Legal

Privacy Policy

Effective 17 July 2026 · Updated 14 October 2026 (voice dictation) · Written to be read, not skimmed past.

The two kinds of data, and our two roles

• Patient records your clinic creates (demographics, visits, clinical notes, prescriptions, bills): your clinic is the data fiduciary under the DPDP Act; Foveal is a data processor acting on your clinic's instructions. We use this data only to provide the service. We do not read it, sell it, mine it, or use it to train anything, and we pass it only to the sub-processors listed below, only to provide the service.
• Account and business data about the clinic (clinic name, staff names and emails, contact details, payment records): here Foveal is the data fiduciary. We use it to run your subscription and support you.

Where data is stored and how it's protected

• Mumbai, India (AWS ap-south-1, operated via Supabase). Encrypted backups are kept off-site with Cloudflare and GitHub, which may store them outside India; see Sub-processors below.
• Encrypted in transit (TLS) and at rest.
• Per-clinic isolation enforced in the database (row-level security); Foveal platform administrators are structurally blocked from reading patient records, and automated tests verify this on every release.
• Daily backups; access to production is limited to the operator and logged.

Sub-processors

Supabase (database, authentication, hosting — Mumbai region), Cloudflare (website and app delivery, and encrypted off-site database backups), Resend (transactional email such as staff invitations and clinic summary emails), Sentry (error reports — configured to exclude personal and patient data), GitHub (holds the encrypted nightly backup file for 30 days), Meta Platforms (WhatsApp Business Platform), and, only for clinics that switch on voice dictation, OpenAI and Anthropic. We add none without updating this page.

Meta (WhatsApp). When a clinic sends a patient an appointment or records message through Foveal, Meta receives the patient's name and mobile number, the appointment or visit details that the message template carries, and the patient's replies. We use it only to deliver those messages on the clinic's behalf.

OpenAI and Anthropic (voice dictation). Only in clinics that switch on voice dictation: when a clinician dictates a visit, the audio is sent to OpenAI to be transcribed, and the transcript to Anthropic to be turned into suggested entries for the record. This processing happens outside India. Foveal does not store the audio or the transcript, these providers do not use it to train their models, and the clinician checks every suggestion before it enters the record. We use them only for this feature.

Consent, retention, and your rights

• The product captures patient consent at registration on the clinic's behalf, with timestamp and recorder.
• We keep clinic data for the life of the subscription plus a 90-day grace period after termination, unless law requires otherwise or the clinic requests earlier deletion.
• Clinic owners can export all clinic data (CSV) at any time — including when leaving.
• Patients exercising DPDP rights should contact their clinic (the fiduciary); we support the clinic in fulfilling such requests.

What we don't do

• No advertising, no trackers on the app, no analytics scripts on this website.
• No sale of any data, ever, and no sharing beyond the sub-processors listed above, which act only to provide the service.
• No AI training on your records.

Contact

Grievance/data contact: hello@foveal.in. We respond within 72 hours.