Privacy Policy

1. Data Storage and Security

Your clinic's data is stored in an isolated, per-clinic Firestore database on Google Cloud (asia-south1 — Mumbai, India). Each clinic's data is strictly separated using Firebase Security Rules: only the authenticated doctor can read or write their own clinic's records. Your patient records are never accessible to other clinics on the platform.

All data is transmitted securely over HTTPS/TLS. Data at rest is encrypted by Google Cloud infrastructure. We use Firebase Authentication — passwords are never stored in plaintext.

2. Information We Collect

We collect the following types of information:

• Account Information: Doctor name, clinic name, email address, qualification, specialty, address, and phone number provided during signup
• Patient Records: Patient names, contact numbers, appointment history, session details, payment records, and clinical data entered by you into the platform. This data belongs entirely to your clinic.
• Clinical Records: Case sheet data, recovery analytics, and session-wise progress notes that you enter for your patients
• Payment Information: Billing details processed securely through Razorpay. We do not store your card or bank details on our servers.
• Usage Data: Basic platform usage patterns to improve performance and features (e.g., pages visited, features used)
• Profile Data: Clinic logo and profile settings you configure within the platform

3. How We Use Your Information

We use your information to:

• Provide and maintain our clinic management platform and all its features
• Process payments and manage your subscription
• Send you important updates about your account and our services
• Improve our platform based on aggregated, anonymised usage patterns
• Provide customer support
• Comply with applicable Indian laws and legal obligations

We do not sell, rent, or trade your clinic or patient data to any third party for marketing purposes.

4. Your Patient Data

Patient records, clinical case sheets, recovery data, and session history entered into HappyClinic are your data. You retain full ownership and control. We act only as a data processor on your behalf.

• We do not analyse, share, or use your patient data for any purpose other than displaying it back to you within the platform
• We do not use patient records for AI model training or any commercial purposes
• PDF clinical reports are generated locally in your browser — they are not uploaded to or stored on our servers
• As a healthcare professional, you are responsible for maintaining appropriate patient consents for digital record-keeping per applicable Indian medical regulations

5. Third-Party Services

We use the following third-party services. Each has its own privacy policy governing the use of your information:

• Razorpay: Payment processing for subscriptions (₹999/month or ₹10,999/year)
• Google Firebase: Authentication, Firestore database, and cloud infrastructure (asia-south1, Mumbai)
• Netlify: Web application hosting and content delivery
• Google Fonts: Typography loaded from Google servers (Bricolage Grotesque, DM Sans)

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your account and all associated clinic data will be retained for 60 days to allow export, then permanently deleted. You can request immediate deletion by contacting us.

7. Your Rights

You have the right to:

• Access your personal and clinic data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications
• Lodge a complaint with relevant authorities

8. Cookies

We use essential cookies and browser localStorage to maintain your login session and preferences. We do not use third-party tracking cookies, analytics cookies, or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at thehappyclinic.netlify.app/privacy. We will notify you by email for any material changes. Continued use of our services after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at: