Privacy policy
SClinica keeps patient records on the doctor's own computer, encrypted with the doctor's passphrase. Nobody else – not SClinica, not a medicine shop, not our sponsor – can read them. This page explains what little data does reach us, why, how long we keep it and how you can ask us to change or delete it.
1. Who we are
SClinica (sclinica.pages.dev and the SClinica app) is run by Satyajit Chincholkar, Pune, Maharashtra, India ("SClinica", "we"). For any question about your data, write to satyajituniv02@gmail.com.
SClinica is sponsored by Manakarnika, which runs a medicine shop and Manakarnika Publications. The sponsor does not own SClinica and receives no patient records.
2. In short
| Who you are | What reaches SClinica's server | Who can see it |
|---|---|---|
| Doctor | Your name, clinic, registration number, city, mobile, e-mail, licence and payment details (UTR); medicine orders you send | SClinica; the shop you order from sees your orders |
| Patient of a SClinica doctor | Nothing readable. Records stay encrypted on the doctor's computer; backups are encrypted with the doctor's key | Only your doctor |
| Customer ordering medicines | Name, mobile, delivery address, note, prescription photo, payment reference (UTR) | The shop you order from; SClinica for support |
| Medicine shop | Shop name, login, phone, address, UPI ID or QR code, the orders you receive | SClinica; doctors and customers see your name, phone and UPI details |
3. Doctors and their patients
- Patient records (patients, visits, prescriptions, feedback) are stored in a file in the clinic's own folder, encrypted (AES-256) with the doctor's passphrase. SClinica cannot open them. If the doctor loses both the passphrase and the printed recovery key, nobody can recover the records.
- Cloud backups: each day an encrypted copy is uploaded to SClinica's Google Drive storage and kept for about 8 weeks. The copy is encrypted on the doctor's computer before it is sent; SClinica cannot read it.
- Research data is sent only for patients who gave research consent in the clinic, and only without names, mobile numbers, addresses or exact dates (for example: system of medicine, age band, complaint, medicines, outcome). It is used for studies of treatment outcomes and is never sold.
- Licence and payments: when you ask for access we keep your name, clinic, registration number, city, mobile and e-mail, your plan and the UPI reference (UTR) of your payment, to check your registration, issue and renew your licence and keep accounts.
- Medicine orders from a doctor contain the doctor's name, clinic, delivery address, phone and the medicines – never patient names. They go to the chosen shop.
- Phone app: a linked phone keeps a device code that lets it place and see your orders. Patient records are never on the phone. You can remove a phone at any time in Settings → Phone app.
- WhatsApp messages to patients are sent from the doctor's own WhatsApp; SClinica does not receive them.
- The doctor is responsible for asking patients' consent for keeping records, WhatsApp messages and research, as SClinica's forms prompt. SClinica processes nothing else about patients.
4. Customers ordering medicines (/order)
- We collect your name, mobile, delivery address, an optional note and photos of your prescription so that the shop can check the prescription, tell you the amount, take payment and deliver. You give your consent on the order page.
- The prescription photos are seen only by the shop (and by SClinica if needed for support) and are deleted automatically 90 days after the order is closed (received, rejected or cancelled).
- You pay the shop directly by UPI. SClinica never receives your bank, card or UPI PIN details; we keep only the UTR number you type, so the shop can find your payment.
- The order record (name, mobile, address, amount, status) is kept while it is needed for the order and for the shop's accounts and legal duties. You can ask us to delete it earlier, unless the law requires it to be kept.
- Orders should be placed by adults (18 or older). A parent or guardian orders for a child.
5. Medicine shops
We keep the shop's name, login, password (stored only as a protected hash), phone, address, UPI ID or QR code and the orders it receives. Doctors and customers see the shop's name, phone and UPI details so they can pay and contact it. The shop sees only the orders sent to it and must use customers' details only to supply that order.
6. Where data is kept and who helps us
- Cloudflare runs the website and stores licences, orders and prescription photos.
- Google (Google Drive, via Google Apps Script) stores the encrypted backups and research files.
- YouTube shows the lecture videos (from youtube-nocookie.com) only when you press play. Wix runs Manakarnika Publications' book shop, a separate website with its own privacy policy.
These providers may store data on servers outside India. We use them only to run SClinica and do not sell or rent anyone's data, or use it for advertising.
7. Data on your own device
SClinica sets no tracking or advertising cookies. The browser or app keeps a few settings on your device: text size, a list of your recent orders ("My orders"), a linked phone's device code and your choice of doctor, shop or customer. Clearing the browser's or app's data removes them.
8. Security
Data travels only over encrypted connections (HTTPS). Shop passwords are stored as protected hashes, order links contain a secret code, and requests are limited to stop misuse. No system is perfectly safe; if a breach affects your data we will inform you and the authorities as the law requires.
9. Your rights
Under India's Digital Personal Data Protection Act, 2023 you may ask us to:
- tell you what personal data we hold about you and how it is used;
- correct or complete it;
- delete it, or withdraw a consent you gave (this does not affect what was done before);
- name another person who may act for you if you cannot.
Write to satyajituniv02@gmail.com from the e-mail or mobile number you used. Patients of a SClinica doctor should ask their doctor, who holds their records.
10. Grievance officer
Satyajit Chincholkar · Pune, Maharashtra, India · satyajituniv02@gmail.com
We reply within 7 days and aim to resolve every complaint within 30 days. If you are not satisfied, you may complain to the
Data Protection Board of India.
11. Changes
We will post any change on this page with a new version date, and tell doctors and shops in SClinica before an important change takes effect.