Last updated: April 2026
Privacy Policy
How OPD Desk Pro collects, uses, and protects your information.
This Privacy Policy applies to the OPD Desk Pro mobile application ("App") and website operated by Neuvo WebTech LLP. By using the App, you agree to the practices described in this policy.
1. Who We Are
OPD Desk Pro is a product of Neuvo WebTech LLP, a limited liability partnership registered in India.
2. Information We Collect
We collect only the information necessary to provide the clinic management service.
Account Information
- Mobile phone number (used as your login identifier)
- Name (doctor or clinic assistant)
- Password (stored in encrypted form — we never store plain-text passwords)
- Role (doctor or clinic assistant)
Clinic & Patient Data
- Clinic name, address, working hours, and schedule
- Patient names, mobile numbers, age, and gender (entered by the doctor or assistant)
- Appointment dates, times, token numbers, status, and consultation fees
- Notes attached to appointments (entered by the doctor)
Device & Technical Information
- Device type and operating system version (collected automatically by Firebase Crashlytics for crash diagnostics)
- App version and crash logs (used solely for fixing bugs)
- Push notification token (used to deliver appointment reminders)
What we do NOT collect:
- Location / GPS data
- Contacts or call logs
- Health or biometric data
- Browsing history or advertising identifiers
- Payment card information (payments are handled outside the app)
3. How We Use Your Information
- Providing the service: Patient records, token management, scheduling, and fee tracking are the core purpose for which all clinic and patient data is stored.
- Authentication: Your phone number and password are used to verify your identity at login and on every API request.
- Push notifications: Your device token is used to send appointment reminders you have opted into.
- Crash reporting: Anonymous crash logs are sent to Google Firebase Crashlytics to help us identify and fix technical issues. These logs do not contain patient data.
- Customer support: When you contact us, we may use your name and phone number to respond to your query.
We do not use your data for advertising, profiling, or any purpose unrelated to the clinic management service.
4. Data Isolation & Access Control
Each doctor's patient and appointment data is strictly isolated. A doctor can only access data belonging to their own account. Clinic assistants can access only the clinic(s) they are explicitly assigned to. No doctor or assistant can view another doctor's data.
Neuvo WebTech staff may access data only to resolve a support issue you have raised or to maintain the service infrastructure. All such access is logged.
5. Data Storage & Security
- All data is stored on Supabase (PostgreSQL database) hosted in a secure cloud environment with industry-standard encryption at rest.
- All data in transit between your device and our servers is encrypted using HTTPS / TLS.
- Passwords are hashed using bcrypt and are never stored or transmitted in plain text.
- Authentication tokens are stored in your device's secure keychain (iOS) or Keystore (Android) using the
flutter_secure_storage library.
- We do not store payment card data. Subscription payments are collected via bank transfer or other offline methods.
6. Data Retention
Your account data and associated clinic and patient records are retained for as long as your account is active. If you request deletion of your account:
- Your account credentials are permanently deleted from our authentication system.
- All patient records, appointments, and clinic data associated with your account are permanently deleted.
- Deletion is irreversible. We recommend exporting important records before requesting deletion.
Crash logs retained by Firebase Crashlytics are subject to Google's retention policy (typically 90 days).
7. Sharing of Information
We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:
- Service providers: We use Supabase (database), Vercel (hosting), and Google Firebase (crash reporting and push notifications). These providers process data only as necessary to deliver the service and are bound by their own privacy policies.
- Legal requirements: We may disclose data if required by law, court order, or government authority under applicable Indian law.
- Business transfer: In the event of a merger or acquisition, your data may be transferred to the successor entity, which will be bound by this privacy policy.
8. Third-Party Services Used
9. Children's Privacy
OPD Desk Pro is intended for use by registered clinic doctors and their staff. The App is not directed at children under 13 years of age, and we do not knowingly collect personal information from children.
Patient records may include data for patients of any age (including minors) when entered by a licensed medical professional as part of their clinical record-keeping. This data is subject to the same protections described in this policy.
10. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data (name, phone number) by contacting support
- Request deletion of your account and all associated data
- Object to the processing of your data in certain circumstances
To exercise any of these rights, contact us at [email protected] or call +91-8444833444. We will respond within 30 days.
11. Cookies & Tracking
The OPD Desk Pro mobile app does not use cookies. Our website may use standard browser cookies only to remember your preferences and for basic analytics. We do not use advertising cookies or cross-site tracking.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app or by email. The updated policy will be effective from the date shown at the top of this page. Continued use of the App after the effective date constitutes acceptance of the revised policy.
13. Governing Law
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any disputes shall be subject to the exclusive jurisdiction of courts in Kolkata, West Bengal.