Privacy Policy & Data Practices

1. Cryptographic Storage & Encryption Architecture

Hippocrates processes consultation transcripts, symptom descriptions, and attached diagnostic laboratory reports strictly to deliver real-time clinical intelligence.

• In Transit: All data transmitted between your browser and our infrastructure is secured using industry-standard TLS 1.3 encryption.
• At Rest: Consultation records, user sessions, and stored summaries are encrypted at rest using AES-256.
• Database Isolation: Multi-tenant isolation is enforced via Supabase PostgreSQL Row-Level Security (RLS) policies, mathematically preventing User A from querying or modifying User B's records.

2. Information We Collect

We only collect data necessary to provide and secure the clinical intelligence platform:

• Account Credentials: Full name, verified email address, or phone number used during authentication.
• Clinician Verification Data: For doctors accessing Oracle, we collect and verify the Medical Council Registration Number.
• Clinical Consultation Content: The text of messages, symptom timelines, and lab parameters you voluntarily provide within a consultation case.
• Technical Logs: IP address, browser user-agent, and error logs collected strictly for security, rate-limiting, and abuse prevention.

3. Zero Commercial Ad Monetization

We never sell, rent, broker, or monetize your health data. Your medical discussions, symptom histories, and diagnostic lab reports are never provided to commercial advertising networks, data brokers, or insurance underwriters.

4. User Control & Data Deletion Rights

You retain complete sovereignty over your data:

• Immediate Case Deletion: You can delete any individual consultation or case history directly from the workspace sidebar with one click. Deletion removes the case from both in-memory caches and PostgreSQL databases.
• Account Eradication: You may request complete account deletion and data scrubbing by contacting our data protection officer at support@hippocrates.in.

5. Regulatory Alignment

Hippocrates is engineered in contemplation of the Indian Digital Personal Data Protection Act (DPDP), the National Digital Health Mission (NDHM) guidelines, and standard international health data security principles (HIPAA Security Rule principles).