Legal & Policies

Privacy Policy

Last Updated: April 24, 2026

Thanks for choosing MediMinutes Healthcare Private Limited ("MediMinutes", "Service", "we", "us", "our"). We are pleased to make our Service available to you, the Customer ("you", "User", "Customer"). MediMinutes includes the MediMinutes mobile application, the MediMinutes pharmacy dashboard, the website, features, and other associated services.

MediMinutes operates a technology platform that connects customers with licensed retail pharmacies for the purchase and delivery of pharmaceutical products as prescribed by licensed medical professionals/doctors, and other eligible non-prescription products. MediMinutes also provides an AI-enabled conversational interface ("MediMinutes AI") for customer knowledge, medicine discovery, and ordering assistance. For orders comprising eligible non-prescription items, MediMinutes AI may assist in item selection, cart creation, and order-flow generation prior to payment. Where prescription medicines are included in the cart, the customer shall be required to upload a valid prescription, and such orders shall remain subject to review, verification, and processing through licensed pharmacists and authorised medical professionals, as applicable.

If you install, use, or access MediMinutes or any of its features, you have read and accepted the terms of this Policy. You have also accepted the MediMinutes Terms and Conditions, and other terms available on the MediMinutes App and Website. By using MediMinutes, you are entering into a binding contract(s) with MediMinutes Healthcare Private Limited. If you don't agree with and accept the above, please do not use, install, or access MediMinutes.

Your access to MediMinutes' Services confirms that you have the capacity to enter into a legally binding contract. You agree that you are above 18 years of age, and if you are below 18 years of age, you agree that you are being represented by a legal guardian who has the capacity to enter into a legally binding agreement.

This Privacy Policy is made in accordance with the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 ("SPDI Rules"), the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"), as applicable.

Consent

If you are availing our Services, you are consenting electronically or physically and you represent that your consent is free and informed.

If you are below the age of 18 or seriously ill or mentally incapacitated, your parent, guardian, or nominee is giving consent on your behalf.

We shall ensure that:

• Collection and use of personal data is done only to the extent necessary for the purposes of processing;
• Processing of all personal data will be done in a fair and reasonable manner, ensuring your privacy;
• No personal data shall be transferred without your consent;
• Personal data collected will not be retained beyond the period necessary to satisfy the purpose for which it is collected.

Information We Collect

Information collected with your knowledge

We require you to create an account on our Application to access our services. We collect the following information:

• Account Information: Your name, phone number, and email address.
• Sensitive Personal Data ("SPD"): Age, gender, health status, details of medical records, prescriptions, the identity of your licensed medical professional/doctor, diagnostic results, and other relevant health information.
• Payment Information: Payment details processed securely through Razorpay, our payment gateway provider. We do not directly store your card numbers or bank account details on our servers.
• Delivery Information: Your delivery address and location to facilitate product delivery.
• Prescription Images: Scanned copies or photographs of prescriptions uploaded through the App for verification by our partner pharmacists.
• Customer Support Data: Information related to your use of MediMinutes, including messages sent through our in-app chat support system.
• MediMinutes AI Chat: Where MediMinutes makes available an AI chatbot or conversational interface, we collect and store prompts, queries, responses, uploads, feedback, timestamps, item discovery history, cart creation or modification logs, customer confirmations, and related interaction history.

Information collected automatically

• Device Information: Device identifiers, operating system, OS version, device make, IP address, network provider.
• Location: We may collect your device location if you grant permission, to assist with delivery and connecting you with nearby pharmacies.
• Usage and Log Information: Service-related, diagnostic, and performance information.
• Camera and Gallery Access: We may access your device's camera and photo gallery for prescription uploads and invoice scanning.
• Push Notification Tokens: Firebase Cloud Messaging tokens to deliver order updates, reminders, and promotional notifications.

Collection and Use of Phone Number

• Login Authentication: OTP-based login verification via Firebase Authentication.
• Order Delivery: Communication between you and delivery personnel.
• Order Updates: Order status updates, delivery notifications, and payment confirmations.
• Customer Support: Contact regarding order queries, prescription verification, or service issues.
• Marketing Communications: With your consent, promotional offers, health tips, and medicine reminders. You can opt out at any time.

How We Use Information

• Provide Services: Process orders, deliver medicines, verify prescriptions, and provide customer support.
• Personalise Experience: Improve search results, recommend medicines, and customise the AI chat experience.
• Medicine Reminders: Send reminders for medicine refills based on your purchase patterns.
• Safety and Security: Verify accounts, detect fraudulent activity, prevent abuse.
• Improve Services: Analyse usage patterns, fix bugs, improve app performance.
• AI Improvement: Review AI chatbot interactions for service quality and improving medicine search accuracy.
• Pharmacy Dashboard: Share relevant order information with partner pharmacies for order processing.

How We Share Information

• Partner Pharmacies: Your name, delivery address, phone number, prescription details, and order information.
• Delivery Partners: Your name, phone number, and delivery address.
• Payment Processors: Order amount and transaction details with Razorpay.
• AI Service Providers: Anonymised or pseudonymised interaction data.
• Legal Compliance: With law enforcement when required by law.

We shall not sell your personal information to third parties for their marketing purposes.

Data Security

• All data transmitted between the App and our servers is encrypted using HTTPS/TLS.
• Prescription images are stored in Firebase Storage with user-isolated access controls.
• API endpoints are protected with Firebase ID token authentication and IP-based rate limiting.
• The pharmacy dashboard enforces role-based access control.
• Brute-force protection limits failed login attempts with account lockout mechanisms.
• Input sanitisation prevents cross-site scripting (XSS) and injection attacks.

Data Retention

We retain your data in accordance with the IT Act, SPDI Rules, and DPDP Act. Order history, prescription records, and transaction logs may be retained for up to 7 years for regulatory and tax compliance purposes.

Your Rights

• The right to access and confirm your personal data
• The right to correction and erasure of your data
• The right to restrict or object to data processing
• The right to data portability
• The right to withdraw your consent at any time
• The right to lodge a grievance with our Grievance Officer
• The right to request deletion of your account and associated data

Managing Your Information

MediMinutes allows you to view, modify, and delete your information through the App settings. You may request account deletion by contacting us at support@mediminutes.com.

Children's Privacy

MediMinutes is not intended for use by children under 18 without parental or guardian consent.

Grievance Officer

Name: Sakshi Manchanda
Email: support@mediminutes.com
Response Time: Within 72 hours of receiving a complaint

Contact Us

Email: support@mediminutes.com
Entity: MediMinutes Healthcare Private Limited
CIN: U47721UP2026PTC243829
Registered Office Address: 42, Nandan Van Colony, Nanital Road Izzatnagar, Bareilly, Uttar Pradesh, India, 243001

Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts at New Delhi, India.