Privacy Policy & Terms of Service

Patient records belong to the clinic. A clinic decides what it records about its patients; Hexominds only stores and processes that information to provide the service. Patients who want to see, correct or delete their records should ask their clinic first.

For clinic, doctor and staff accounts, and for people who contact us through the website, Hexominds is responsible for the information.

• Accounts: name, email, role, clinic details, and a password stored only as a one-way hash.
• Patient information entered by clinics: identity and contact details, appointments, vitals, notes, prescriptions, lab reports, bills and consent records.
• Activity and technical records: an audit log of sign-ins and actions on records, plus IP address and browser type, to keep the service secure.

We use it only to run and secure the service, support clinics and meet legal duties. We do not sell personal information, and the signed-in application has no advertising trackers.

WhatsApp. A clinic can connect its own WhatsApp Business number to message its patients. Messages travel through Meta’s WhatsApp platform under Meta’s own terms and privacy policy, and Meta bills the clinic directly. Nothing is sent without the patient’s consent, recorded separately for appointment reminders, follow-ups and marketing; a patient can ask the clinic to stop at any time. Each clinic’s WhatsApp access token is stored encrypted and used only for that clinic.

AI features. Summaries and suggestions are decision support for a clinician to review. They can be wrong, and the treating clinician remains responsible for every clinical decision.

Each clinic sees only its own records, and roles are enforced by the server. Traffic is encrypted, passwords are hashed, repeated wrong passwords lock an account for a while, and actions on patient records are written to an audit log the clinic can read.

We share information outside Hexominds only with providers that help us run the service (such as cloud hosting and database providers), with Meta for WhatsApp a clinic has switched on, or when the law requires it.

A clinic’s information is kept while its account is active. When a clinic stops using DoctorConnect it can ask us to return or delete its data; we keep limited records only where the law requires.

Under applicable law, including India’s Digital Personal Data Protection Act, 2023, you may have the right to access, correct or erase your information, withdraw consent, and complain. Patients: ask your clinic, which holds your records. Clinic and staff accounts and website visitors: write to us (see the last section). Children’s records are entered by the clinic, which is responsible for a parent’s or guardian’s consent where the law requires it.

• Fees are those agreed with Hexominds. Charges from third parties such as Meta are separate.
• Your data stays yours; the DoctorConnect software belongs to Hexominds. We work to keep the service available but cannot promise it will be uninterrupted, so keep copies of anything you cannot afford to lose.
• You can stop at any time. We may suspend access if these terms are broken, if an account puts others at risk, or if agreed fees are unpaid.
• The service is provided “as is”. To the extent the law allows, we are not liable for indirect loss or for clinical decisions, and our total liability is limited to the fees you paid us in the previous twelve months.

We may update this page; the date above shows the latest version, and we will tell clinic administrators about significant changes. Continuing to use DoctorConnect means you accept them. These terms are governed by the laws of India, and the courts of India have jurisdiction, unless a written agreement with Hexominds says otherwise.

Questions or privacy requests: reachus@hexominds.com (put “Privacy” in the subject for privacy requests).