1. Introduction
NephroTrack ("we", "us", or "our") is a kidney care platform operated by YMed that helps patients track health data and stay connected with their care teams. This Privacy Policy explains how we collect, use, store, and share information when you use the NephroTrack mobile app, patient web app, and doctor portal (together, the "Services").
By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.
2. Information we collect
We collect information you provide and information generated through your use of the Services.
Account and identity
- Mobile phone number (used for OTP sign-in)
- Email address (for doctor and admin accounts, where applicable)
- Name, date of birth, sex, and patient identification code
- Caregiver contact details, when provided
Health and clinical information
- Diagnosis, care plans, prescriptions, and clinical notes shared by your care team
- Vitals and diary entries (for example temperature, blood pressure, weight, urine dipstick results)
- Medication adherence, lab reports, and episode history
- Alert thresholds and notification preferences
- Research study enrollment and case report form data, when you or your doctor enroll you
Technical and usage information
- Device tokens for push notifications
- Session cookies on the web app to keep you signed in
- Basic logs needed to operate, secure, and troubleshoot the Services
3. How we use your information
We use the information we collect to:
- Authenticate you and maintain your account
- Provide kidney care tracking, reminders, alerts, and care team coordination
- Share relevant health information with doctors and nurses on your authorized care team
- Send medication reminders, clinical alerts, and service-related messages
- Improve reliability, security, and performance of the Services
- Support approved clinical research, when you are enrolled with appropriate consent
- Comply with applicable law and respond to lawful requests
4. How we share information
We do not sell your personal or health information. We may share information in these situations:
- With your care team: Doctors, nurses, and authorized staff on your care team can access clinical and diary information needed to provide care.
- With service providers: We use trusted vendors for OTP delivery (MSG91), push notifications (Firebase), hosting, and infrastructure. They may process data only to provide services to us.
- For legal reasons: We may disclose information if required by law, court order, or to protect the rights, safety, and security of users and the public.
- With your direction: For example, when you join a care team via QR code or request connection to a clinical team.
5. Data retention and security
We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. We use administrative, technical, and organizational safeguards—including encrypted transport (HTTPS), access controls, and authenticated sessions—to protect your information.
No method of transmission or storage is completely secure. Please use a device you trust and keep your phone number secure, since it is used to sign in.
6. Your choices and rights
Depending on applicable law, you may have the right to:
- Access and update profile information in the app or by contacting us
- Adjust notification and alert threshold settings in your profile
- Request correction of inaccurate information
- Request deletion of your account, subject to legal and clinical record-keeping requirements
- Withdraw consent for optional processing where consent is the legal basis
To exercise these rights, contact us at privacy@ymed.ai. We may need to verify your identity before responding.
7. Cookies and sessions (web)
The NephroTrack web app uses session cookies to keep you signed in after OTP verification. These cookies are essential for authentication and are not used for advertising. You can clear cookies in your browser settings, which will sign you out of the web app.
8. Push notifications
If you enable push notifications, we store a device token to deliver medication reminders and care alerts. You can disable notifications in your device or app settings at any time.
9. Children's privacy
The Services may be used for pediatric kidney care under supervision of a parent, guardian, or care team. If you believe we have collected personal information from a child without appropriate authorization, contact us and we will take appropriate steps.
10. International users
NephroTrack is primarily designed for users in India. If you access the Services from other regions, your information may be processed in India or where our service providers operate, subject to this Privacy Policy and applicable law.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the effective date. Continued use of the Services after changes become effective means you accept the updated policy.
12. Contact us
For privacy questions or requests, contact us at privacy@ymed.ai.