The short version: we use the minimum account, booking, queue, optional location, notification, feedback and payment metadata needed to run QDoctor. We do not ask for clinical information such as symptoms, diagnoses, prescriptions, test results or medical history. We do not sell app records or use account, booking or queue data for advertising. On the public app-download page only, optional Meta advertising cookies may be used after you agree; you can reject them and still use QDoctor.
1. Who we are
QDoctor ("we", "us", "the service") is queue-management and scheduling software for in-person visits to doctors who hold hours at neighbourhood pharmacies in India. QDoctor is operated by Aero Knowledge Solutions Pvt Ltd (India), which acts as the Data Fiduciary (India) and Data Controller (EU) for the personal data described here. QDoctor is not a medical, telemedicine or health-records service — see What QDoctor is.
2. What we collect — and what we don't
We practise data minimisation: we ask for the least we need to run a queue.
Patients
- Account and contact details — such as your name, mobile number, email address when you provide one, and authentication identifiers, so you can sign in and the chamber can identify or contact you about your turn.
- Booking and queue activity — the pharmacy/clinic, doctor, date, sitting, serial, live-queue status, arrival/presence, delay, cancellation, completion and related timestamps needed to provide and improve ETA and queue operations. A booking identifies the provider visited and may therefore reveal a healthcare association even though QDoctor does not collect clinical details.
- Location when you choose to provide it — precise or approximate device location for nearby results, distance, travel guidance or on-site presence features. Location permission can be denied; features that require it may then be unavailable. If you tap a ride option on the Assistant screen, the clinic’s location and, where recent and available, your own approximate pickup are passed to the ride app you chose — see “Ride handoff” below.
- Feedback and content you provide — doctor, pharmacy/facility and service ratings or review responses you submit after a visit, plus profile or support content you choose to upload.
- Device, notification and security signals — push tokens, app/platform details, a pseudonymous device identifier, login/security events, IP-derived safety signals and basic usage/error events needed for notifications, trusted-device protection, fraud prevention and reliability. When a search is recorded for product improvement, QDoctor stores the resolved search category rather than the raw words you typed.
- Public-website analytics — QDoctor's public website uses Google Analytics 4 to measure page views and understand how the public pages are used. Google may process an analytics identifier, browser/device information, referring page and IP-derived approximate location. We configure Google signals and advertising personalisation off and do not intentionally send Google Analytics your name, mobile number, account, booking, serial or clinical information. The QDoctor mobile app does not embed Google Analytics.
- Optional public-page advertising — only on our public app-download page, and only after you agree to optional advertising cookies, Meta Pixel may send Meta a page-view signal, the public page address and referrer, IP address, browser/device information and cookie or ad identifiers such as a browser identifier or ad-click ID. This helps measure QDoctor ads and show relevant QDoctor ads again on Meta services. The pixel is blocked outside that download page. We do not intentionally send account or contact details, a booked doctor or pharmacy, booking, serial, live-queue, payment or clinical information to Meta. You can reject this purpose without affecting downloads or app use.
- Payment references where applicable — order, payment, refund, entitlement and subscription identifiers for a paid booking service or premium feature. QDoctor does not receive full card, bank-account, UPI PIN or store-account credentials.
Doctors and pharmacies
- Doctor profile details (including name, speciality, qualifications, experience, photo, chambers and schedules) and a phone and registration/licence number for verification. Confidential identifiers are access-restricted; only appropriate verification or masked information is displayed publicly.
- Pharmacy/clinic details, contact information, address and location, visiting-doctor schedules, staff relationships, floor/department assignments and operational queue events.
- Doctor Pro or Clinic Pro plan, entitlement, order and transaction identifiers needed to activate, renew, upgrade, restore, cancel or support the plan. QDoctor does not receive full card, bank-account, UPI PIN or mobile-store credentials.
- Optional subscription purchase history — as of 10 October 2026, production checkout for Doctor Pro and Clinic Pro is disabled. The app includes RevenueCat integration for possible future subscriptions. If an in-app subscription becomes available and you use it, RevenueCat processes transaction and subscription information linked to your QDoctor account to validate purchases, manage access and support renewals or refunds. Its subscription dashboards also use that information for analytics, such as purchase and renewal trends. QDoctor does not use it for advertising or cross-app tracking.
QDoctor does not ask for or provide fields for symptoms, diagnoses, prescriptions, lab results, medical notes or medical history. Clinical information should remain between the patient and doctor; users should not enter it in names, reviews, support messages or other free-text fields.
3. Why we use it (purpose & lawful basis)
- To run the queue — create and track your serial, show live position, and let the pharmacy manage the counter. Lawful basis: performance of the service you requested / your consent.
- To provide optional nearby, presence and notification features — only when you enable or use the relevant device permission or feature. Lawful basis: your request / consent.
- To verify doctors — so the serial you book is with a real person at a real chamber. Lawful basis: legitimate interest in preventing fraud and impersonation.
- To process purchases and entitlements — create an order, confirm payment, activate a paid feature, restore access and handle refunds or disputes. Lawful basis: performance of the purchase contract and legal/accounting obligations.
- To understand optional subscriptions — review purchase, renewal and cancellation trends in RevenueCat's subscription dashboards so we can operate and improve paid features when they are available. This is not advertising or cross-app tracking.
- To understand use of our public website — measure page views and general audience patterns so we can maintain and improve our public information. We do not use this information for personalised advertising.
- To measure optional advertising on the public download page — with your consent, measure QDoctor ads and show relevant QDoctor ads again using the limited public-page signals described above. This is separate from Google Analytics and from account, booking and queue operations.
- To keep the service secure and reliable — abuse prevention, debugging, uptime. Lawful basis: legitimate interest.
We do not use account, booking, queue, optional location, payment or clinical records for advertising. Optional advertising on the public download page is limited to the separate consent-based purpose described above. We do not make automated decisions that produce legal effects.
4. Who can see your data
- The pharmacy / doctor you booked with — sees your name, mobile and serial, for that visit only.
- Our service providers — depending on the platform and feature, we use Supabase (database and authentication), Cloudflare (hosting, CDN and DNS), Expo, Apple and Google (app distribution, device notifications, store purchases and Google Analytics 4 on public website pages), RevenueCat (subscription entitlement validation and analytics) and Razorpay (eligible web/Android payment processing). They process only the data needed to provide their respective service under their own terms and privacy commitments.
- A ride app, only when you tap to use it — the Assistant screen can open Uber with your journey pre-filled. Nothing is sent unless you tap it. The link carries the clinic’s name, address and map coordinates and, where a recent one is available, your own approximate pickup coordinates. It does not carry your name, mobile number, booking or serial, the doctor, or any health information. Uber then handles the ride under its own terms and privacy policy as an independent controller, not as a processor acting for us, and QDoctor receives no fare, trip, driver or payment data back. We record only that the handoff was requested — never the locations themselves. You review the pickup and destination in Uber before booking anything, and you can ignore the option entirely.
- Meta, only with optional advertising consent — on the public app-download page, Meta receives the limited public-page signals described above to measure QDoctor ads and show relevant QDoctor ads again. Meta processes information under its own Privacy Policy and Cookies Policy. We do not send app account, booking, queue, payment or clinical records for this purpose.
- App records are not an advertising audience. We do not sell, rent or trade account, booking, queue or clinical records. Optional public-page advertising is described separately above.
5. Where your data lives & transfers
Data is stored with our processors' cloud infrastructure and may be processed in data centres outside your country. Where personal data of EU/EEA users is transferred, we rely on appropriate safeguards (such as our processors' Standard Contractual Clauses). We take reasonable steps consistent with the DPDP Act and GDPR for such transfers.
6. How long we keep it
We keep active account and operational data while needed to provide QDoctor. Once a deletion request passes booking and payment checks, the account enters a 15-day recovery period; finalisation follows that period and the remaining safety checks. Active sign-in and profile access are removed when deletion completes. Booking, payment and past-visit records remain as restricted evidence for at least four years. An identity link is retained where needed to verify a past visit or resolve a dispute, but is not shown in ordinary app views. Doctor and clinic professional records, including names, certificates, selfies and photos, remain as restricted evidence for at least four years, or longer where law requires. Other security, tax, payment and dispute records may be retained longer where reasonably necessary or legally required. Backup copies expire through the applicable backup lifecycle. See our account-deletion page for the request process, or contact us below.
7. How we protect it
- All traffic is encrypted in transit (HTTPS/TLS), with HSTS and DNSSEC on our domain.
- Database access is governed by row-level security so users can only reach their own data; sensitive tables (verification codes, contact numbers) are not readable through the public interface.
- Doctor phone and licence numbers are access-restricted and shown publicly only as a masked fingerprint.
- Administrative functions are restricted to authenticated administrators.
8. Your rights
Under the DPDP Act 2023 (India) and the GDPR (EU/EEA), you can:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Withdraw consent at any time, and object to or restrict certain processing.
- Data portability — receive your data in a usable format (GDPR).
- Nominate another person to exercise your rights in the event of death or incapacity (DPDP).
- Complain — to the Data Protection Board of India, or your EU supervisory authority.
To exercise any right, contact us using the details below. We respond within the timelines required by law.
9. Children
QDoctor is intended for adults booking on their own behalf or for family members. Where a child's details are used to book a visit, that is done by a parent or guardian who is responsible for the child's information.
10. Cookies
QDoctor uses essential device or browser storage to keep you signed in, remember security and privacy choices, and make the service work. On public website pages, Google Analytics 4 may use analytics cookies or similar identifiers to distinguish visits and measure page use. These are analytics tools, not advertising cookies: Google signals and advertising personalisation are disabled in our configuration, and we do not use the information to show personalised ads. You can block or clear analytics cookies using your browser controls; essential sign-in and security storage may still be required for account features.
Optional Meta cookies on the public download page: the Meta Pixel stays blocked until you accept the optional advertising purpose. The consent preference is stored in a first-party consent cookie. Meta may then use browser/ad identifiers for ad measurement and relevant QDoctor advertising; its cookie and privacy policies describe its processing and retention. Use Cookie choices on the app-download page to change or withdraw your choice. Withdrawing stops future pixel loading and reloads that public page to stop the active browser pixel; it does not undo information Meta already received. You can also block or clear cookies in your browser. Rejecting or withdrawing does not affect downloading or using QDoctor.
11. Changes to this policy
We may update this policy as the service evolves. Material changes will be reflected here with a new effective date.
12. Contact & grievances
For any privacy question, request, or grievance, contact our Grievance Officer / Data Protection contact at support@qdoctor.in, or write to Aero Knowledge Solutions Private Limited at its registered office: C/O Dinesh Biswas, Vill Gaurishali, PO Gangsara Nadia, Kolkata, Nadia, West Bengal 741238, India. QDoctor's contact office is at Star Mall, Sisir Kujna, Madhyamgram, Kolkata 700129, West Bengal, India. We aim to acknowledge requests promptly and resolve them within statutory timelines.
Frequently asked
What does QDoctor share with Uber?
Only if you tap the ride option yourself. The link opens Uber with the clinic’s name, address and coordinates and, where a recent one is available, your approximate pickup — no name, mobile number, booking, serial, doctor or health information. Uber then applies its own privacy policy, and no fare, trip or payment data comes back to QDoctor. QDoctor does not book or pay for the ride.
What personal data does QDoctor actually collect?
We use account/contact details, booking and queue events, optional location when you choose nearby or presence features, notification/device identifiers, feedback, and payment or subscription references where applicable. We do not ask for symptoms, diagnoses, prescriptions, test results or medical history.
Do you sell my data or show me ads?
We do not sell app records or use account, booking or queue information for advertising. Our public website uses Google Analytics 4 for limited audience measurement, with Google signals and advertising personalisation disabled. Separately, only after optional consent on the public app-download page, Meta Pixel may measure QDoctor ads and help show relevant QDoctor ads again. You can reject or withdraw that choice using Cookie choices on the download page. The QDoctor mobile app does not embed Google Analytics.
How do I access, correct or delete my data?
Write to support@qdoctor.in. Under India's DPDP Act 2023 and the EU GDPR you can access, correct, erase or port your data and withdraw consent, and we respond within the timelines the law requires.
Is my data safe?
Yes. Traffic is encrypted in transit (HTTPS/TLS) with HSTS and DNSSEC, database access is governed by row-level security so users only reach their own data, and sensitive fields like doctor phone and licence numbers are access-restricted and shown only as a masked fingerprint.
Who processes my data on QDoctor's behalf?
Depending on the feature and platform, QDoctor uses Supabase, Cloudflare, Apple, Google, Expo, RevenueCat and Razorpay for infrastructure, authentication, notifications, public-website analytics, store subscriptions and payments. They receive only what is needed for their service. Separately, with optional consent on the public app-download page, Meta receives limited public-page signals for advertising measurement and relevant QDoctor advertising.
Does QDoctor follow GDPR as well as Indian law?
Yes. The policy is built to both India's DPDP Act 2023 and the EU GDPR — data minimisation, purpose limitation, clear consent, and your full rights of access, correction, erasure and portability.
This policy is provided for transparency and reflects our current practices; it is not legal advice. Read alongside our Transparency page and What QDoctor is.