DPDP Notice
This is the notice required before we process your personal data. The full detail is in our Privacy Policy; this page is the statutory summary.
Data Fiduciary
Newtact Lab Private Limited (OPC), https://newtact.in, India.
Personal data we process
Your phone number; the name, date of birth, timezone and language of each patient record you create; the medicines and schedules you enter; photographs you upload; the record of each dose; the phone numbers of caregivers you invite; device and notification-permission details, including a dated history of whether your phone could ring reminders (notifications, exact alarms, battery optimisation, autostart as you confirmed it, sound and Lock Screen settings, restarts and check-ins); the actions you take in the app, with time and time zone; the history of time-zone changes; the approximate place your phone connects from, and its precise location only if you switch on location sharing; your email address if you add one; if you add a passkey, its public key, the name you gave it and the dates it was added and last used (never your face, fingerprint or screen lock); your answers to invitations, with the terms you answered; your WhatsApp choice; how you arrived (a referral code, the labels in a campaign link, Google Play's install referrer, kept on our own servers only); what the store or payment provider tells us about a payment (never card details); a random installation number and a one-way hash of your phone's system identifier; crash reports with personal details removed; only if you agree, anonymous app usage; and logs of notifications sent, records accessed, and staff access with its reason.
Medication and dose information is health data. We treat it as the most sensitive thing we hold.
Purpose
To deliver medication reminders to you, to alert the caregivers you have chosen when a dose is missed, to warn you and those caregivers when your phone cannot ring reminders or has stopped checking in, to produce the adherence records you ask for, to take payment, to credit the partner who referred you, and to keep the service secure and accounted for. Only with your separate agreement: to learn how the app is used, so that we can improve it.
Legal basis
Your consent, given when you first used the app and recorded with the version of the notice you accepted. You may withdraw it at any time by deleting your account or revoking a caregiver's access; withdrawal is as easy as giving it.
Anonymous app usage has its own consent, asked separately. Saying no changes nothing else, and you can withdraw it in Account at any time.
Your rights
Access, correction, erasure, nomination, and grievance redressal. The first three are self-service inside the app and take effect immediately.
How to complain
Write to Naveen Davuluri, Director and Grievance Officer, at hello@drbell.app. We will acknowledge within 72 hours and respond substantively within 30 days.
If you are not satisfied with our response, or we do not respond, you may complain to the Data Protection Board of India.
Cross-border processing
Our infrastructure is operated by Cloudflare and processes data in the region nearest to you. Our processors are Cloudflare; Apple and Google (push notifications and store purchases); Meta (WhatsApp); MSG91 (SMS); Resend (email); Razorpay and Stripe (web payments); Sentry (crash reports); and, only if you agreed, Google Analytics for Firebase. Some of them may process data outside India. A message necessarily tells its carrier that it was sent to a number.
Who we are
DrBell is operated by Newtact Lab Private Limited (OPC) (https://newtact.in), registered in India.
Grievance Officer: Naveen Davuluri, Director and Grievance Officer Email: hello@drbell.app
We answer every message to that address. If you are writing about your own data — to see it, correct it, or have it erased — say so in the subject line and we will treat it as a formal request under the Digital Personal Data Protection Act, 2023.