Security
How we guard your records.
A homeopathy practice holds sensitive histories for years. Here, in plain words, is how CuraVis protects them, the rules it is built to meet, and who else ever touches your data.
Protection
Protected at every step.
The same care applies from the phone in your pocket to the server it syncs with.
Your data is yours
Case records belong to your practice. We never sell them and never use them to train a model. Export or delete them whenever you wish.
Encrypted on the device
On the phone, records live in an encrypted local database. The device is the source of truth and works with no signal.
Encrypted in the cloud
When records sync, they travel over TLS and are encrypted at rest on the server, behind strict access control.
Scoped to your practice
Every record is tied to your practice and isolated from all others. An assistant manages patients and the calendar, never the case notes, enforced on the server.
Sign-in without passwords
You sign in with your phone number and a one-time code sent to your phone, so there is no password to guess or to leak.
A lost phone is not a lost case
Your records sync to the cloud as you work, so a lost or broken phone never loses your history. Sign in on a new one and it is all there.
Compliance
Built for India's rules.
CuraVis is built to the standards that govern medical records and personal data in India, from the first release.
DPDP Act 2023
Built around India's data protection law: clear notice, a lawful purpose, your rights as a principal, and a named Grievance Officer.
NMC record retention
Case records are kept for at least the three years the National Medical Commission requires before they can be removed.
CERT-In logging
Security logs are retained for 180 days, in line with the CERT-In directions.
Processors
The help we rely on.
CuraVis relies on a small number of service providers, each for a single, clear purpose and each bound by contract to use your data only for that purpose.
Secure cloud hosting
Hosting, database, file storage, and content delivery.
Sign-in code delivery
Sending your one-time sign-in codes to your phone.
Disclosure
Found a problem?
If you believe you have found a security issue, email support@curavis.io and we will route it to the right person and keep you posted.
The full account of what we collect, why we collect it, and the rights you hold lives in the privacy notice.