Privacy Policy

1. Overview

Consult Thrive ("we", "us", or "our") respects the privacy of our users. This Privacy Policy governs your use of the Consult Thrive mobile application (Package Name: com.consultthrive.app) and related websites, describing how we collect, store, use, share, and protect your personal information.

We are committed to complying with the Google Play Developer Distribution Agreement, Google Play User Data Policies, the Digital Personal Data Protection Act, 2023 (India), and the General Data Protection Regulation (GDPR).

2. Information We Collect

When you register and interact with Consult Thrive, we collect:

• Personal Identifiers: Name, phone number, email address, gender, date of birth, and profile picture.
• Authentication Data: OTP verification tokens, Google OAuth profile identifiers (name, verified email, profile avatar).
• Consultation Records: Appointment timestamps, specialty domain, booked consultant ID, booking status, call duration logs, and consultation transaction receipts.
• Health & Locker Documents: Prescriptions, laboratory reports, medical summaries, legal contracts, or tax files uploaded by you or your consultant to the encrypted document locker.
• Payment Information: Transaction reference IDs, payment method type (UPI, Card, Wallet), and payment status via our PCI-DSS certified payment aggregator (Razorpay). We never store raw credit card numbers, CVVs, or bank PINs.
• Device & Log Data: Device model, OS version, IP address, Firebase Cloud Messaging (FCM) device push token, and app crash logs.

3. Android Device Permissions & Justification

In accordance with Google Play Store transparency requirements, below is a detailed justification of all sensitive runtime permissions requested by com.consultthrive.app:

4. How We Use Your Data

We process your data strictly to provide and improve our services:

• To schedule, confirm, and facilitate 1-on-1 audio/video consultations.
• To send critical push notifications (call reminders, doctor availability, refund status).
• To manage your encrypted Health Locker and store records privately.
• To process transactions, refunds, and maintain Consult Thrive Wallet balances.
• To prevent fraudulent access and maintain platform security.

5. Third-Party Services & SDKs

Our mobile app integrates with industry-standard, secure third-party SDKs:

• Google Firebase Cloud Messaging (FCM): Delivers encrypted push notifications for call reminders and updates.
• Google Identity Services (GSI): Enables secure Google OAuth sign-in.
• Razorpay: RBI-licensed, PCI-DSS Level 1 compliant payment gateway for processing UPI and card payments.
• Backblaze B2 Cloud Storage: Encrypted object storage for Health Locker document files.
• WebRTC Streaming: Peer-to-peer and relayed encrypted media protocols for video consultations.

6. Health & Document Locker Data Protection

Health documents and prescriptions are treated with heightened security. Files in the Health Locker are isolated at the database level by unique User IDs (UUIDv4) and encrypted during transmission (TLS 1.3) and storage (AES-256).

7. Data Security & Storage

We employ state-of-the-art administrative, technical, and physical safeguards to prevent unauthorized access, alteration, or disclosure. All communication between the mobile app and backend APIs occurs over strict HTTPS/SSL encryption.

8. Data Retention & Deletion

We retain your personal data for as long as your account remains active. If you request account deletion, your personal profile, phone number, email, and locker documents are permanently purged from our primary production databases within 30 days, except for statutory tax/invoicing records retained under legal obligations (180 days under Indian IT Rules).

9. User Rights & Account Deletion (Google Play Compliance)

Under applicable privacy laws, you possess the right to:

• Access & Export: Request a copy of all personal records and consultation history.
• Rectification: Update your profile details directly from the app.
• Right to be Forgotten (Account Deletion): You can permanently delete your account and data at any time:
  1. Inside the Mobile App: Navigate to Settings > Profile > Delete Account.
  2. Via Web Form: Visit our dedicated Account Deletion Request Page and submit your registered phone or email.

10. Children's Privacy

Consult Thrive does not knowingly collect personal data from children under 18 years of age without parental consent. If we become aware that a child has provided us with personal information without parental supervision, we immediately delete such records.

11. Data Protection Officer & Grievance Redressal

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer: