Properdose Privary Policy

We collect information you provide directly, information generated by use of the Service, and limited technical data.

We do not collect biometric data, prescriptions, clinical diagnoses, or any information directly from electronic health records (EHRs) unless you explicitly share such data with us. We do not store your Wi-Fi password or network SSID beyond the device-pairing session.

We use the information we collect for the following purposes:

• To operate, maintain, and improve the Properdose device and companion app
• To deliver medication reminders and missed-dose alerts via push notification, SMS, or WhatsApp
• To sync dispenser state and adherence logs to the cloud in real time
• To provide caregiver notifications and real-time adherence dashboards
• To process orders, subscriptions, and manage your account
• To diagnose and fix app crashes and hardware connectivity issues
• To respond to your support queries and troubleshoot technical issues
• To send product updates, new feature announcements, and relevant health tips (you may opt out at any time)
• To conduct internal analytics that help us understand how the Service is used and improve it
• To comply with applicable legal obligations under Indian law

Medication schedules and adherence logs are considered sensitive personal data under India's Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

• Health-related data is encrypted at rest (AES-256) and in transit (TLS 1.3)
• Access is restricted to authorised personnel on a strict need-to-know basis
• We will never share your health data with insurers, employers, or government bodies without your explicit consent, except as required by law
• Aggregate, anonymised, non-identifiable data may be used for internal research and public health reporting

We do not sell your personal information. We may share it only in the following limited circumstances:

• Service Providers: Trusted third parties who help us operate the Service (e.g., cloud hosting, push notification delivery, SMS/WhatsApp delivery, payment processing, crash analytics). These partners are bound by data processing agreements and may only use your data to provide services to us.
• Caregivers You Authorise: If you add a caregiver or family member to your account, they will receive the alerts and adherence data you configure.
• Legal Requirements: If required by a court order, government authority, or applicable law, we may disclose your information after verifying the legality of the request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity, subject to the same privacy commitments.

Your data is stored on servers located in India. We implement industry-standard technical and organisational security measures including:

• End-to-end TLS 1.3 encryption for all data transmitted between the device, app, and our servers
• AES-256 encryption for data stored at rest
• Role-based access control and multi-factor authentication for internal systems
• Periodic security audits and vulnerability assessments

While we take all reasonable precautions, no system is 100% secure. If you suspect unauthorised access to your account, please contact us immediately at hello@properdose.in.

This section is specific to the Properdose Android application and is provided in accordance with Google Play Store policy. It describes every Android permission our app requests and every third-party library embedded in the app that collects or processes data.

App Permissions

Third-Party SDKs & Services in the App

The app includes the following third-party libraries. Each has its own privacy policy linked below.

Under the DPDPA, 2023 and applicable rules, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request erasure of your data — see Section 8 for details including the in-app deletion option
• Opt Out of Marketing: Unsubscribe from marketing communications at any time via the unsubscribe link in any email, or by adjusting notification settings in the app
• Withdrawal of Consent: Withdraw previously given consent at any time; this will not affect the lawfulness of prior processing
• Grievance Redressal: Lodge a complaint with our Grievance Officer (details in Section 13)
• Nomination: Nominate an individual to exercise your rights in the event of your death or incapacity

To exercise any of these rights, email us at hello@properdose.in with the subject line "Privacy Request". We will respond within 30 days.

You have the right to delete your Properdose account and all associated personal data at any time. We provide two ways to do this:

Upon account deletion, the following data handling applies:

• Deleted immediately: Account credentials, medication schedules, adherence logs, push notification tokens, and device pairing data
• Retained for legal compliance only: Payment and transaction records are retained for 7 years as required by Indian tax and accounting laws. These records are kept in an isolated, access-restricted environment and are not used for any other purpose.
• Anonymised and retained: Aggregate, non-identifiable statistical data (e.g., "X% of users take evening doses") may be retained for internal research. This data cannot be linked back to you.

The Properdose Service is intended for adults managing medication for themselves or for elderly dependents. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided us with personal information without verifiable parental consent, we will delete such data promptly. Contact us at hello@properdose.in if you believe this has occurred.

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account and contact data: retained for the lifetime of your account plus 12 months after closure
• Medication adherence logs: retained for 24 months, then permanently deleted
• Payment and transaction records: retained for 7 years as required by Indian tax and accounting laws
• Crash and diagnostics logs: retained for 90 days, then automatically purged
• Server and device sync logs: retained for 90 days for debugging and security purposes
• Push notification tokens: deleted immediately upon account deletion or app uninstall signal

Upon account deletion, we will purge or anonymise your personal data within 30 days, except where retention is legally mandated.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via an in-app notification at least 14 days before the changes take effect. The updated policy will always be available at properdose.in/privacy-policy. Continued use of the Service after the effective date constitutes your acceptance of the revised Policy.

This Privacy Policy is governed by the laws of the Republic of India, including the Information Technology Act, 2000, the DPDPA, 2023, and rules framed thereunder. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts in Ahmedabad, Gujarat, India.

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to our Grievance Officer: