Patient Data Protection

1. What patient data we store

When a patient books an appointment through a doctor's LaunchMyDoc website, we store: name, phone number, age, gender, and the chosen appointment date/session. If the patient is under 18, we also collect the guardian's name and their relation to the patient. An optional note on the reason for the visit may also be included if the patient adds one.

This is treated as sensitive personal dataunder India's Digital Personal Data Protection Act, 2023 (DPDP Act) — health-related information about an identifiable person — and handled with the safeguards below.

2. Guardian consent for minors

The DPDP Act requires verifiable guardian consent before processing a child's personal data. Our booking form enforces this directly: whenever the patient's age is entered as under 18, the guardian's name and relation to the patient become required fields before the booking can be submitted.

3. One doctor never sees another's patients

Every doctor's bookings are isolated at the database level, not just in the app screen you see. Our database enforces row-level security: a practice's staff accounts can only ever query their own doctor's bookings — the database itself blocks any attempt to read or write another practice's patient data, even if a bug elsewhere in the app tried to. This is the same mechanism banks and hospitals use for tenant isolation in shared systems.

4. Encryption and infrastructure

All data in transit — between a patient's browser, our servers, and our database — is encrypted (TLS/HTTPS). Data at rest is protected by our infrastructure provider's managed database encryption. We do not currently apply an additional layer of field-level encryption on top of that to patient name/phone/age/gender columns; this is an area we are evaluating for a future hardening pass.

5. Retention — the 3-year rule

Medical council record-keeping norms require a doctor to retain patient visit records for a minimum of 3 years from the date of the visit (some states or specialties may require longer — a doctor should confirm the period that applies to their own practice). In line with this, we keep patient booking records for at least 3 years regardless of a doctor's account or billing status, and we do not delete them early even at a doctor's request. After that minimum period has elapsed, a doctor can request deletion of their own practice's old booking records.

6. Who can see this data

Only the doctor and the staff accounts they have personally invited to their own practice. We do not sell patient data, and we do not share it with sponsors, SEO partners, or any other party described in our Privacy Policy.

7. Questions or requests

For questions about this page, or to make a data request regarding patient booking records, a doctor or their patient can contact us via the dashboard or the address on our website. See also our Privacy Policy and Terms of Service.