Last updated: August 2026 · Applies to medcip.com, the Medcip patient app and the Medcip Partner app.
Medcip ("we", "us") connects patients with licensed pharmacies and provides technology services to healthcare providers in India. We are committed to handling personal data in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy explains what we collect, why, and the choices you have.
Patients: name, phone number, age, gender, addresses, language preference; orders and payment status (we do not process or store card/UPI credentials — payments go directly to the pharmacy); prescriptions you upload, including details extracted from them (doctor, clinic, patient name) to build your personal prescription record; family-member profiles you create; medicine reminders; messages you exchange with pharmacies.
Pharmacies: owner and business details, drug licence, GSTIN, pharmacist registration, UPI ID, inventory, orders, staff contacts.
Website visitors: only what you submit in our contact form (name, phone, organisation, message).
To operate the ordering service between you and your chosen pharmacy; to verify prescriptions as required by law (Schedule H); to generate GST invoices; to send service notifications (order status, refunds, reminders); and, with your consent, offers from pharmacies you are a customer of. We do not sell personal data. We do not show third-party advertising.
Prescriptions and medicine histories are sensitive. They are visible only to you, the pharmacy you send an order to, and family members you explicitly link. Automated reading of prescriptions is used solely to organise your records and is always correctable by you.
Your order details and prescription go to the pharmacy fulfilling your order — that is the service. Service providers who process data for us (e.g., cloud hosting, notification delivery) are bound by contract to use it only on our instructions. We disclose data to authorities only where the law requires.
Order and invoice records are kept as required by tax and pharmacy law. You may access and correct your data in the app, delete addresses, family members and reminders yourself, and request account deletion by writing to privacy@medcip.com. We respond within the timelines set by the DPDP Act, and you may complain to the Data Protection Board of India.
Data is encrypted in transit; access is role-restricted (e.g., pharmacy staff cannot see business reports); prescription files are stored privately and served only to authorised parties.
Grievance / Data Protection contact: privacy@medcip.com.
This document is a working draft published for transparency and app-store review; it will be finalised with legal counsel before public launch.