Privacy Policy

Last updated 8 August 2026. This page is a plain-language summary and has not yet had formal legal review — treat it as a good-faith starting point, not a final legal document (see LAUNCH-CHECKLIST.md).

What we collect

Account details (name, phone, email), appointment and payment records, and — if you choose to complete it — your case-taking answers, uploaded medical reports, and follow-up responses. Sections like mental health and personal-health details are clearly marked optional at the point of entry.

How we use it

To run your appointments, so Dr. Priyanka can review your case ahead of your consultation, to generate receipts, and — only if you separately opt in — to let AI tools help organize your case for the doctor's review. See our Consent Policy for exactly what each consent covers.

Who can see it

Your assigned doctor sees your full case. Reception staff can see appointment and billing information only — never your case-taking answers, doctor's notes, prescriptions, or mental/sexual-health sections. Every view of your clinical record is logged (actor, time, what was viewed) for accountability.

AI processing

If you opt in to AI processing at registration, your case data may be sent to an AI service (Anthropic Claude) to help the doctor organize and cross-reference your case faster. AI never sees your data if you don't opt in, AI output is never shown to you, and AI never makes a treatment decision — only the doctor does.

Security

Passwords are hashed, never stored in plain text. Doctor and admin accounts require two-factor authentication. Uploaded reports are stored outside public web access and served only to authorized viewers. Data is transmitted over encrypted connections (HTTPS) in production. Database-level encryption-at-rest depends on the hosting provider's configuration — confirmed as part of go-live setup, not something we're overstating here before it's verified.

Your rights

You can download a copy of your data or request account deletion any time from your dashboard's "Your Data & Privacy" page. Deletion requests are reviewed by an admin (not instant) since medical records can carry retention obligations.

Data separation from other businesses

HaayuCare's data lives in its own separate database, isolated from any other Vcartnow/AskReligious business — your medical data is never shared across products.