Privacy Policy

1. Information We Collect

MediGhor collects information you provide directly to us, including:

• Personal information (name, email address, phone number, date of birth)
• Health records and medical documents you choose to upload (prescriptions, lab reports, imaging, doctor notes)
• Health metrics you enter manually (blood pressure, glucose levels, weight, activity data)
• Device information, app usage analytics, and location data (only with your explicit permission)

2. App Permissions We Request

MediGhor requests only the permissions necessary to deliver core features. Here is why each permission is needed:

• Camera & Storage — to photograph and upload prescriptions, lab reports, and medical documents
• Location (optional) — to find nearby doctors and hospitals relevant to you
• Notifications — to send appointment reminders, health tips, and important account alerts
• Internet — to sync your records securely to our encrypted cloud servers
• Background processing — to deliver appointment reminders and health alerts at the right time, even when the app is not in the foreground

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and continuously improve MediGhor services
• Enable AI-powered doctor matching and personalised health recommendations
• Send appointment reminders, account security alerts, and health tips
• Comply with legal and regulatory obligations under the laws of Bangladesh

4. Special Protections for Health Data

Your health records and medical documents are confidential. Access depends on your account permissions and the sharing you authorize, including sharing records with a doctor. Support access is limited to helping you with your agreement, investigating security issues or meeting legal requirements. We do not use your health records to serve advertisements or sell, rent or license them to marketers. The Google data section below separately explains the appointment information used for online consultations.

5. Information Sharing

We do not sell your personal information. We share your information only in the following circumstances:

• With healthcare providers — only when you explicitly share a record using the in-app QR code or share link
• With AI processing providers — when you use AI Symptom Match, the symptoms you describe, along with your age, gender and any medical history you enter, are sent to third-party AI services to generate suggestions. Your name, contact details, uploaded documents and medical records are never sent. Prescription images are read on our own servers and are not sent to any AI company.
• With Firebase (Google LLC) — for push notification delivery and remote configuration, subject to Google's Privacy Policy
• With law enforcement or regulators — only when required by a court order or applicable Bangladesh law
• With our technical service providers — under data-processing terms that limit how they may use your information
• Never sold, rented, shared with marketers, or used for targeted advertising

6. Data Security

MediGhor uses HTTPS for its public services and account and permission checks to restrict access to private records. No digital system is perfectly secure. Keep sign-in codes and account credentials private, protect access to your device and email account, and contact us if you suspect unauthorized access. We investigate reported security incidents and handle any required notifications according to applicable obligations. This policy does not assert an independent security certification or a fixed response deadline.

7. Your Rights & Data Deletion

You can request access to or correction of your personal information, export records where the app provides this option, and withdraw consent for optional processing. Patients, doctors, and chamber users can request deletion of their account and associated data through our shared account-deletion page, even without signing in. Specify which account or service your request covers. Deletion handling and retained data differ by account type: patient account cleanup retains the original email in an audit record, while doctor and chamber records require separate review. There is no single deletion deadline covering every account and record. See the deletion page for the current process and retention limitations, and contact [email protected] for the status and scope of your request.

Account deletion instructions for all MediGhor users

8. AI Features & Limitations

MediGhor's AI doctor-matching feature analyses your stated location, stated symptoms, and specialist preferences to suggest relevant doctors. This process is fully automated — no human reviews your health data during the matching process. Suggestions are based on publicly available doctor profile information only and are strictly informational. They do not constitute a medical opinion, clinical diagnosis, or treatment recommendation. MediGhor does not guarantee the accuracy, suitability, availability, or qualifications of any suggested doctor. Always verify a doctor's credentials independently before making an appointment.

9. Third-Party Services

MediGhor uses third-party services for features such as Google Sign-In, maps, notifications and online consultations. Their own privacy policies also apply to information they process. The section below explains how MediGhor uses Google account information and Google Calendar for the MediGhor Doctor app and doctor web portal.

9A. Google Account, Calendar and Meet Data

Google sign-in

If you choose Google sign-in, we receive your Google account identifier, email address and verification status, name and profile picture when supplied by Google. We use this information to identify you and create or sign you into your MediGhor account. Signing in does not by itself give MediGhor access to your Google Calendar, Gmail messages, Drive files or contacts.

Optional Calendar connection for doctors

Doctors can separately connect Google Calendar from Practices > Online consultations in the MediGhor Doctor app; the doctor web portal shares that connection and provides status and disconnection controls. For new connections, Google asks for permission to view and edit events on calendars you own (calendar.events.owned). This permission is not limited to events created by MediGhor. Our current integration only creates and deletes MediGhor consultation events on your primary calendar; it does not list or read unrelated events. Older connections may retain the previously granted permission for events on calendars you can access until that permission is revoked in your Google Account. Calendar access lets online bookings receive a Google Meet link even when the doctor is not using the app.

For an online booking, we send Google the consultation title, including the attending patient's or family member's name, appointment start and end times, time zone and the booking account's email address when available. Google creates the event and Meet link and sends the patient an invitation. When a booking is cancelled while the Calendar connection is active, MediGhor requests deletion of its associated event. This integration does not attach prescriptions, medical documents or clinical notes to calendar events, and does not request access to Meet recordings or transcripts.

What we store

Our backend stores the Calendar authorization credential (refresh token), granted permissions, connection status and connection/use timestamps associated with the doctor. It uses that credential to obtain short-lived access tokens for appointment operations. We also store the Google event identifier and Meet link with the booking. These records support consultation delivery, cancellation and booking history. Google API requests use HTTPS. The stored credential is not sent to patients or exposed as part of an appointment.

Who receives appointment information

Google processes event details and Meet links to provide Calendar and Meet. The doctor and invited patient receive the appointment information through the service; the invitation may show the doctor's Google account as the organizer. Where SMS notifications are enabled, our SMS provider processes the patient's phone number, doctor name, appointment time and Meet link to deliver the booking message. People with access to the doctor's calendar may also see the event according to that calendar's Google sharing settings. We do not send unrelated calendar events or Calendar authorization credentials to notification recipients.

Disconnecting, revoking access and deletion

To stop MediGhor's Calendar access, select Disconnect in the doctor's Online consultations section. This clears the stored refresh token and marks the connection inactive; new online bookings require reconnection. You can also remove MediGhor's access in your Google Account connections settings. Disconnecting in MediGhor does not itself revoke the permission displayed in Google or automatically remove existing Google Calendar events, invitations, Meet links or MediGhor booking history. Manage existing events in Google Calendar after disconnecting.

Manage MediGhor access in your Google Account

While connected, we retain the credential to support online appointments. Disconnection removes that credential from the active connection record, but connection metadata and booking records, including event identifiers and Meet links, can remain. To request deletion of stored Google-derived data or your doctor account, use our account-deletion page and specify your doctor account and Calendar data. Doctor records require review under the deletion process described in section 7; we do not promise immediate deletion of every record or copy held by Google or invitees.

Account deletion instructions for all MediGhor users

Limited use of Google data

We use Google account and Calendar data only to provide the sign-in and consultation features described here. We do not sell it, use it for advertising or credit decisions, or use it to train general-purpose AI models. Human access is limited to support with your agreement, security investigation or legal requirements. MediGhor's use and transfer of information received from Google APIs must comply with the Google API Services User Data Policy, including its Limited Use requirements.

Google API Services User Data Policy and Limited Use requirements

10. Children's Privacy

MediGhor is designed for users aged 16 and above. We do not knowingly collect personal or health data from children under 16. If you are a parent or guardian and believe your child has registered on MediGhor without your consent, please contact us immediately at [email protected] — we will verify the report and delete the account and all associated data promptly. Users aged 16-17 are encouraged to use MediGhor under parental or guardian supervision.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact our Data Protection contact at:

Email: [email protected]