What data Prvaha collects
Prvaha collects information in three broad categories: Personal information- Full name, email address, and phone number
- Date of birth and gender
- Account credentials (stored in encrypted form)
- Appointment details and scheduling history
- Medical records and prescriptions
- Clinical notes and reports entered by your care team
- IP address and approximate location
- Browser type and device information
- Pages visited and actions performed within the platform
How your data is protected
Prvaha implements industry-standard security controls across the entire platform:- Encryption — Sensitive data is encrypted both in transit (TLS) and at rest, so it cannot be read if intercepted.
- Secure authentication — Sign-in is protected by verified identity checks, including OTP codes and Google OAuth, before access is granted.
- Role-based access control — Each user only sees the data their role permits. A receptionist cannot access clinical notes; a doctor cannot alter billing-level configuration unless granted that permission.
- Regular security audits — Prvaha conducts periodic reviews of its infrastructure and access controls to identify and address vulnerabilities.
Your data rights
Depending on your location, you have the following rights over your personal data held by Prvaha:
To exercise any of these rights, contact Prvaha at hello@prvaha.com or use the in-app options described below.
Requesting data deletion
You can submit a data deletion request by email or, where available, directly through the Prvaha platform.1
Send a deletion request by email
Email support@prvaha.com with the subject line: Data Deletion Request
2
Include your identifying details
In the email body, provide:
- Your full name
- Registered email address
- Phone number (if applicable)
- A brief description of what you would like deleted
3
Identity verification
Prvaha will verify your identity to ensure no one else can delete your data on your behalf. You may be asked to confirm details or respond to a verification message.
4
Processing and confirmation
Your request will be processed within 7–30 days. Once complete, you will receive a confirmation email. Note that deletion is permanent and irreversible — you will lose access to your account and all associated data.
Medical records may be retained for longer than other personal data, as required by applicable healthcare regulations. This data will be securely stored and will not be used for any purpose other than legal compliance. See the section below for details.
Data that may be retained
Even after a successful deletion request, certain categories of data may be kept where required by law or for legitimate operational purposes:- Medical records — Healthcare regulations may require Prvaha or your clinic to retain patient records for a defined period after a deletion request is submitted.
- Legal and compliance data — Records needed to resolve disputes, respond to regulatory inquiries, or satisfy audit requirements.
- Security logs — Access and activity logs used to detect fraud and investigate security incidents.
Compliance
Prvaha is designed to comply with applicable data protection frameworks, including:- Indian IT Act and its associated rules governing the handling of sensitive personal data
- General Data Protection Regulation (GDPR), where applicable to users in the European Economic Area
For the full details of how Prvaha handles your information, read the official policy documents: If you have any questions not answered here, reach out to the Prvaha team at hello@prvaha.com.