NexCure — Privacy Policy
Describing how NexCure collects, uses, and protects your personal and health information.
1. Introduction
NexCure Healthcare Technologies Private Limited (“NexCure,” “we,” “us,” or “our”) is committed to protecting the privacy and security of individuals who use our website (https://nexcure.in), our Android and iOS mobile applications, and all associated services (collectively, the “Platform”). This Privacy Policy explains what personal and health-related information we collect, how we use, share, and safeguard that information, and the rights available to you in respect of your information.
This Privacy Policy is drafted with reference to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025, and other applicable Indian law governing the processing of personal data. Because health information is sensitive in nature, NexCure applies heightened safeguards to its collection, storage, and use, as described throughout this Policy.
By accessing or using the Platform, you consent to the collection, use, storage, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Policy, you must not use the Platform.
2. Information We Collect
Voluntarily Provided Information
We collect information that you voluntarily provide when you register for and use the Platform, including:
- Full name, email address, phone number
- Date of birth, gender, and residential address (optional)
- Health information, including symptoms, consultation notes, and queries shared with the AI Assistant or Doctors
- Appointment details, including booking history and scheduling preferences
Automatically Collected Technical Information
When you access the Platform, we automatically collect certain technical information, including:
- Device information, including device type, operating system, and unique device identifiers
- Browser type and version, IP address
- Cookies and similar tracking technologies
- Analytics data regarding your interaction with the Platform
- Crash reports, diagnostic logs, and timestamps
3. How We Use Your Information
NexCure processes personal and health information for the following purposes:
- To provide, operate, and maintain the healthcare services offered through the Platform, including symptom triage, doctor routing, and appointment booking.
- To improve the accuracy, relevance, and safety of AI Assistant responses over time.
- To enhance the overall user experience and develop new Platform features.
- To provide customer support and respond to inquiries.
- To maintain the security and integrity of the Platform, and to detect, prevent, and address fraud, abuse, or unauthorized access.
- To send appointment reminders, service notifications, and transactional communications.
- To comply with applicable legal, regulatory, and law enforcement obligations.
4. Legal Basis for Processing
Under the DPDP Act, NexCure processes personal data primarily on the basis of your explicit, informed consent, obtained at the time of registration and prior to the collection of sensitive categories of information such as health data. Where applicable, NexCure may also process personal data on the basis of “legitimate uses” recognized under the DPDP Act.
You may withdraw your consent at any time as described in Section 13, subject to the effect such withdrawal may have on your continued ability to use the Platform.
6. Analytics
NexCure uses third-party analytics services to collect aggregated and individual usage data to help us understand how Users interact with the Platform, identify technical issues, and prioritize feature development.
7. AI Processing of Health Information (Emma)
When you interact with the NexCure AI Assistant, the symptoms, health information, and other data you input are processed by artificial intelligence systems to generate educational guidance and doctor-routing suggestions.
8. Data Sharing and Disclosure
NexCure does not sell your personal information. We may share your information with:
- Doctors: With whom you have booked an appointment or initiated a consultation.
- Third-Party Service Providers: Google Authentication, Firebase Authentication, secure cloud hosting, payment gateways, and notification providers.
- Regulatory & Law Enforcement: Where required by applicable legal process.
9. Data Retention
NexCure retains account and consultation information only for as long as necessary to provide the Services and comply with applicable legal and healthcare regulatory requirements. Upon account deletion, NexCure will delete or anonymize personal information within 30 days.
10. Security
We implement TLS 1.3 encryption in transit, AES-256 encryption at rest, secure Firebase session authentication, and role-based data isolation.
11. Children's Privacy
The Platform is not directed at individuals under 18 without parental or guardian involvement and consent.
12. International Data Transfers
NexCure primarily stores and processes data within India in accordance with the DPDP Act. Any external infrastructure transfers are governed by Standard Contractual Clauses (SCCs) and strong encryption.
13. Your Rights
Under applicable Indian data protection law, you have the right to access, correct, port, or request deletion of your data, or withdraw processing consent, by contacting our Grievance Officer.
14. Grievance Officer
In accordance with the DPDP Act, 2023, data protection inquiries and grievances may be submitted to:
Officer: Dr. Vikram Sharma, Chief Data Privacy & Grievance Officer
Level 4, Cyber Park, Sector 62, Noida, Uttar Pradesh 201309, India
Email: grievance@nexcure.in
15. Updates to This Privacy Policy
Material changes will be communicated through the Platform or via email at least 30 days before taking effect.
16. Contact Us
Company: NexCure Healthcare Technologies Private Limited
Registered Address: Level 4, Cyber Park, Sector 62, Noida, Uttar Pradesh 201309, India
Support Email: help@nexcure.in
Phone: +91 (120) 456-7890