Privacy Policy for Hospital ERP

1. Introduction

This Privacy Policy governs the collection, use, maintenance, and disclosure of information collected by Hospital ERP ("we", "us", or "our"), available via the Indus Appstore and our web platform. This policy applies to all users of our Android mobile application and web portals, including hospital administrators, doctors, nurses, receptionists, pharmacists, accountants, and patients.

2. Information We Collect

In order to provide hospital operations, digital consultations, inpatient care, and clinical workflows, Hospital ERP collects and processes the following categories of information:

• User Account Information: Name, professional email address, phone number, designated staff role, and encrypted authentication credentials.
• Patient & Health Records: Patient identification details, age, gender, contact information, outpatient (OPD) queue data, inpatient (IPD) admission notes, vital signs (blood pressure, pulse, temperature), clinical prescriptions, lab test reports, and doctor discharge summaries entered by licensed healthcare professionals.
• Billing & Transaction Details: Invoices, payment receipts, consultation charges, room charges, and payment mode indicators (cash/card/UPI/insurance). We do not store complete credit/debit card numbers or sensitive banking PINs.
• Device & Diagnostic Logs: Device model, operating system version, app version, error telemetry, and performance logs used exclusively for maintaining app stability and crash prevention.

3. Device Permissions & Why We Need Them

Our Android application requests only the minimum runtime permissions necessary to deliver core hospital workflows:

• Camera Permission (CAMERA): Required solely when a doctor, nurse, or receptionist photographs physical paper prescriptions, medical test slips, or patient identity documents for digital attachment to the patient record.
• Storage / Media Files (READ_EXTERNAL_STORAGE / READ_MEDIA_IMAGES): Used to attach existing laboratory reports, radiology scans (PDF/JPEG), or discharge papers from the device storage.
• Internet Access (INTERNET & ACCESS_NETWORK_STATE): Required to securely synchronize clinical data in real time with the hospital's encrypted cloud or local server.

We never access your microphone, location, contacts, or unrelated background storage.

4. How We Use Collected Information

The information processed by Hospital ERP is used exclusively for:

• Managing hospital appointments, doctor queues, and consultation schedules.
• Enabling accurate inpatient bed tracking, nurse vitals logging, and clinical monitoring.
• Processing pharmacy medicine dispensation and inventory tracking.
• Generating official hospital invoices, discharge bills, and receipts.
• Authenticating authorized medical personnel with role-based access control.
• Ensuring technical reliability, system maintenance, and performance optimization.

Zero Advertising Policy: Hospital ERP is an enterprise hospital productivity suite. We do not display third-party advertisements, nor do we sell, rent, or trade patient health records or user data to advertisers or third-party marketing networks.

5. Data Security & Storage

We prioritize patient health data privacy and system security:

• End-to-End Encryption: All communications between the mobile application and backend servers use encrypted Transport Layer Security (TLS/HTTPS).
• Role-Based Access Control (RBAC): Hospital staff only have access to modules and patient records pertinent to their designated clinical duties (e.g., pharmacists see medicine orders; accountants manage billing).
• Multi-Tenant Isolation: Data for each hospital or medical center is logically isolated to prevent unauthorized cross-facility access.

6. Data Retention & Account Deletion Policy

Hospital patient data belongs to the respective licensed medical facility. Medical records are maintained in accordance with statutory medical retention guidelines:

• Hospital staff may request account deactivation through their hospital administrator.
• Patients may request copies of their digital medical records or request profile updates by contacting the treating hospital's administration desk.
• To request permanent account deletion or inquire about data deletion protocols, authorized hospital representatives can email our compliance team at privacy@hospitalerp.com.

7. Children's Privacy

When pediatric medical records are maintained within Hospital ERP, they are entered and managed solely by authorized healthcare providers or parent/legal guardian consent during hospital admission.

8. Contact & Grievance Officer

If you have any questions, concerns, or grievances regarding this Privacy Policy or the data practices of the Hospital ERP application, please contact our Data Protection Officer: