Privacy Policy

Last updated: 29 October 2026

Nidaan handles your health data. We take that seriously. This page explains exactly what we collect, why, and what we do with it — in plain English, not legalese.

Who we are

Nidaan is operated by Amardeep Kumar, an independent developer based in India. Contact: support@nidaan.site.

What we collect

Account info: phone number (for OTP login), name, age, gender, city.
Health data you give us: prescription photos, lab report photos, voice recordings, text messages to the AI, medicines you add, vitals (BP, sugar, weight), water intake, meal preferences, family member profiles.
Device info: device model, OS version, app version, crash logs. We do not collect your contacts, location, SMS or call logs.
Payment info: handled entirely by Razorpay. We only store a subscription ID and status — never your card number or UPI handle.

Why we collect it

To decode your prescriptions and lab reports (the AI needs to see them).
To remember your medicines, vitals, menu history, and family profiles across sessions.
To send OTPs for login and medicine/meal reminders you set up.
To process your subscription payment.
To fix bugs and improve the app.

Who we share it with

We share the minimum needed, with these providers:

OpenAI — for AI processing of your prescription/report images and voice. Governed by OpenAI's API data policy; your data is not used to train their models.
Cloudflare R2 — stores your uploaded images, encrypted at rest.
Razorpay — for subscription payments.
MSG91 / SMS gateway — to deliver OTP messages.
AWS (EC2) — hosts the backend servers in India (ap-south).

We do not sell your data. We do not share it with advertisers. We do not run ads inside the app.

How long we keep it

Account data: until you delete your account.
Prescriptions, reports, chat history: until you delete them, or until you delete your account.
Payment records: 7 years, as required by Indian tax law.
Backups: deleted data clears from backups within 30 days.

Your rights

You can at any time:

Export your data (prescriptions, reports, chat history) — email us.
Delete any individual item from inside the app.
Delete your entire account from Settings → Delete Account. This removes everything within 30 days.
Ask us a question or lodge a complaint — see Grievance Officer below.

Security

All traffic between the app and our servers uses HTTPS (TLS 1.2+).
Images stored on Cloudflare R2 are encrypted at rest.
Database is behind a firewall, accessible only from our backend server.
No employee browses your data for fun — only authenticated API access.

Medical disclaimer

Nidaan explains what your prescription or lab report says. It is not a doctor. It does not diagnose, prescribe, or replace medical advice. Always talk to a qualified doctor for actual medical decisions.

Children

Nidaan is for users 18 years or older. A parent may add a minor child as a family member, but the account owner remains responsible for that data.

Changes to this policy

If we change this policy in a material way, we'll notify you inside the app before the change takes effect. The "Last updated" date at the top always reflects the current version.

Grievance Officer

As required under India's IT Act, 2000 and the Digital Personal Data Protection Act, 2023:

Name: Amardeep Kumar
Email: grievance@nidaan.site
Response time: within 72 hours of receiving your complaint.