Skip to content
← All policies

Privacy Policy

Last updated: October 2026

How Curabo Health handles your personal and health information for the video-consultation service.

What we collect

Account details (name, email, mobile), booking and payment records, any medical reports you upload, the allergies your doctor records for you, prescriptions issued to you, and technical logs needed to run and secure the service.

How we use it

To provide teleconsultations, process payments and refunds, generate prescriptions, send booking confirmations and reminders, and meet legal and record-keeping obligations. We do not sell your data.

Who can see it

Access is role-based. A doctor sees only their own patients' information for a consultation; a patient sees only their own records; administrators access what is needed to operate the platform. Payments are processed by our payment gateway (Razorpay).

Storage & retention

Data is transmitted over HTTPS and stored with our hosting and database providers, which encrypt data at rest. Prescriptions and consultation records are retained as required for medical record-keeping. Uploaded medical reports are automatically deleted about 30 days after the consultation ends. If you delete your account, your contact details, identity documents, uploaded reports and vault files, the allergy record your doctors keep, reviews, WhatsApp chat history and messages sent through the Curabo Health form are erased at once and family profiles are anonymised; prescriptions, bookings and payment records stay linked to an anonymised account for the legally required period. Security audit logs are kept for up to 24 months and notification history for up to 6 months, then deleted automatically. Messages sent through the Curabo Health form are deleted 12 months after they are closed. Sign-in codes are deleted after 30 days; ended app sessions after 90 days; inactive notification devices and sent medicine reminders after 6 months; finished reminder plans, broadcast delivery lists and video call join times after 12 months; invitations that were never accepted after 24 months; and a WhatsApp chat once its messages are gone (18 months). A record of each consent you gave — or that someone gave for you — is kept as proof for as long as your account exists, and stays linked to the anonymised account after deletion.

Your choices

You can request access to or correction of your information, or ask questions about how it is handled, by contacting Curabo Health. Some data must be retained to meet legal and medical record-keeping requirements. Your Privacy & consents page lists what you — or someone for you — agreed to, and when.

Registered by someone else

A clinic's front desk, a doctor, a Curabo Health partner or our team may register you, or book for you, when you can't do it yourself — they confirm that you (or your parent or guardian) agreed. We then tell you who did it and when on your dashboard — and, when they create your account, also in your notifications and on WhatsApp where available — with links to check or correct your details or delete your account. When you add a family member, you confirm that you are their parent or guardian, or have their permission.

This document is provided for transparency and is being finalised with legal review. For any query, contact Curabo Health.