Privacy Policy

Who is responsible for your data

Smartlocal AI (“Smartlocal AI”, “Dr Jiva”, “we”, “us” or “our”) operates the Dr Jiva mobile application for iOS and Android. For purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), Smartlocal AI acts as the Data Fiduciary for personal data processed through Dr Jiva.

This policy applies to medicine reminders, dose confirmations, family-care features, medical-record storage, printed-bill scanning and medicine ordering through Dr Jiva.

What we collect and why

We limit collection to information needed to provide the features you choose to use.

Dr Jiva also uses a device notification identifier when needed to deliver reminders. The identifier is used only for app notifications and is not an advertising identifier.

OCR runs on your phone—not on a cloud OCR server

When you scan a printed doctor’s bill, optical character recognition (OCR) is performed locally on your iOS or Android device. The bill image is not sent to a separate cloud OCR service for text recognition.

You can review and correct the detected text. If you choose to save the document or confirmed medicine details, that saved image and data are then uploaded to Dr Jiva’s protected cloud storage so they are available as part of your account. If you leave without saving, Dr Jiva does not intentionally add that unfinished scan to your cloud medical records.

How we obtain and use consent

We process personal data with your consent when you create or use a Dr Jiva account and choose features that need the information described above. We use the data only for the specified app, support, safety, order and legal-compliance purposes explained in this policy.

You may withdraw consent by stopping the relevant feature or requesting account deletion. Withdrawal does not affect processing already lawfully completed, and some features cannot operate without the data they require. We may retain limited information where applicable law requires it.

Where your information is kept

Account information, saved medicine data, dose history, uploaded health records, confirmed bill-scan data and order records are stored using Supabase cloud database and storage services. The current Dr Jiva Supabase project is hosted in the ap-southeast-2 (Sydney, Australia) region. This means personal data saved to the service may be transferred from India to and stored in Australia.

Some delivery-address information and temporary scan working data may also be stored locally on your device. Device-level storage is controlled by your operating system and can be removed by deleting relevant app data or uninstalling the app, subject to device backup behaviour.

How long we keep data

We retain account and health information while your account is active and the information is needed to provide the features you use. You may delete individual records where that option is available or request deletion of the entire account.

After we verify an account-deletion request, we will delete or irreversibly anonymise personal data associated with the account within 30 days. Encrypted disaster-recovery copies may remain inaccessible in rolling backups until overwritten under the hosting provider’s normal backup cycle. We do not restore deleted account data for ordinary use.

Where Indian law requires retention of a limited transaction, tax, fraud-prevention or dispute record, we will isolate and retain only what is legally required for the required period, then delete it. Such retained information will not be used for reminders, marketing or advertising.

We never sell health or personal data

We do not sell or rent personal data, health information or medical records to third parties, data brokers, advertisers or advertising networks. We do not permit third-party behavioural advertising based on your medicine or health data.

• Delivery partners: When you place a medicine order, we share only the customer name, phone number, delivery address, ordered items and delivery instructions needed to fulfil that order. Delivery partners may use this information only for order pickup, contact, delivery and issue resolution.
• Family members you authorise: Medicine schedules and dose-confirmation information may be visible through family-care features when you choose or request that access. Do not link a person who should not see the information.
• Service processors: Supabase and notification infrastructure process data on our instructions to host the app, secure accounts, store records and deliver reminders. They are not authorised to use Dr Jiva health data for their own advertising.
• Legal and safety requirements: We may disclose limited information where required by applicable law, a valid legal process, or to protect users and the service from fraud or serious harm.

Access, correction, erasure and grievance redressal

Subject to the DPDP Act, 2023, its commencement schedule, applicable rules and lawful exceptions, you may:

• give, refuse or withdraw consent for processing based on consent;
• ask whether we process your personal data and request a summary of that data and its processing;
• request correction of inaccurate or misleading data, completion of incomplete data, and updating of outdated data;
• request erasure of personal data that is no longer needed, unless retention is required for a specified lawful purpose or compliance with law; and
• raise a grievance with us and receive a response through the contact mechanism below.

To exercise a right, email support@smartlocalai.in from an address you control, include your registered mobile number and describe the request. We may verify account control before acting. Never send us your OTP. We normally acknowledge requests within 24–48 hours and aim to complete verified deletion requests within 30 days.

If a grievance is not resolved, you may use remedies available under the DPDP Act and applicable rules after first using our grievance process.

Dr Jiva is not intended for users under 18

Dr Jiva is intended for adults aged 18 or older. We do not knowingly invite a person under 18 to create or independently manage an account. An adult managing information for a family member must have lawful authority and remains responsible for the information entered. If you believe a person under 18 has provided data without appropriate authority, contact the Grievance Officer so we can investigate and delete it where required.

Managing records and permissions

• You can change notification permission in iOS or Android settings.
• You can correct profile, medicine, schedule or address information through available app screens or by contacting support.
• You can delete individual medical records where the delete option is available.
• You can request full account deletion by emailing support with the subject “Delete my Dr Jiva account”.

Changes to this policy

We may update this policy when Dr Jiva’s features, providers, legal obligations or data practices change. We will update the “Last updated” date and provide additional notice in the app or through another appropriate channel when a change materially affects your rights or how sensitive data is handled.

Last updated: 2 August 2026