CareSkin (“we”, “our”, or “us”) operates the CareSkin mobile application (the “App”). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data. By using the App you agree to the practices described here.
1. Information We Collect
Account & Profile Information
Name and email address (provided via Google Sign-In)
Phone number (if you choose OTP-based login)
Age and gender (entered in your profile)
Role within the App (patient, doctor, pharmacist, or assistant)
Health & Medical Information
Skin condition photos you upload (front, right, and left views)
Medical history, known allergies, and current medications
Diagnoses and prescription details provided by treating doctors
Follow-up chat messages between you and your doctor
Appointment & Order Information
Appointment date, time, and status
Pharmacy order details (medications ordered, quantities, order status)
Coupon codes used
Payment Information
Payment is processed by Razorpay. We store the Razorpay order ID, payment ID, and transaction amount for record-keeping. We do not store full card or bank details.
Device & Usage Information
Push notification token and device platform (Android/iOS) to deliver notifications
Standard network request logs (IP address, timestamps) retained by the hosting infrastructure
2. How We Use Your Information
To provide teleconsultation services and connect patients with doctors
To enable doctors to review skin condition photos, create diagnoses, and prescribe treatment
To fulfill pharmacy orders for prescribed medications
To send push notifications about consultation updates, prescriptions, and order status
To manage clinic appointment queues and assist clinic staff
To process payments via Razorpay
To improve the App and troubleshoot issues
3. How We Share Your Information
We do not sell your personal or medical information to third parties. Your information is shared only in the following limited circumstances:
Healthcare providers within the App: Treating doctors can see your profile, skin photos, medical history, and consultation details. Pharmacists can see your medication orders. Clinic assistants can see your name and appointment details.
Service providers: We use third-party services to operate the App (see Section 4). These providers have access only to the data needed to perform their functions and are obligated to protect it.
Legal requirements: We may disclose information if required by law or to protect the rights and safety of users.
4. Third-Party Services
Google Sign-In — Used for authentication. Your Google account name and email are shared with us at login. Google Privacy Policy
MSG91 — Used to deliver OTP codes via SMS or WhatsApp for phone-number login. MSG91 Privacy Policy
Expo (EAS) — Used for push notifications and over-the-air app updates. Expo Privacy Policy
Google Cloud Run & Supabase — Our backend infrastructure and database are hosted on Google Cloud and Supabase. Data is stored in India (Google Cloud asia-south1 and Supabase ap-south-1 regions).
5. Permissions Requested
Camera — To capture photos of your skin condition during a consultation
Photos / Storage — To select and upload existing photos from your device
Notifications — To send you updates about your consultations, prescriptions, and orders
Internet — To communicate with the CareSkin backend
All permissions are requested only when relevant features are used and can be managed through your device settings.
6. Data Retention
We retain your account and health data for as long as your account is active. If you request account deletion, we will delete your personal and medical data from our systems within 30 days, except where retention is required by law.
7. Children’s Privacy
The App is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact us and we will delete it.
8. Security
We use industry-standard measures to protect your data, including HTTPS encryption for all data in transit, JWT-based authentication, and role-based access controls so that only authorized users can view sensitive health records. Payments are secured with HMAC-SHA256 signature verification via Razorpay.
9. Your Rights
You have the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Withdraw consent for optional data processing at any time
To exercise any of these rights, contact us using the details below. To permanently delete your account and all associated data, use our Account Deletion page.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by email. The effective date at the top of this page indicates when it was last revised.