Legal
Privacy Policy
Last updated: March 23, 2026
1. Information We Collect
1.1 Information You Provide
When you register for CureEazy, we collect information such as your full name, email address, phone number, medical registration number, clinic name, clinic address, and specialisation. Patients whose information is entered by registered doctors may include name, age, gender, phone number, email address, medical history, symptoms, and prescription details.
1.2 Information Collected Automatically
We automatically collect certain technical information when you use our platform, including IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps of access. This information is used to maintain security and improve platform performance.
1.3 Communications Data
If you contact us through the website contact form or via email, we collect your name, email address, phone number, and the content of your message in order to respond to your enquiry.
2. How We Use Your Information
2.1 To Provide the Service
We use the information we collect to operate, maintain, and improve the CureEazy platform. This includes processing appointments, enabling AI-powered triage and prescription features, sending WhatsApp notifications, and generating digital prescriptions.
2.2 Communications
We may use your email address to send you service-related communications, including account verification, platform updates, and support responses. You may opt out of non-essential communications at any time.
2.3 Analytics and Improvement
We use anonymised and aggregated data to understand how the platform is used and to improve features, performance, and user experience. Individual patient data is never used for model training or shared with third parties for this purpose.
2.4 Legal Compliance
We may process your information where necessary to comply with applicable laws, respond to legal processes, or protect the rights, property, and safety of CureEazy, its users, or the public.
3. Data Storage and Security
3.1 Data Storage
All data is stored on secure servers located in India. We use industry-standard encryption (TLS 1.2+) for all data transmitted between your device and our servers. Data at rest is encrypted using AES-256.
3.2 Security Measures
We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include role-based access controls, audit logging of all actions, regular security assessments, and strict staff access protocols.
3.3 Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Medical records and prescription data are retained for a minimum period as required by applicable Indian medical regulations. You may request deletion of your account data subject to these legal retention requirements.
4. Sharing of Information
4.1 No Sale of Data
We do not sell, rent, or trade your personal information or patient data to any third party under any circumstances.
4.2 Service Providers
We work with trusted third-party service providers who assist in operating the platform, including cloud hosting providers, WhatsApp Business API providers, and payment processors. These providers are contractually obligated to handle your data only as instructed by us and in accordance with this policy.
4.3 Legal Requirements
We may disclose information if required to do so by law, regulation, legal process, or governmental request, or where necessary to protect the vital interests of a patient or third party.
5. Patient Data and Medical Records
5.1 Doctor Responsibility
Doctors using CureEazy are responsible for obtaining necessary patient consent for the collection and processing of their health information in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.
5.2 AI Processing
Patient symptom data is processed by AI systems to provide triage suggestions and prescription drafts. This processing is performed solely to assist the treating doctor and does not replace clinical judgement. All AI suggestions require explicit approval by a registered medical professional.
5.3 WhatsApp Data
Patient communications via WhatsApp are facilitated through the official WhatsApp Business API. Message content is encrypted in transit and processed solely for appointment booking and symptom collection purposes.
6. Your Rights
6.1 Access and Correction
You have the right to access the personal data we hold about you and to request corrections if any information is inaccurate or incomplete. You can update most information directly from your account settings.
6.2 Data Portability
You may request a copy of your data in a machine-readable format. Please contact us at care@cureeazy.com with your request.
6.3 Deletion
You may request deletion of your account and associated personal data. Note that some data may be retained to comply with legal obligations, resolve disputes, or enforce agreements.
6.4 Complaints
If you have concerns about how we handle your data, please contact us at care@cureeazy.com. You also have the right to lodge a complaint with the applicable data protection authority.
7. Cookies
7.1 Use of Cookies
We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse platform usage. Essential cookies are required for the platform to function and cannot be disabled. Analytics cookies are used only in aggregate and anonymised form.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the "Last Updated" date at the top of this page. Continued use of the platform after such notice constitutes acceptance of the revised policy.
9. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: In Out Green Noida, India Email: care@cureeazy.com