Consent notice

What this notice is

The Digital Personal Data Protection Act, 2023 asks that, before we process your personal data on the basis of consent, we tell you plainly what we will process and why. This is that notice. You see it when you create your CuraVis account, and consenting is your choice. It sits alongside the fuller privacy notice.

Who is asking

The Data Fiduciary is Qbler Technolabs Private Limited, operating CuraVis. You can reach our Grievance Officer, Anshad Ali, at grievance@curavis.io for anything about your data.

What we ask to process

We ask for your consent to process, for these purposes only:

• Your name and practice details, to create and run your account and personalise the app.
• Your mobile number, to sign you in with a one-time code sent to your phone, and to reach you about your account.
• An assistant's name and number, if you choose to add one, to give them their limited access.
• Limited technical and log data, to keep the service secure, diagnose faults, prevent automated misuse of the web app, and meet our legal obligations.
• A notification token for your device, if you turn on notifications, to deliver them to you; you can turn them off at any time.

We do not use this data for advertising, we do not sell it, and we do not use it to train machine learning models.

Your patients' records

The records you enter about your patients are different. For those, you are the Data Fiduciary and CuraVis acts as your processor: we hold them and sync them automatically across your devices so the service works. Obtaining your patients' own consent, where it is needed, is your responsibility as their practitioner.

Who else is involved

To deliver the service, your data is processed by a small number of service providers on our instructions and under contract: for secure cloud hosting and storage in the Asia-Pacific region, for sending your one-time sign-in codes, for delivering notifications to your device, and, for the web app, for an abuse-prevention check that tells real people from automated misuse. The notification and abuse-prevention providers may process limited technical data outside India. They may use the data only for these purposes.

Withdrawing consent

You can withdraw your consent at any time, as easily as you gave it, from within the app or by writing to privacy@curavis.io. Withdrawing consent stops further processing for the purpose you withdrew, though it does not undo processing already carried out lawfully. Because consent is needed to run your account, withdrawing it may mean you can no longer use CuraVis, and we will then handle your data as set out in the privacy notice, including the retention periods that apply to medical records.

Your rights

As a Data Principal you can ask for access to your data, ask us to correct or erase it, withdraw consent, and nominate another person to act for you. The privacy notice explains each right and how to use it.

Contact and complaints

For anything about your consent or your data, write to privacy@curavis.io. If we cannot resolve your concern, you have the right to complain to the Data Protection Board of India.