When the data is about somebody else
This is the situation this service is mostly in, so it comes first rather than in a footnote. If you upload your mother’s passport, list her medications, or share photographs of her home, she is the person that data is about — not you.
- You are confirming you may share it. That you have their permission, or another proper basis such as acting under a power of attorney or as their guardian.
- They keep their own rights over it, regardless of whose account it sits in. They can ask us for a copy, for a correction, or for deletion, and they do not need an account to do so.
- We will tell them if they ask. If somebody contacts us about data held about them, we will confirm what we hold and, where it is right to do so, who provided it. We will not conceal it from them to protect the account holder.
The same applies to a parcel recipient who never used this service at all: their name and address are held because somebody sent them something, and they can exercise their rights without an account.
What we collect and why
- Account details — name, email, password (stored only as a hash we cannot reverse), language, timezone. To let you in and to reach you about your orders.
- People you add — parents, beneficiaries, family circle members: their names, addresses, contact details, and where a care service needs it, allergies, medications and medical notes. To do the work you asked for.
- Documents — whatever a service requires: passports, deeds, marksheets, medical records, powers of attorney. To submit, attest, or act on them.
- Orders and evidence — what was requested, each step and who did it, photographs and reports from visits, location tags where a visit had to be proven to have happened. To do the work, and to show you it was done.
- Payments — amounts, invoices, refunds and the ledger behind them. Card and bank details are handled by the payment provider; we do not store them.
- Messages — what you and our staff say to each other about an order.
- Technical records — the network address and browser used when privileged actions happen, and when documents are opened. To keep the audit trail meaningful.
What allows us to hold it
- Performing the contract with you — nearly everything operational: your account, your orders, the documents needed to complete them.
- Legal obligation — invoices, ledger entries, tax records and the audit trail. We are required to keep these and cannot delete them on request.
- Explicit consent — health information about a person receiving care. This is a special category of data, it is only held where a service genuinely requires it, and it can be withdrawn.
- Legitimate interests — keeping the service secure and preventing fraud, balanced against the effect on the people involved.
Who can see it
Staff see what their role requires and no more, and every privileged action is recorded against the individual who took it — with what changed and the reason given.
Outside our own staff, data goes to:
- Government offices and registries — the documents a service exists to submit.
- Professionals we engage for you — a lawyer, a chartered accountant, a notary, where the service requires one.
- Payment providers — to take payment and issue refunds.
- Carriers — a recipient’s name and address, to deliver a parcel.
- Infrastructure providers — hosting, email delivery and similar, under contract and only to run the service.
We do not sell data, we do not share it for advertising, and there is no advertising network or third-party analytics script.
Where it is held
The work happens in India and the data is held in India. If you are outside India — which most account holders are — then using this service necessarily involves your information being processed there, by the people doing the work.
How long we keep it
The intended schedule gives every class of data a period and a stated reason: financial records for the eight years India’s company law requires, the audit trail for the same, visit evidence for a period after the order closes, call recordings for far less. Records under a legal hold are kept until it lifts.
> This schedule is not yet enforced automatically. The periods above are the design. The nightly job that acts on them has not been built, so nothing is currently being deleted on a schedule. Deletion happens when you ask for it, under the rights below. Stating this rather than describing the schedule as though it ran is deliberate.
Your rights, and how to actually use them
Whether or not you have an account, you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct something that is wrong;
- delete it, where we are not legally required to keep it;
- stop a particular use, or withdraw consent you gave for health information;
- give you your data in a portable form.
Write to the privacy contact shown alongside this document. Say what you want and enough for us to identify the records — if you are asking about somebody else’s data, say who you are to them. We will respond within 30 days, and we will not charge you for it.
If you are not satisfied with how we handle it, the Grievance Officer is the escalation, and you can complain to the data protection authority where you live.
Cookies and local storage
We store what the app needs to work: keeping you signed in, and remembering your theme, language and timezone. Nothing here follows you to other apps or sites, and there is no consent banner because there is nothing beyond the necessary set to consent to.
If that ever changes, the banner arrives in the same release as whatever made it necessary, and nothing optional is set before you have chosen.
Children
Accounts are for adults. Data about a child may legitimately appear inside a service — a school admission, a passport for a minor — and it is held under the same rules and shared only with the office it is being submitted to.