Privacy Policy

Holy Jesus Pharma RX (“we”, “us”) runs an online platform that connects patients with independent, licensed doctors for video consultations. This policy covers the website at www.holyjesuspharmarx.com and the Holy Jesus Pharma RX mobile app (together, the “service”).

It explains what personal information we collect, why, who can see it and what you can do about it. We handle health information with particular care: it is only used to run your consultations, and it is never sold or used for advertising.

We collect only what the service needs.

Account

The email address you sign in with. We email you a one-time code; there is no password.

Profile

Your name and date of birth (needed to book), and optionally a phone number so the clinic can reach you about a booking.

Health information you give us

The symptoms and note you write when booking, and, in the app, health records you choose to upload (for example a report or an earlier prescription).

Consultation records

Your doctor's consultation note and the prescriptions they issue, together with the doctor, time and status of each booking.

Payments

The amount, payment and refund status, and the order and payment references from our payment provider. Your card, UPI or bank details are entered with the payment provider; we never see or store them.

Calls

Video and audio are carried live between you and your doctor through our video provider. We do not record consultations. We keep the fact that you and the doctor joined, and when.

Ratings and messages

Ratings you give a doctor, and anything you send us through the contact form or by email. For the contact form we also keep a one-way scrambled form of your IP address (never the address itself) for an hour-by-hour limit that stops spam.

Location (only if you choose it)

If you pick a city in the website header, the city is kept in your browser. If you tap “Use my location”, your browser’s position is rounded to about 1 km and used once to name your city; we do not store it.

Device and technical data

In the app, a push-notification token for your device. On the website and in the app, technical logs such as IP address and browser or device type, kept by our hosting and infrastructure providers to keep the service running and secure.

The camera and microphone are used only during a consultation (and the camera, if you choose it, to photograph a record). Your browser or phone asks for permission first.

• To create and secure your account and sign you in.
• To book, run and follow up your consultations, including your doctor’s note and prescriptions.
• To take payments and pay refunds.
• To send service messages: sign-in codes, and booking, cancellation, refund and prescription updates by email or app notification.
• To answer your questions and requests, and to investigate problems with a booking or payment.
• To keep the service safe: preventing fraud and misuse, and keeping an audit trail of who accessed medical information.
• To meet legal and medical record-keeping obligations that apply to us and to doctors.

We rely on your consent for health information, which you give when you book (you agree to a consultation consent, and we keep a record of which version you agreed to and when) and by sharing it with your doctor, and on the need to provide the service you asked for and to comply with the law. You can withdraw consent at any time (see “Your choices and rights”), though we may then be unable to provide the service.

We do not sell your personal information, and we do not use it for advertising or share it with advertisers.

Your doctor

For a consultation you have booked: your name, age or date of birth, the symptoms and note you entered, contact details, and, if you shared them, your health records. Access starts when the booking is confirmed and ends 24 hours after the consultation, so your doctor can finish the note and prescription. Each time a doctor opens your record it is logged. When you book, on the website or in the app, you can choose not to share your uploaded health records with that doctor, and change this later on the booking.

Our care team

Booking logistics, payment and refund status, and contact details (name, phone, email) so we can manage your booking and support you. Our systems do not give the care team access to your symptoms or health records in normal operation.

Service providers

The companies listed in the next section, only as far as needed to do their job for us.

Authorities and the law

We disclose information when a law, court order or valid government request requires it, or to protect someone's safety or our legal rights. We try to limit what we disclose to what is required.

Doctors on the platform are independent professionals who are responsible for keeping what you tell them confidential.

We use these providers to run the service. They process data on our instructions.

• Supabase: our database, sign-in, file storage and server functions.
• Razorpay: payment collection and refunds.
• 100ms: live video and audio for consultations.
• Resend: sending email, including sign-in codes.
• Expo: delivering push notifications to the app.
• Vercel: hosting the website.
• Open-Meteo and OpenStreetMap (Nominatim): turning a city name you type, or a rounded position, into a city for the website’s location picker. The request comes from our server, so they do not see your IP address.

Each provider has its own privacy terms that apply to the data it handles directly, for example the payment details you enter at checkout.

We use only what the website needs to work:

• Sign-in cookies keep you signed in and are refreshed as you browse. They are removed when you sign out.
• Language preference (app-locale) remembers English or Russian, in a cookie and in your browser’s local storage.

We do not use advertising cookies or third-party analytics trackers. The payment window (Razorpay) and the video call (100ms) load code from those providers, which may set their own cookies while you use them. You can block or delete cookies in your browser settings, but you will not be able to stay signed in without the sign-in cookies.

• Your account, profile, health records and ratings: until you delete your account.
• Prescriptions your doctors issued: 3 years from the date of issue, as Indian telemedicine rules require, even if you delete your account. After that they are removed.
• Records of past consultations and payments: kept after account deletion, no longer linked to you, because we need them for refunds, accounts and the doctor’s own records.
• Unpaid bookings: released automatically after 10 minutes.
• Technical logs: kept by our providers for a limited period for security and troubleshooting.

• See and correct your name, date of birth and phone number in your profile at any time.
• Delete your account yourself, on the website at /delete-account or in the app under Profile → Delete account. Deletion is immediate and permanent, with the retention exceptions above. It is not available while you have an upcoming consultation, a refund still on its way, or a consultation from the last 24 hours, so that nothing you are owed is lost.
• Withdraw consent, including to sharing health records with a doctor on a particular booking (on that booking’s page), turn off consultation emails in your account (Profile on the website or in the app), or turn off app notifications in your device settings.
• Ask us for a copy of the personal information we hold about you, to correct it, to erase it, or to explain how it is used. Email holyjesuspharmarx@gmail.com from the address on your account.

We will reply within a reasonable time and tell you if we cannot do something, and why (for example, a record we must keep by law). If you are not satisfied with our reply, you can complain to the data protection authority that applies where you live.

Data is encrypted in transit between your device and our servers. Access is restricted by role: patients see only their own data, doctors see only the consultations they are booked on, and access to medical information is logged. Prescriptions cannot be altered after they are issued. Payments are handled by a payment provider rather than by us.

No service is perfectly secure. Keep your email account secure, since a sign-in code goes there, and tell us straight away if you think someone else has access to your account.

Patients and doctors use the service from different countries, and our providers may process data in other countries, including outside India. We choose providers that protect data to a reasonable standard, and we use the information only as described here.

The service is for people aged 18 and over. We do not knowingly create accounts for children. If you believe a child has an account, write to us and we will delete it.

We may update this policy as the service changes. The “Last updated” date above shows the current version. If a change materially affects how we use your health information, we will tell you in the service or by email before it takes effect.

For any question, request or complaint about your personal information, write to holyjesuspharmarx@gmail.com or call +919315226951. Mark your email “Privacy” so it reaches the right person.