Privacy

Who this covers

Doxter provides software to doctors and clinics (“practices”) and a portal their patients can use. Where a practice uses Doxter to record consultations and keep patient records, the practice is the controller of that patient information and Doxter is its processor— we handle it on the practice’s instructions, for the purposes of running their clinic, and for no other purpose.

Where you sign up as a doctor, or contact us through this website, we are the controller of that account and enquiry information.

What we collect

From doctors and practice staff

• Account details: name, email address, phone number, password credentials.
• Practice details you choose to enter: practice name, address, working hours, contact numbers, qualifications, specialties, and anything you publish on your public practice page.
• Usage and diagnostic data needed to keep the app working and to fix crashes.

From or about patients, on a practice’s behalf

• Identity and contact details: name, age, gender, phone number.
• Clinical information: consultation audio recorded by the doctor, its transcript, medicines, dosages, vitals, clinical notes, diagnoses and prescriptions.
• Documents a patient or practice uploads: lab reports, prescriptions, discharge summaries and similar records, along with information extracted from them.
• Queue, appointment and visit history at that practice.
• Messages exchanged with the practice through the chat channel.

Why we process it

• To provide the service: transcribing a consultation, extracting the medicines that were spoken, drafting a clinical note, producing a prescription, reading a lab report, running the queue, tracking stock, and delivering records to the patient.
• To keep it safe and working:authentication, abuse and fraud prevention, diagnosing faults, and preventing one practice’s data from being visible to another.
• To meet legal obligations that apply to us or to the practice.

We do not sell personal information, and we do not use patient clinical information for advertising.

Automated processing

Doxter uses machine learning to transcribe consultations, extract structured medicines, draft clinical notes and read uploaded reports. These outputs are drafts. Every one of them is presented to the treating doctor for review and can be edited or discarded. Doxter does not make a clinical decision, and nothing it produces is a diagnosis or a substitute for the doctor’s judgement.

Where it is stored, and for how long

Clinical information is stored on managed cloud infrastructure in a data centre region in India. Some sub-processors may process limited data outside India in order to deliver a specific feature; where that happens, it is under contractual protections. We will provide a current list of sub-processors to any practice on request.

Records are retained for as long as the practice keeps its account, because a clinical record loses its value the moment it is incomplete. When a practice closes its account, we delete or return its data on request, subject to any retention period the law requires of us.

Who can see what

• A practice can see only its own patients and its own records.
• A patient can see only their own records, after signing in on their own phone.
• Doxter staff access clinical information only where it is necessary to operate or support the service, and access is limited to the people who need it.

Your choices

You can ask us to give you a copy of your information, correct it, or delete it. If you are a patient, the fastest route is to ask the practice that treats you, because it holds the record — but you can also write to us and we will pass the request on and help fulfil it.

Security

Access is authenticated, data is encrypted in transit, and every request that reaches clinical information is checked against the identity making it. Uploaded files are validated before they are stored or processed. No system is perfect; if a breach affects your information, we will notify the affected practice without undue delay.

Children

Doxter is used by doctors who treat patients of every age, including children. A child’s record is created and controlled by the practice under the same terms as any other patient record. Doxter is not offered directly to children as a consumer product.

Changes

If this policy changes materially, we will update the date at the top and tell practices through the app before the change takes effect.

Contact

Questions, requests or complaints: hello@doxter.in.