Privacy Policy

Last Updated: August 2026

1. Introduction

At Upchar360, your privacy is our highest priority. We understand that the health and medical information you share with us is deeply personal and highly sensitive. This Privacy Policy outlines how we collect, protect, and use your data to provide you with seamless clinical triaging.

2. Data Collection & Usage

To accurately match you with the right specialist, we collect clinical symptom data, uploaded medical reports (e.g., MRI scans, blood work), and optionally, System (Model) voice recordings describing your condition. This data is strictly used by our deterministic System (Model) engine and our internal Bridge Triage doctors to create a structured clinical summary.

We do not sell your personal data, nor do we share it with third parties for marketing purposes. Your clinical summary is only shared with the specific verified specialist you choose to book a consultation with.

3. Data Security, Encryption & De-identification

We employ state-of-the-art security measures to ensure your medical data remains completely secure:

  • End-to-End Encryption: All medical reports, System (Model) voice recordings, and symptom text data are encrypted both in transit (via TLS 1.3) and at rest (using AES-256 encryption) in our highly secure, HIPAA-compliant PostgreSQL databases.
  • De-identification of System (Model) Processing: When your voice recordings or clinical symptoms are processed by our deterministic System (Model) matching engine, all personally identifiable information (PII) such as your name, phone number, and email are stripped out. The System (Model) only processes the raw clinical indicators.
  • Strict Access Controls: Only authorized Bridge Triage doctors who are directly assigned to your case have temporary access to your identifiable medical records to prepare the hand-off report for the specialist.

4. Your Rights

You have the right to access, modify, or permanently delete your medical records from our servers at any time. If you wish to execute a data deletion request, you can do so directly from your Patient Dashboard or by contacting our Data Protection Officer at [email protected].