1. Introduction
This Privacy Policy explains how Pi Health (π) collects, uses, stores and protects information when you use our healthcare applications ("the Apps"). The Apps run in your browser. For pricing and the free tier, see our Terms of Service.
We have written this to describe what the software actually does today, not what it may do later. Where something is planned but not built, we say so.
2. What Information We Collect
- Your account: your email address, which is how you sign in, along with your name, contact details and clinic locations. Signing in uses a one-time code sent to your email, so we do not store a password for the free apps.
- Patient data: the records you enter, including demographics, medical history, vitals, consultation notes, prescriptions and lab or imaging results. This is held on our servers as described in section 4.
- Operational data: logs needed to keep the service running and secure, such as errors and sign-in events. We do not use third-party analytics.
3. How We Use Your Information
- To provide the clinical features you are using.
- To keep the service secure, available and backed up.
- To answer your support requests.
- To tell you about material changes to the service.
We do not profile you, and we do not use patient data to decide what to show you.
4. Where Your Data Is Held
This differs by product, and the differences are real, so they are set out separately.
Free single-user apps
- Your records are held on Pi Health's servers. They are not stored only on your device, and they are not available without an internet connection.
- These apps run on shared infrastructure. Each account's records are separated in software, so one doctor cannot reach another's patients, and every query is restricted to the account that made it.
- Data for these apps is currently held in India. As we make the apps available in other countries, data may be held elsewhere. We will update this page before that happens.
Chorda and Maxima (clinics and hospitals)
- Each customer gets their own instance with its own database, kept separate from every other customer by deployment rather than by software rules alone.
- Where that instance runs is agreed with you, and can be outside India.
Self-hosted
- You run the software on your own infrastructure and hold your own database. We do not receive your patient data at all.
5. How We Protect It
- Connections between your browser and our servers are encrypted in transit.
- Backups are encrypted, and are taken regularly so that data can be recovered.
- Access is controlled per account. Signing in requires a code sent to your email address.
- We do not claim any certification or third-party audit. We describe the measures we take rather than naming a standard we have not been assessed against.
6. Who Else Is Involved
- We do not sell patient data, and we never share it with a sponsor.Sponsorship pays for the free apps, and a sponsor receives no patient information of any kind.
- Advertising: the Apps show no advertising. We plan to display a sponsor's logo, chosen by city. No patient information is used to choose it, and no sponsor receives patient data.
- Infrastructure providers: our servers and backups run on infrastructure operated by third parties, who necessarily hold the data in order to host and back it up. They do not use it for any purpose of their own.
- We may disclose information where the law requires it.
7. Your Rights and Choices
- You can access and correct your data in the Apps, and ask us to delete it.
- Getting your data out: there is no self-service export yet. One is being built. Until it exists, ask us and we will provide your records to you.
- Deleting your account removes your records from the live service. Encrypted backups are kept for a period afterwards so the service can be recovered from failure, and expire on their own schedule.
- If you are a patient rather than a doctor, your records were entered by your clinician, and requests about them should go to that clinic. We will help them respond.
8. Changes to This Policy
We will update this page when the service changes, and change the date at the top when we do. Material changes will also be communicated in the Apps.
9. Contact Us
For questions, support, data requests or complaints, please get in touch. If you are not satisfied with our response, the DPDP Act gives you the right to complain to the Data Protection Board of India.