Privacy Policy

200med ("we", "us", "our") is a healthcare marketplace operated from Jaipur, Rajasthan, India. We connect patients with licensed pharmacies and verified doctors for medicine delivery and teleconsultation services. Contact: vkvimal14@gmail.com

• Account data: Name, email address, mobile number — used to create and manage your account.
• Health data: Prescription images you upload, e-prescriptions written by doctors during consultations, and diagnostic test reports — used only to fulfil your order or consultation and to maintain your medical record with us. Never shared with advertisers.
• Location data: Precise location (GPS coordinates) — used to find and sort nearby pharmacies, doctors, and test labs by distance. Only requested when you use a feature that needs it; not tracked continuously in the background.
• Photos: KYC documents (license, ID proof, registration certificates) if you register as a pharmacy, doctor, test lab, or delivery partner — stored privately, visible only to you and our admin team for verification.
• Order & transaction data: Items ordered, delivery address, order amount and status. Payment is currently Cash on Delivery only — we do not collect or process any online payment or card information, and no payment gateway is integrated into the app today.

The Android app contains no analytics or crash-reporting SDK. The website uses Vercel Analytics and Speed Insights — cookieless, aggregated page-view and performance metrics that do not identify you personally and do not track you across other sites. We do not use advertising trackers anywhere.

• To fulfil medicine orders and verify prescriptions
• To connect you with licensed doctors for teleconsultation
• To connect you with test labs for diagnostic bookings
• To send order/consultation status updates and important notifications
• To review and verify partner registrations (pharmacy/doctor/lab/delivery partner license documents)
• To comply with legal and regulatory requirements

We do not sell your personal data. We do not use health data for advertising.

• Partner pharmacies: Your order, prescription (if the order requires one), and delivery address are shared with the pharmacy fulfilling your order, and only after you've placed the order.
• Partner doctors: Your consultation details are shared with the doctor you book a session with.
• Partner test labs: Your test booking details are shared with the lab you book with.
• Delivery partners: Name and delivery address shared for last-mile delivery.
• Legal requirements: We may disclose data if required by Indian law or a court order.

We do not share your data with any advertising network or data broker. The only analytics involved is Vercel's cookieless, aggregated website analytics (see Section 11) — it receives no personal or health data.

• All data transmitted over HTTPS/TLS encryption.
• Prescription images and KYC documents are stored in access-controlled, private storage — not publicly accessible by URL. Only you, the relevant pharmacy/lab (for prescriptions tied to their orders), and our admin team can access them.
• Passwords are never stored in plaintext — authentication is handled by Supabase Auth, which uses industry-standard hashing.
• We conduct periodic security reviews of our codebase.

• Account data: retained as long as your account is active.
• Order data: retained while your account is active, and deleted immediately upon account deletion.
• Prescription images and test reports: retained until you delete the specific report, or until your account is deleted — whichever is sooner.
• Consultation records: retained while your account is active, and deleted immediately upon account deletion.

Under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data in your profile
• Delete your account and personal data (see below)
• Withdraw consent for non-essential data processing
• Nominate a person to exercise rights on your behalf

To exercise any right, email: vkvimal14@gmail.com

To delete your account and all associated data:

1. Open the 200med app → Account tab → Settings
2. Tap Delete account at the bottom
3. Confirm — your account, orders, addresses, prescriptions, consultations, test reports, and any partner profile you own are deleted immediately, in the app, in real time.

200med is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe a child has submitted data, email us and we will delete it promptly.

• CAMERA: To photograph prescriptions, test reports, and KYC documents for upload.
• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION: To find nearby pharmacies, doctors, and test labs.
• POST_NOTIFICATIONS: To send order/consultation status updates.
• INTERNET / ACCESS_NETWORK_STATE: Core app functionality — required.

All permissions are requested only when the feature is first used. You can revoke them in Android Settings at any time.

• Supabase: Authentication, database, and file storage.
• Render: Backend API hosting.
• Vercel: Web frontend hosting, plus cookieless Vercel Analytics and Speed Insights (aggregated page-view and performance metrics on the website only).

None of these process your data for their own purposes — they act purely as infrastructure providers on our behalf.

We may update this policy as the app evolves. Significant changes will be notified via app notification or email. Continued use of the app after changes constitutes acceptance.

For privacy questions, data requests, or complaints:
Email: vkvimal14@gmail.com
Address: 200med Health Technologies, Jaipur, Rajasthan 302001, India