DB Care

Privacy Policy

Last updated 13 October 2026

DB Care is a patient app for hospitals that use the DB-HMS hospital software. It lets you take a token, follow the queue, and see the prescriptions, reports and bills your hospital already gives you. This policy explains what the app collects, why, who it is shared with, and the choices you have.

1. Who is responsible

Your medical records are created and kept by the hospital that treats you. That hospital is responsible for them. The app shows them to you; it does not keep its own copy of your medical records.

Your app account (your mobile number, the phones you sign in on, and which hospitals you allow) is kept by the operator of the DB-HMS platform on behalf of the hospitals.

2. What we collect

• Your mobile number, to sign you in with a one-time code and to find the records hospitals hold under that number.
• Sign-in details: the name and type of each phone you sign in on, and when it was last used, so you can see and sign out any phone.
• Your permissions: which hospitals you have allowed to show records in the app, and when.
• A notification address for your phone, so we can tell you when your turn is near or a report is ready.
• What you enter when booking: name, age, gender, the problem you describe, and a UPI payment reference if you pay online. This goes to the hospital you book with, as it would on the hospital’s own form.
• Your travel time to the hospital, if you ask to be told when to leave home. It is kept for a day and a half.

The app does not ask for your location, contacts, photos or files. The microphone is used only while you hold the “speak” button. The camera is used only to scan a hospital’s QR code.

3. What stays only on your phone

Medicine reminders are set by your phone itself. The doses you mark as taken, your emergency card (blood group, allergies, emergency contact) and your language choice are stored only on your phone and are removed when you uninstall the app.

4. Who it is shared with

• Your hospitals - only the ones you have allowed. A hospital never sees another hospital’s records through the app.
• SMS provider (MSG91) - your mobile number and the one-time code, to send the code.
• Notification service (Expo push service and Google Firebase Cloud Messaging) - your phone’s notification address and the alert text. Alerts never name an illness or a result; they say only that something is ready.
• AI services, only when your hospital has switched these on and only when you use them: a voice recording when you hold the speak button (to turn it into text), and the text of a prescription or report when you tap “Explain in simple words”. Your name, phone number and hospital ID are not sent with it. The answer only restates your record and is not medical advice.

We do not sell your data, and we do not use it for advertising.

5. How it is protected

• All traffic is encrypted (HTTPS).
• Sign-in codes are stored only as a one-way hash, expire in 5 minutes and allow 5 tries.
• The app can be locked with your fingerprint or screen lock. Report screens block screenshots.
• Each record is read inside the hospital’s own access controls, and only for records under your own mobile number.
• A sign-in that is copied and used twice is cut off.

6. How long it is kept

• Sign-in codes: 2 days.
• Alert history (to avoid sending the same alert twice): 30 days.
• Signed-out or expired phone sessions: 90 days.
• Your app account: until you delete it.
• Your medical records: by your hospital, under the law that applies to it.

7. Your choices and rights

• Switch any hospital off in Account → Hospitals and permissions; its records disappear from the app at once.
• See every signed-in phone and sign any or all of them out.
• Download a copy of everything the app shows (Account → Download my data).
• Delete your app account (Account → Delete my app account). This signs out every phone and withdraws every permission. To ask a hospital to correct or erase its own records, contact that hospital; it handles such requests under the Digital Personal Data Protection Act, 2023.

8. Children

A parent or guardian can book for and see the records of children registered under their own mobile number. Children should not create their own account.

9. Changes and contact

We will update this page when the app changes what it collects, and show the new date at the top. For questions about the app, write to the contact given on the app’s Play Store page. For questions about your records, contact your hospital.