Privacy policy

Who holds your information

ChikitsaLink is used by private medical practices in Bangladesh to manage patient records, appointments, video consultations and payments.

If you are a patient, your medical record belongs to the practice you booked with. That practice decides what is recorded and who among their staff can see it. ChikitsaLink operates the platform on their behalf.

If you are a doctor or a member of practice staff, your practice’s data is scoped to your practice and is not visible to any other practice on the platform.

What is collected

• Account information — your name and the email address of the Google account you sign in with. ChikitsaLink uses Google sign-in only and never receives or stores a password.
• Patient information — details entered when booking or during a consultation: contact details, medical history, complaints, allergies, vitals, diagnoses, prescriptions and uploaded documents.
• Appointment information — bookings, their status over time, and when a consultation was joined and left.
• Consultation notes — where transcription is used, the text of a video consultation is stored with the appointment. Consultations are not recorded as audio or video.
• Payment information — the amount, status and reference of a payment. Card and mobile wallet details are handled by the payment provider and never stored by ChikitsaLink.
• Delivery records — a log of each notification sent, on which channel, and whether it was delivered.
• Device identifiers — where you use the Android app, an identifier used to deliver notifications to your device.

How it is used

To operate the service: to show a practice its patients and appointments, to generate and deliver prescriptions, to run video consultations, to take payments and pay them out, and to send the notifications a booking depends on.

ChikitsaLink does not sell personal information, and does not use medical information for advertising.

Who it is shared with

• The practice you booked with, and its staff, to the extent their role allows.
• Service providers used to operate the platform: cloud hosting and database, video infrastructure, the payment provider, and email, WhatsApp, SMS and notification delivery providers.
• ChikitsaLink staff, where access is needed to operate or support the platform.
• Where required by law.

How it is protected

Access is restricted so that each practice can reach only its own records, and this is enforced where the data is stored rather than only in the app. Patient reports and prescriptions are kept as private files and opened only briefly, for the person entitled to see them — they are never available at a public address.

Administrative actions are recorded. Our security page describes these protections, and their limits, in more detail.

Your choices

• You can see your own record, appointments, prescriptions and files in the patient portal.
• Some parts of a patient profile lock after they are set, to keep the clinical record reliable. Corrections are made by the practice.
• To ask for a copy of your information, or for it to be corrected or deleted, contact the practice you booked with. If you cannot reach them, contact us and we will help.

Changes

When this policy changes materially, the date above changes and the current version replaces this one on this page.