MedSetu ("we", "our", or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, and safeguard your information when you use the MedSetu mobile application and website.

1. Information We Collect

We collect the following types of information:

• Personal Information: Name, mobile number, email address, and delivery address provided during registration or order placement.
• Order Information: Details of medicines ordered, prescription uploads (if any), and order history.
• Device Information: Device type, operating system, and app usage data for improving app performance.
• Location Data: Approximate location to show nearby Jan Aushadhi stores and delivery options (only with your permission).

2. How We Use Your Information

We use the collected information to:

• Process and deliver your medicine orders
• Send order confirmation and delivery updates via SMS/email
• Provide customer support
• Improve our app features and user experience
• Comply with legal obligations

3. Data Sharing

We do not sell or rent your personal data to third parties. We may share your information with:

• Delivery partners: Only name, address, and phone number for order fulfillment
• Payment processors: For secure transaction processing (we do not store card details)
• Government authorities: When required by law

4. Data Storage and Security

Your data is stored securely on Supabase servers with industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. Additional Safeguards for Sensitive Data

Because MedSetu handles healthcare-related information, the following categories get extra protection beyond what is described above:

• Delivery OTP: When your order is out for delivery, a one-time verification code (OTP) is generated for that order. This code is visible only to you, the customer who placed the order — not to the delivery partner, the seller, or anyone else. The delivery partner only sees that a code has been sent, not the code itself. The code stops working after repeated incorrect attempts and can only be reissued through the seller or our admin team.
• Seller Identity & Verification Documents: Sellers on the Platform submit identity and regulatory documents (such as Aadhar number and drug licence) for verification purposes. These are access-restricted: visible only to the seller themself and MedSetu's verification team, and are never exposed to customers, other sellers, or delivery partners.
• Prescription-Required Medicines: Orders containing medicines that legally require a prescription are routed to a qualified pharmacist for review before the order proceeds to the seller. This pharmacist-review step is part of our regulatory compliance process — see our Terms & Conditions for details.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Withdraw consent for optional data processing at any time

To exercise these rights, contact us at the email below.

7. Cookies and Tracking

MedSetu uses minimal cookies necessary for app functionality such as keeping you logged in. We do not use advertising or tracking cookies.

8. Children's Privacy

MedSetu is intended for users aged 18 and above. We do not knowingly collect personal information from children under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email. Continued use of MedSetu after changes implies acceptance of the updated policy.

10. Contact Us