24/7 Ambulance SOS dispatch or locating nearby doctors and NABL-accredited diagnostic labs. • Electronic Health Records (EHR) & Clinical Data: Medical history, symptom checker inputs, uploaded diagnostic reports, e-prescriptions generated during consultations, and consultation summaries. • Payment & Transaction Information: Transaction IDs, billing addresses, and payment status via PCI-DSS compliant gateways (e.g. Razorpay). We do not store raw credit card numbers or UPI PINs. • Technical & Usage Data: IP address, device identifier, app crash logs, and browser cookies used for session authentication.

Your data is processed strictly for legitimate healthcare and operational purposes: • Facilitating video and in-person consultations with NMC-registered medical practitioners. • Transmitting real-time GPS coordinates to nearest 108 and private ICU/BLS ambulance units during SOS emergency triggers. • Scheduling doorstep lab sample collection and delivering digital diagnostic reports. • Running AI Symptom Triage checks to provide preliminary health guidance. • Sending consultation reminders, follow-up alerts, and prescription notifications. • Ensuring compliance with National Medical Commission (NMC) Telemedicine Practice Guidelines.

KnockMedic does not sell or rent your personal health data to advertisers. We share data only with authorized entities necessary to deliver requested care services: • Healthcare Providers: Assigned registered doctors, hospitals, and paramedics gain temporary encrypted access to your relevant medical profile during an active consultation or emergency. • Diagnostic Laboratories: Partner NABL labs (e.g. Thyrocare, Dr. Lal PathLabs) receive sample collection details and patient demographic information. • Ambulance Network: Emergency dispatch personnel receive your phone number and precise GPS coordinates upon SOS trigger. • Payment Gateways: Encrypted transaction amounts and order IDs are shared with licensed payment aggregators. • Legal & Regulatory Authorities: Shared only when mandated by court orders, statutory investigations, or public health emergency directives under Indian law. For details on our infrastructure safeguards, please refer to our Data Security Framework at /hipaa-disha-data-security.

We retain Electronic Health Records and consultation logs for a minimum of 3 years in accordance with NMC Telemedicine Practice Guidelines and medical record standards. Account details are retained as long as your account remains active or as required by statutory tax and healthcare recordkeeping mandates in India.

Under India's Digital Personal Data Protection Act 2023, you hold the following rights regarding your Personal Data: • Right to Access: Request a summary of your personal data processed by KnockMedic. • Right to Correction & Erasure: Request correction of inaccurate health data or deletion of non-mandatory account information. • Right to Grievance Redressal: Register privacy concerns directly with our designated Data Protection Officer. • Right to Nominate: Designate an authorized representative to exercise data rights in the event of incapacity.

We use essential session cookies to keep you signed in securely and performance cookies to analyze web traffic. You may disable non-essential cookies through your browser settings, though certain interactive features may be affected.

Services for minors (under 18 years of age) must be created and managed under the direct supervision of a parent or legal guardian. Pediatric consultations require verified parental consent before video initiation.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer: KnockMedic Data Protection Office Email: privacy@knockmedic.com Address: Indiranagar, 100 Feet Road, Bengaluru, KA 560038 Response Window: Within 7 business days as mandated by DPDP guidelines.