Privacy Policy
Your privacy matters to us. This Privacy Policy explains what data dawaStation collects, how it is used, and your rights regarding that data. By using dawaStation, you consent to the practices described in this policy.
1. Data We Collect
When you use dawaStation, we may collect the following information:
- Mobile number — used for OTP-based authentication
- Email address — used to send OTP for patient login (optional for supply-side users)
- Location (GPS or IP-based) — used to show nearby pharmacies and relevant search results
- Full name — used to personalise your account
- Selfie / photo — collected only for pharmacy verification by admin, not stored beyond the verification process
- Medicine search queries — anonymously logged to improve search relevance and platform features
2. How We Use Your Data
- OTP verification: your mobile number and email are used solely for identity authentication
- Search results: your location is used to calculate distance to pharmacies and sort results
- Pharmacy verification: selfies and photos are reviewed manually by dawaStation administrators and are never shown publicly
- Platform improvement: anonymised usage data (page views, search terms, session data) helps us improve features and performance
3. What We Do Not Do
- We do not sell your personal data to third parties — ever
- We do not use your data for advertising, retargeting, or profiling
- We do not share your mobile number or email with pharmacies, doctors, or hospitals
- We do not store payment information (no payments are currently processed)
4. Data Storage & Security
Your data is stored on Supabase, a secure cloud database platform. Supabase infrastructure is compliant with global data protection standards. Data may be stored on servers located in India and/or internationally compliant regions. We implement industry-standard encryption for data in transit and at rest.
5. Cookies & Analytics
dawaStation uses Google Analytics 4 (GA4) for anonymous usage analytics. GA4 collects aggregated data such as page views, session duration, device type, and approximate geographic region. This data does not identify you personally and is not linked to your account.
You can opt out of GA4 tracking via your browser settings or by installing the Google Analytics Opt-out Browser Add-on.
6. Third-Party Services
- Supabase — database and authentication infrastructure
- Resend — email delivery for OTPs
- Google Analytics 4 — anonymised usage analytics
- OpenStreetMap / Leaflet — map tiles for location display (no personal data sent)
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent to data processing (this may affect your ability to use the platform)
8. Account Deletion
You may request deletion of your account and all associated personal data at any time by emailing pravinrnair@nairs.org with the subject line "Account Deletion Request." We will process your request within 7 business days and confirm once complete.
9. Children's Privacy
dawaStation is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify users of material changes via the platform. The "Last updated" date at the top of this page indicates the most recent revision.
11. Contact Us
For privacy-related queries or to exercise your rights, please contact:
N.A.I.R. Solutions, Bhilai, Chhattisgarh 490020 · pravinrnair@nairs.org · +91 98275 63406