Privacy notice
Last updated: 29 October 2026 · Draft for legal review
Mathapitha is operated by HEALTHERP TECHNOLOGY SOLUTIONS LLP ("we", "us"), Chennai, India. This notice explains what personal data we collect, why, who we share it with and the choices you have. We follow India's Digital Personal Data Protection Act, 2023 and its Rules.
Who this is for
Parents and elders who are Mathapitha members, their family members (usually adult children, often living abroad), and hospital and partner staff who use the app. Mathapitha is for adults; we don't knowingly collect data about anyone under 18.
What we collect
- Account details: name, mobile number, country code, language preference.
- Parent profile: name, age or date of birth, city and address, emergency details you choose to add (blood group, allergies).
- Health information the parent or their care team adds: medical reports in the Health Passport, report values, medicines and dose records, visit notes, daily check-ins, and voice notes and photos the parent sends to the care team.
- Care activity: service requests (doorstep visits, hospital escort, priority bookings, ambulance), SOS alerts and their location if shared, messages with the care team, care-manager call notes.
- Technical data needed to run the service: sign-in records and basic logs used for security and troubleshooting. We don't use advertising trackers.
Why we use it
To provide care coordination: arranging services, supporting hospital visits, responding to SOS alerts, reminding about medicines, running daily check-ins, and keeping family members informed only as the parent allows. Also to keep the service secure, meet legal obligations, and (once payments are live) to bill memberships.
Your parent owns their health data
A parent decides which family members can see what — visits only, reports, medicines, or everything — and can change or withdraw this at any time in Settings. Paying for a membership does not, by itself, give access to medical details. Hospitals see a parent's blood group and allergies only if the parent switches that on for that hospital; they see reports only through a time-limited share link or QR code the parent creates.
Voice notes and photos
A parent can send their care manager a short voice recording (up to two minutes) or a photo, for example of a swelling, a rash, a meal or a medicine strip, with a few optional words.
- Who can see them: the parent, their care manager, and our care operations team. A family member can play or view them only if the parent has given that person access to reports or to everything. Others in the family see only that a note was sent, its topic and time.
- How they are protected: recordings and photos are stored in a private store in our database in Mumbai. They are never public. Each time someone plays or opens one, the app gets a link that expires after five minutes, and we keep a record of who opened it. Photos are resized on the phone before sending, which also removes the location data phones attach to pictures.
- What we don't do: voice notes and photos are not sent to AI and are not turned into text. They are not shared with hospitals unless the parent shares them.
- Not for emergencies: notes are answered by the care team, not watched in real time. In an emergency, press SOS.
- Keeping and deleting: notes are part of the parent's care record and are kept on the same basis as other care records (see "How long we keep data"). A parent can ask their care manager or our grievance officer to delete a particular note, and all notes are deleted when the parent's data is erased.
Where data is stored
Our database is in Mumbai, India. Some processing — for example sending messages, running our backend functions in the nearest region, and AI help — may happen outside India through the providers listed above, with safeguards in our agreements with them.
AI help
AI help is off unless the parent switches it on. When on, it drafts call notes, reads prescription photos into a medicine list and summarises reports. A person always checks and approves before anything is saved. The AI never receives phone numbers or addresses, never diagnoses, and never suggests medicine changes. The parent can switch AI help off at any time.
How long we keep data
While the membership is active and for a limited period afterwards as required by law or to resolve disputes. When you ask us to delete your data, we delete or anonymise it unless we must keep it by law; we'll tell you if that applies. Voice notes and photos follow the same rules, and are deleted when you ask us to erase your data.
Security
Access to data is restricted by role and by the parent's sharing choices, enforced in our database and tested automatically. Data is encrypted in transit; access is logged.
Your rights
You can ask to access a summary of your data, correct or update it, or erase it; withdraw consent (for example, stop sharing with a family member or switch off AI help); and nominate someone to act for you if you are unable to. Parents can change sharing at any time in Settings. To make a request, use Settings in the app or contact the grievance officer. If you're not satisfied with our response, you may complain to the Data Protection Board of India.
Grievance officer
Niranjan Ramakrishnaniafniru@gmail.comWe aim to acknowledge complaints within 48 hours and resolve them within 30 days.
Changes
We'll update this notice as the service develops and show the date above. Significant changes will be notified in the app.