Privacy Policy

In effect from 2026-11-13 - Version 8

We hold information about your health. This page says exactly what, why, who else can see it, and how to get rid of it. It is written to be read, not to be survived.

We never sell your data, to anyone, in any form.

What we collect

Because you gave it to us:

• Your phone number, which is how you sign in, and an email address if you

add one as a second way in. We do not ask for a password.

• If you add a passkey, we keep its public key, a name you choose and when it

was added and last used. Your face, fingerprint and screen lock stay on your device; DrBell never receives them.

• The name you give a patient record, their date of birth if you enter one,

their timezone, language, and the times they usually eat.

• Every medicine you enter: its name, strength, form, the doctor's

instructions, and whether you marked it critical.

• Photographs you upload of prescriptions, tablets and strips.
• Every dose: when it was due, what you said happened, when you said it, and

any note or side-effect you recorded.

• Who you invite to help, and their phone number.
• Your answer to an invitation — approved or declined — with the screen you

answered on: who asked, what they would see, and which ways of being told you kept. And what you change later in "How I'm told".

• Which of your phones a record's reminders ring on, and whether a helper's

phone rings too.

• Whether you agreed to WhatsApp messages from DrBell, and when.
• A referral code, if you typed one or arrived through a partner's link.
• Your answer to "Help improve DrBell" (below).

Because your device tells us:

• Which devices you have signed in on, the operating system and app version,

the manufacturer and model, and the time zone.

• A random number DrBell makes for each installation, kept in your phone's

secure storage, and a one-way hash of the identifier your phone's system gives DrBell (the Android ID, or Apple's identifier for vendor). They let us recognise a reinstall as the same phone, so it is not counted twice against your plan. The raw identifier never leaves your phone, and neither is an advertising identifier.

• Whether your phone can ring a reminder. Each time DrBell opens, returns

to the screen, finishes set-up, or checks in by itself in the background (including after the phone restarts), it reports: whether notifications are allowed; on Android, whether exact alarms are allowed, whether DrBell is exempt from battery optimisation, whether DrBell's reminder sound has been turned off, and whether you told us the phone maker's "autostart" is on; on iPhone, whether reminders make a sound and show on the Lock Screen; and when the phone last restarted and last checked in. We keep a history of every change, with the date and time, and a note when a phone stopped checking in. We do not read anything else on your phone.

• The IP address of requests, for rate limiting and abuse prevention.

Because you use the app:

• What you do in DrBell that only your phone sees: marking a dose taken or

skipped (from the app or the notification), snoozing, opening a notification, opening a phone setting from set-up, confirming autostart, reading or dismissing the daily summary, accepting a notice, and answering the travel prompt — each with the time by your phone's clock and your phone's time zone. Taken without signal, these are sent when you are back online.

• Every change of time zone — of a record's reminders or of your account —

with the date, the old and new zone, why (you chose it, or switched while travelling), and where your phone was.

If you came through a link or a referral:

• When somebody opens a DrBell referral or campaign link, we record the code,

the campaign labels in the link (such as utm_source), any ad click identifier in it, the page, whether it was opened on a phone or a computer and which kind, and the country. We do not record the IP address or the browser's identification for a link click.

• On Android, Google Play tells the app which link or advertisement led to

the install (the "install referrer", a short text Google Play already holds, which can include an advertising campaign's click number). The first time you open DrBell the app sends it to DrBell's own servers, with the date you installed, the app version and the random installation number above. It does not use the advertising identifier. We use it to credit a referral and to work out, for our own planning, how many people who installed from each source (for example one of our advertising campaigns) go on to sign up, add a medicine, come back and subscribe. To add those up we match it to the account made on that phone; the totals we read contain no names, and nobody sees your medicines. It is not sent to Google or to any advertising company, and it is not used to show you advertising or to follow you in other apps.

• If a partner referred you, we record which partner and code, how you

arrived, and when. The partner sees numbers, never you: how many clicks, sign-ups and paying subscribers, and their commission, with each subscriber shown only as a meaningless reference. Never your name, number, email, city, or anything about your medicines.

If you pay: the store or payment provider you paid through tells us the plan, the amount, the tax and fee where it gives them, the dates, and whether it renewed or was refunded. We never see your card or bank details.

When the app crashes: technical details of the crash — the app version, the phone's model and system, and what the code was doing — go to Sentry, our crash-reporting processor, with names, numbers, email addresses and medicine details removed before they leave the phone.

Only if you agree: anonymous app usage. If you say yes to "Help improve DrBell", the app sends Google Analytics for Firebase which screens you open, how long the app is used, whether you signed in by phone or email, whether you finished set-up, which plan you bought and in which store, and your phone's model, operating system, app version and language, with a random number that identifies this installation. Google works out a country and city from the connection and does not keep the IP address. It never includes your name, your number, your email, your medicines, your doses, your schedules or anything you type, and it is not linked to your DrBell account. We do not use advertising identifiers and turn off every advertising use. You can say no, or switch it off later in Account; DrBell works exactly the same either way.

Because something happened:

• A log of every notification we attempted: who it went to, on which channel,

whether it arrived, and if not, why. This is what lets us answer "I never got the alert".

• A log of every time we told you, or the people who look after you, that

your phone could not ring reminders, had stopped checking in, or could ring them again.

• An audit log of who read or changed a patient record.

Where your phone is:

• Approximately, always: each time your phone checks in, the country,

region and city its internet connection comes from — worked out by our network provider from the connection, often the mobile carrier's city, and never a street address. We keep a history of when it changes.

• Precisely, only if you switch on "Share my location" (off unless you do):

your phone's position each time you open DrBell, never in the background. You can switch it off at any time in Account.

We do not collect your contacts, your browsing, or anything from other apps. We do not use advertising identifiers. Apart from anonymous app usage you agreed to, there are no third-party trackers in DrBell.

Why we hold it

To remind you, and to tell the people you chose when a dose is missed.

We record whether your phone can ring reminders so that we can warn you, and the people who look after you, before a dose is missed rather than after — and so that, if you ever tell us a reminder did not arrive, we can show you what your phone reported and what we did about it. These records reflect what was reported in the app; they are not proof that a medicine was taken (see What DrBell is). Nothing here is used to show you advertising, sold, or shared with a data broker. We do not train machine-learning models on your medication history.

Who can see it

Only the people you invite, in the role you gave them, and only until you revoke it.

DrBell staff. A small number of our staff operate the service. Support staff see delivery facts — whether your phone can ring, what was sent and whether it arrived — and see your medicines and dose history only after recording a reason (a support ticket, your own request for help, or an alert our systems raised about you), for one hour at a time. Each such access, with its reason, is recorded and included in your data export. A few senior staff responsible for the service can see all of it; their access is also recorded.

When your phone cannot ring reminders, or stops checking in for a day, we tell the people who are told about your missed doses (and you), by push notification, email, WhatsApp or SMS, as your plan and their settings allow. We tell them that your phone cannot ring reminders, and the phone's make and model — never which setting, and never what you take. We tell them again when it is fixed. Our support staff can see your phone's readiness history when you ask them for help. A caregiver sees what their role allows; a viewer sees less than a guardian. Revoking access takes effect immediately.

If a patient record belongs to an organisation — a care home or a hospital — then staff at that organisation can see it, and the organisation can restrict its own staff to particular wards.

We do not sell your data. We have never sold your data. If that ever changes you will be asked first, and "no" will be a real answer that costs you nothing.

Companies that process data for us, each only for its own job:

• Cloudflare runs our servers and databases.
• Apple and Google deliver push notifications, and handle purchases made

in their stores.

• WhatsApp (Meta) delivers WhatsApp messages — only to numbers that agreed

to hear from DrBell there.

• MSG91 delivers text messages (SMS).
• Resend delivers email.
• Razorpay (buyers in India) and Stripe (everywhere else) take payments made on the web.
• Sentry receives crash reports, with personal details removed.
• Google Analytics for Firebase receives anonymous app usage, only if you

agreed, and keeps it for two months.

A message necessarily tells its carrier that it was sent to a number; we keep the content of reminders as sparse as we can for that reason. Some of these companies may process data outside India.

Apple Health and Health Connect. If you switch on "Send my measurements" in DrBell on your phone, DrBell writes the measurements you type for your own record — blood pressure, blood sugar, weight, temperature, oxygen and pulse — to Apple Health or Health Connect on that phone. It writes nothing about the people you look after, never your medicines or doses, and reads nothing from them. What is written there is kept by Apple or Google on your phone and in your account with them, under their terms. Turning the switch off stops new writes; you remove what is already there in Apple Health or Health Connect. We never use data from them for advertising, and never sell it.

If you are a DrBell partner (you share a code and earn a commission): we hold your name or business name, how to reach you, your country, your codes and what they earned, and — before anything is paid — the tax and payment details the law requires. Partners outside India may be paid by our sister company, Thaja, in the United Arab Emirates, which then receives what it needs to pay them.

How long we keep it

• A dose record lives as long as the patient record does.
• An account you asked to delete is held for 30 days and then erased. The

30 days exist so that a deletion made in anger or by accident can be undone. Inside that window you can cancel it. After it, we cannot.

• Audit log entries survive the account they describe, with the person's

identity removed. A care home's safety trail is a legitimate thing to keep; who they were is not.

• Photographs are deleted with the patient record they belong to.
• Your phone's readiness history (what it reported about being able to

ring, and when), what you did in the app, and your time-zone history are kept for as long as your account exists, and erased with it. You get all of them in your data export; the people who look after you can download a record of your doses, alerts and time zones, and — if they may manage your record — what you did in the app. The log of what we told whom is kept like the notification log.

• The statement — the dated list of what happened on a record and on your

account — is kept as long as the record or the account. Nobody can edit it, us included: the database refuses. When an account is erased, the name of whoever did each thing is removed from it.

• A passkey's public key, name and dates are erased with your account, and

at once if you remove the passkey from Profile.

• Who referred you is erased with your account. A link click holds no

name, number or IP address, and is unlinked from your account when it is erased.

• Payment records keep the amount, the store and the order reference for

the accounts; when your account is erased, the link to you is removed.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

Exporting and erasing are self-service and take effect straight away. You do not have to email anyone and wait.

Children

A parent or guardian holds a child's record and consents on their behalf. DrBell does not track anybody's behaviour, at any age, and never sells or uses a child's record for advertising. Kid mode shows a child a streak and stickers; those are never compared with another child and never leave the account.

Security

Sessions expire after 90 days and you can end any of them from any device. Prescriptions and photographs are stored in private object storage and served only through signed, authenticated requests. We enforce transport security everywhere. Our full security summary is at /legal/security.

Changes

If we change what we collect or why, we will ask you to read the new notice before you continue — not bury it in a version number. Corrections to wording do not re-prompt you.

Who we are

DrBell is operated by Newtact Lab Private Limited (OPC) (https://newtact.in), registered in India.

Grievance Officer: Naveen Davuluri, Director and Grievance Officer Email: hello@drbell.app

We answer every message to that address. If you are writing about your own data — to see it, correct it, or have it erased — say so in the subject line and we will treat it as a formal request under the Digital Personal Data Protection Act, 2023.