Privacy Policy

myVelCare is a mobile app made by Vallixo Technologies LLP (“Vallixo”, “we”), Pune, India. For the information you put into myVelCare we are the data fiduciary under India’s Digital Personal Data Protection Act, 2023: we decide why and how it is used, and we are responsible for it.

This policy covers the myVelCare Android app and this website. Contact: info@vallixo.com.

Your account: name, mobile number, password (stored only as a one-way hash, never readable), and, if you add them, email, gender, date of birth, a short bio and a profile photo.

Family members you add: their name, relation to you, and optionally date of birth and gender. You add them and manage their medicines; please only add people who are happy for you to do so (for children, you as their parent or guardian).

Health information you enter: medicines (name, strength, dose, schedule, before/after food, notes, colour), your meal times, when doses were taken or skipped, and health conditions you choose to add (with status, since when, and whether the community can see them). This is sensitive information and we treat it that way.

Community content: posts, photos, comments, reactions, the groups you join, people you follow, and reports you make. Photos are re-encoded on upload and all hidden metadata (including location) is removed.

Technical information: device model and Android version at sign-in, app version, IP address (for security), which screens are opened and how often (never what you typed), and error reports when the app crashes. We do not use advertising IDs, and we do not collect your contacts, location, or SMS.

• To run the app: sign you in, keep your medicines and family profiles, plan reminder times, and show your day and week.
• To run the community: show your posts and profile to other members as you choose, and keep the community safe (reports, moderation).
• To keep accounts secure: detect misuse, sign out stolen sessions, and investigate problems.
• To improve myVelCare: count how features are used (for example how many people open Today), without looking at your health entries.
• To contact you about your account, for example if you ask us for help.

We use your information only with your consent, which you give when you create an account and when you choose to share something, and you can withdraw it at any time by deleting your account. We never sell your data, never show ads, and never use your health information to target anyone.

• Only you (and Vallixo staff, see below): your medicines, dose history, family members, meal times, mobile number, email, date of birth and gender.
• Health conditions: private by default. If you switch a condition to “Shown in community”, other members can see it on your community profile and you may be suggested to people with the same condition.
• Community members: your name, photo, bio, posts, comments, reactions, groups and followers. When you post anonymously in a group, others see “A member of [group]” instead of your name and photo.
• Vallixo staff: a small number of authorised staff can see account details and usage to help you and to keep the service safe. Every staff sign-in needs 2-step login and every action is recorded.

We do not share your information with clinics, doctors, insurers, employers or advertisers.

We use these service providers to run myVelCare, under contracts that let them use the data only to provide their service to us:

• Neon (database), hosted in Singapore.
• Railway (application servers) and Cloudflare (photo storage), which may process data in the United States and other countries.
• Vercel (this website).

We may disclose information if Indian law requires it (for example a valid order from a court or government authority), or to protect someone from serious harm.

In future, myVelCare may let you link your account to a clinic that uses our EMRDoctor software, to receive your prescriptions. That will only ever happen when you ask for it, and we will ask for your consent again at that time.

• Everything between the app and our servers is encrypted twice: HTTPS, plus a second layer of encryption with keys only your phone and our server share.
• On your phone, your sign-in and saved reminders are stored encrypted with a key held by Android’s secure keystore.
• Passwords are stored only as one-way hashes. Photos are kept in private storage and shown through short-lived links.
• Staff access needs 2-step login, is limited to what each role needs, and is recorded in an audit log.

We keep your information while your account is open.

Delete your account any time in the app (Me → Delete account), or see how to delete your account. When you do, we delete your account, family members, medicines, dose history, conditions, posts, comments, reactions, follows and photos. Backups that contain them are overwritten within 30 days.

We keep a short security record (that an account was deleted, when, and what kind of actions it took, without your health entries) and technical error logs only as long as needed to keep the service secure, and longer only where the law requires it (for example content removed after a legal complaint).

Under Indian law you can:

• see and correct your information (most of it directly in the app, under Me and Health);
• ask for a summary of the information we hold about you;
• withdraw consent and have your information deleted (delete your account);
• nominate someone to exercise these rights if you die or cannot act;
• complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.

To use any of these, write to info@vallixo.com from your registered email, or tell us your registered mobile number so we can verify it is you.

You must be 18 or older to create a myVelCare account and to use the community. Children can only appear as family members added by a parent or guardian, for medicine reminders. We do not knowingly allow children to use the community, and we do not track or profile children.

Grievance Officer, Vallixo Technologies LLP, Pune, India. Email: info@vallixo.com.

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

If we change this policy in a way that matters, we will tell you in the app before the change applies. The date at the top always shows the latest version.