Privacy notice
NidVix pilot, Indore · Version 2026-10-27-pilot-1 · Effective 27 October 2026
NidVix helps you find hospitals, see bed availability together with its source and when it was last updated, request OPD appointments and request planned admissions. NidVix is not a hospital and does not give medical advice. In an emergency call 112 or 108.
Data we collect
| Data | Why |
|---|---|
| Name, email, mobile number (optional) | To create your account and send you updates you asked for |
| Booking details: hospital, doctor, date, bed type, and any note you write | To send your request to the hospital you chose and show you its status |
| Technical data: IP address, device and browser, request identifiers | Security, fraud prevention and fixing errors |
We do not ask for diagnoses, prescriptions, reports or medical history. Please do not type medical details into notes.
Who receives your data
- The hospital you choose, so it can act on your request.
- Service providers that process data on our instructions, such as hosting and the services that send SMS, WhatsApp or email. You can ask us for the current list.
- Authorities, when the law requires it.
We do not sell your data and we do not use it for advertising.
Your choices
- Accepting this notice and the terms is required to create an account.
- SMS, WhatsApp and email updates are separate and optional. They are off unless you turn them on, and you can turn them off again at any time.
- We do not send marketing messages.
Withdrawing a consent does not affect what was already done with it. If you withdraw acceptance of this notice, we can no longer provide your account.
Your rights
You may ask for a summary of the data we hold about you, ask us to correct it, ask us to erase it, nominate someone to exercise these rights for you if you die or cannot act, and make a complaint. Write to our grievance contact, which will be published here before public launch. If you are not satisfied with our response you may approach the Data Protection Board of India.
How long we keep data
- Account details: while your account is open. When you ask us to delete it we remove or anonymise your profile.
- Booking records: kept in minimal form for up to 7 years for disputes and hospital contracts; free-text notes are removed after 1 year.
- Security and audit records: up to 7 years.
Deleted data can remain in encrypted backups until they expire (up to 35 days).
Children
Accounts are for adults. A parent or guardian can request care for a child through their own account.
Security
We protect data with encryption in transit, role-based access limited to what each person needs, and tamper-resistant audit logs. No system is perfectly secure. If a breach affects you we will tell you and the authorities as the law requires.
Changes to this notice
Each version of this notice has a version number. When we change it in a way that affects how we use your data we will ask for your consent again.