This page is not yet available in mr-IN. You are reading the en-IN version.
Privacy Policy
We hold information about your health. This page says exactly what, why, who else can see it, and how to get rid of it. It is written to be read, not to be survived.
What we collect
Because you gave it to us:
- Your phone number, which is how you sign in. We do not ask for a password.
- The name you give a patient record, their date of birth if you enter one,
their timezone, language, and the times they usually eat.
- Every medicine you enter: its name, strength, form, the doctor's
instructions, and whether you marked it critical.
- Photographs you upload of prescriptions, tablets and strips.
- Every dose: when it was due, what you said happened, when you said it, and
any note or side-effect you recorded.
- Who you invite to help, and their phone number.
Because your device tells us:
- Which devices you have signed in on, the operating system and app version,
the manufacturer and model, and the time zone.
- Whether your phone can ring a reminder. Each time DrBell opens, returns
to the screen, finishes set-up, or checks in by itself in the background (including after the phone restarts), it reports: whether notifications are allowed; on Android, whether exact alarms are allowed, whether DrBell is exempt from battery optimisation, whether DrBell's reminder sound has been turned off, and whether you told us the phone maker's "autostart" is on; on iPhone, whether reminders make a sound and show on the Lock Screen; and when the phone last restarted and last checked in. We keep a history of every change, with the date and time, and a note when a phone stopped checking in. We do not read anything else on your phone.
- The IP address of requests, for rate limiting and abuse prevention.
Because you use the app:
- What you do in DrBell that only your phone sees: marking a dose taken or
skipped (from the app or the notification), snoozing, opening a notification, opening a phone setting from set-up, confirming autostart, reading or dismissing the daily summary, accepting a notice, and answering the travel prompt — each with the time by your phone's clock and your phone's time zone. Taken without signal, these are sent when you are back online.
- Every change of time zone — of a record's reminders or of your account —
with the date, the old and new zone, why (you chose it, or switched while travelling), and where your phone was.
Because something happened:
- A log of every notification we attempted: who it went to, on which channel,
whether it arrived, and if not, why. This is what lets us answer "I never got the alert".
- A log of every time we told you, or the people who look after you, that
your phone could not ring reminders, had stopped checking in, or could ring them again.
- An audit log of who read or changed a patient record.
Where your phone is:
- Approximately, always: each time your phone checks in, the country,
region and city its internet connection comes from — worked out by our network provider from the connection, often the mobile carrier's city, and never a street address. We keep a history of when it changes.
- Precisely, only if you switch on "Share my location" (off unless you do):
your phone's position each time you open DrBell, never in the background. You can switch it off at any time in Account.
We do not collect your contacts, your browsing, or anything from other apps. We do not use advertising identifiers. There are no third-party trackers in DrBell.
Why we hold it
To remind you, and to tell the people you chose when a dose is missed.
We record whether your phone can ring reminders so that we can warn you, and the people who look after you, before a dose is missed rather than after — and so that, if you ever tell us a reminder did not arrive, we can show you what your phone reported and what we did about it. These records reflect what was reported in the app; they are not proof that a medicine was taken (see What DrBell is). Nothing here is used for advertising, sold, or shared with a data broker. We do not train machine-learning models on your medication history.
Who can see it
Only the people you invite, in the role you gave them, and only until you revoke it.
DrBell staff. A small number of our staff operate the service. Support staff see delivery facts — whether your phone can ring, what was sent and whether it arrived — and see your medicines and dose history only after recording a reason (a support ticket, your own request for help, or an alert our systems raised about you), for one hour at a time. Each such access, with its reason, is recorded and included in your data export. A few senior staff responsible for the service can see all of it; their access is also recorded.
When your phone cannot ring reminders, or stops checking in for a day, we tell the people who are told about your missed doses (and you), by push notification, email, WhatsApp or SMS, as your plan and their settings allow. We tell them that your phone cannot ring reminders, and the phone's make and model — never which setting, and never what you take. We tell them again when it is fixed. Our support staff can see your phone's readiness history when you ask them for help. A caregiver sees what their role allows; a viewer sees less than a guardian. Revoking access takes effect immediately.
If a patient record belongs to an organisation — a care home or a hospital — then staff at that organisation can see it, and the organisation can restrict its own staff to particular wards.
We do not sell your data. We have never sold your data. If that ever changes you will be asked first, and "no" will be a real answer that costs you nothing.
Our infrastructure runs on Cloudflare. Notifications are delivered by the push services operated by Apple and Google, and — once configured — by WhatsApp and an SMS provider. A notification necessarily discloses to those carriers that a message was sent to a number; we keep the content of reminders as sparse as we can for that reason.
How long we keep it
- A dose record lives as long as the patient record does.
- An account you asked to delete is held for 30 days and then erased. The
30 days exist so that a deletion made in anger or by accident can be undone. Inside that window you can cancel it. After it, we cannot.
- Audit log entries survive the account they describe, with the person's
identity removed. A care home's safety trail is a legitimate thing to keep; who they were is not.
- Photographs are deleted with the patient record they belong to.
- Your phone's readiness history (what it reported about being able to
ring, and when), what you did in the app, and your time-zone history are kept for as long as your account exists, and erased with it. You get all of them in your data export; the people who look after you can download a record of your doses, alerts and time zones, and — if they may manage your record — what you did in the app. The log of what we told whom is kept like the notification log.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
| Right | How |
|---|---|
| See everything we hold | Settings → Export, or GET /api/me/export. One JSON file, everything, immediately |
| Correct it | Edit it in the app; you hold the record |
| Erase it | Settings → Delete account. 30-day grace, then complete erasure |
| Withdraw consent | Revoke any caregiver's access at any time, or delete the account |
| Nominate someone | Ask us at hello@drbell.app; we will record a nominee for your account |
| Complain | hello@drbell.app first. If we do not resolve it, the Data Protection Board of India |
Exporting and erasing are self-service and take effect straight away. You do not have to email anyone and wait.
Children
A parent or guardian holds a child's record and consents on their behalf. DrBell has no advertising and no behavioural tracking, for anybody, at any age. Kid mode shows a child a streak and stickers; those are never compared with another child and never leave the account.
Security
Sessions expire after 90 days and you can end any of them from any device. Prescriptions and photographs are stored in private object storage and served only through signed, authenticated requests. We enforce transport security everywhere. Our full security summary is at /legal/security.
Changes
If we change what we collect or why, we will ask you to read the new notice before you continue — not bury it in a version number. Corrections to wording do not re-prompt you.
Who we are
DrBell is operated by Newtact Lab Private Limited (OPC) (https://newtact.in), registered in India.
Grievance Officer: Naveen Kumar Davuluri, Chief Executive Officer and Grievance Officer Email: hello@drbell.app
We answer every message to that address. If you are writing about your own data — to see it, correct it, or have it erased — say so in the subject line and we will treat it as a formal request under the Digital Personal Data Protection Act, 2023.