Privacy Policy for Likhoto™

1. Introduction

Likhoto™ ("Likhoto", "we", "our", or "us") is a medical practice records application provided by Shyamol Private Limited, a company incorporated in India.

Likhoto is designed for doctors and authorized clinic staff working in clinics and medical practices. It helps users capture, organize, store, and access medical practice records, patient information, files, notes, and appointments.

Likhoto is not intended to replace a hospital information system, provide medical diagnosis, provide clinical decision support, or operate as a medical device.

This Privacy Policy explains how we collect, use, disclose, store, retain, and protect personal information and medical record information when you use Likhoto, including our mobile applications, website, APIs, and related services.

This Privacy Policy is intended to provide information to users in India and other countries and regions where Likhoto is made available. Certain rights and obligations may vary depending on the laws that apply to you.

2. Who We Are

Depending on the applicable law and the relationship involved, Shyamol Private Limited may act as a controller, business, fiduciary, service provider, processor, or another equivalent role recognized by applicable privacy law.

In particular, where a doctor or clinic uses Likhoto to store and manage patient medical records, the doctor or clinic may have responsibilities for determining why and how those patient records are collected and used, while Likhoto provides the technology used to store and manage them.

3. Information We Collect

4. How We Collect Information

We collect information directly from users when they create an account, use Likhoto, enter clinic or patient information, create records or appointments, upload files, manage subscriptions, or contact us.

Some information is automatically generated through the operation of Likhoto, including certain security logs, timestamps, storage calculations, and subscription-status information.

Where a doctor or clinic enters information relating to another person, such as a patient, the doctor or clinic is responsible for providing any notices and obtaining any consents required by applicable law.

5. How We Use Information

We process information for purposes reasonably necessary to provide, secure, maintain, and improve Likhoto, including:

1. Service Delivery: Allowing doctors and authorized staff to create, capture, search, organize, retrieve, store, and manage practice records.
2. Patient & Record Management: Associating records, files, notes, and appointments with the appropriate patient, doctor, and clinic context.
3. Access Control: Enforcing permissions so users can access only information they are authorized to access.
4. Storage Management: Measuring storage usage and applying applicable subscription limits.
5. Subscription Management: Verifying Google Play subscriptions, including activations, renewals, upgrades, downgrades, cancellations, expirations, and related entitlement changes.
6. Security & Fraud Prevention: Protecting accounts, preventing unauthorized access, investigating suspicious activity, protecting record integrity, and preventing abuse.
7. Reliability & Troubleshooting: Diagnosing errors, resolving technical problems, maintaining infrastructure, and improving service reliability.
8. Legal Compliance: Complying with applicable laws, regulations, lawful requests, court orders, and regulatory obligations.

6. Legal Bases for Processing

Where a privacy law requires us to identify a legal basis for processing, the applicable basis depends on the processing activity and the law that applies.

• Performance of a Contract: Where processing is necessary to create and operate your account, provide Likhoto, manage subscriptions, or perform our contractual obligations.
• Legal Obligations: Where processing is necessary to comply with applicable legal or regulatory requirements.
• Legitimate Interests: Where permitted by applicable law, for security, fraud prevention, troubleshooting, service reliability, and other legitimate operational purposes, subject to applicable balancing requirements.
• Consent: Where applicable law requires consent for a particular processing purpose, we will request consent in an appropriate manner. Such consent may be withdrawn where provided by law.

The fact that we identify multiple possible legal bases does not mean that consent is required for every activity described in this Privacy Policy.

7. Sharing and Disclosure

We do not sell personal information or patient medical information to advertisers or data brokers.

We may disclose information to service providers that process information on our behalf where reasonably necessary to operate Likhoto. Those providers may process information subject to appropriate contractual, technical, and organizational safeguards as required by applicable law.

We may also disclose information where reasonably necessary to comply with applicable law, respond to lawful legal process, protect the security of Likhoto, investigate fraud or abuse, protect users or third parties from serious harm, or enforce our legal rights.

We may disclose information in connection with a merger, acquisition, financing, restructuring, or sale of all or part of our business, subject to applicable law.

We do not use patient medical information for targeted advertising or cross-context behavioral advertising.

8. Third-Party Service Providers

Likhoto uses selected third-party providers necessary to operate the Service.

9. International Data Transfers

Likhoto is intended for international use and relies on cloud and technology providers that may operate in multiple countries. As a result, personal information may be processed or stored outside the country in which you are located.

Where applicable law imposes specific requirements on international transfers of personal information, we will take the measures required by that law.

Depending on the jurisdiction and circumstances, those measures may include legally recognized transfer mechanisms, contractual safeguards, technical safeguards, organizational safeguards, notices, or consent where required by law.

Information about applicable safeguards may be requested by contacting support@shyamol.in.

10. Security

We use technical and organizational measures designed to protect personal information and medical records against unauthorized access, alteration, disclosure, destruction, and loss.

• Encryption in Transit: Communications between the Application, our APIs, and supporting infrastructure are protected using HTTPS/TLS.
• Secure Cloud Storage: Medical files and documents are stored using private cloud storage with encryption and controlled access.
• Authentication & Authorization: Access to accounts, clinics, and records is governed by authentication and authorization controls.
• Access Isolation: Records are associated with the relevant doctor and clinic context, and access is restricted according to applicable permissions.
• Logging & Monitoring: Relevant security and operational events may be logged for security, troubleshooting, and abuse prevention.

No method of electronic storage or transmission is completely secure. We therefore cannot guarantee absolute security, although we work to maintain appropriate safeguards.

11. Data Retention

We retain account information and medical records for as long as reasonably necessary to provide the Service and fulfill the purposes described in this Privacy Policy, including while the relevant account remains active.

We may retain certain information for longer where necessary to comply with legal, regulatory, accounting, security, dispute-resolution, or other legitimate obligations.

Where no specific period is prescribed by law, retention is determined based on factors including the purpose for which the information was collected, the sensitivity of the information, the continuing need to provide the Service, and applicable legal requirements.

12. Account & Data Deletion

Users may request deletion of their Likhoto account and associated personal information, subject to applicable legal retention requirements.

Where account deletion functionality is available in the Application, users may initiate a deletion request through the relevant account settings.

Users may also submit a deletion request by emailing support@shyamol.in with the subject line "Account Deletion Request".

13. Your Privacy Rights

Depending on your location and the law applicable to your personal information, you may have rights relating to your personal data, which may include:

• accessing personal information we hold about you;
• correcting inaccurate or incomplete information;
• requesting deletion of personal information;
• requesting restriction of certain processing;
• objecting to certain processing;
• withdrawing consent where consent is the legal basis;
• requesting portability of certain information;
• obtaining information about disclosures and data recipients;
• requesting information about applicable international transfer safeguards; and
• lodging a complaint with a competent privacy or data protection authority where such a right exists.

These rights may be limited by applicable law. For example, certain information may need to be retained to comply with legal, regulatory, security, accounting, or record-keeping obligations.

To exercise an applicable privacy right, contact support@shyamol.in.

14. European Economic Area, United Kingdom & Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, additional data-protection rights may apply to you under local law.

Where applicable, these may include rights of access, correction, deletion, restriction, objection, portability, and withdrawal of consent where consent is the applicable legal basis.

Where processing is based on legitimate interests, you may have a right to object in accordance with applicable law. You may also have the right to complain to the relevant data protection authority.

Additional information regarding legal bases and international transfers is provided in Sections 6 and 9 of this Privacy Policy.

15. United States & California

If applicable U.S. state privacy laws apply to you, you may have additional rights concerning access, correction, deletion, and certain disclosures or uses of personal information.

In particular, California residents may have rights under the California Consumer Privacy Act and related regulations, including applicable rights to know, correct, delete, and exercise rights concerning sensitive personal information.

Likhoto does not sell personal information and does not share personal information for cross-context behavioral advertising.

California residents may submit applicable privacy requests by contacting support@shyamol.in.

16. India

Shyamol Private Limited is incorporated in India and processes personal information in accordance with applicable Indian privacy and data-protection requirements.

Where the Digital Personal Data Protection Act, 2023 and applicable rules or related requirements apply to our processing, we will comply with the obligations and rights applicable to that processing.

Users in India may contact us regarding privacy requests or grievances at support@shyamol.in.

17. Brazil

Where Brazil's Lei Geral de Proteção de Dados Pessoais (LGPD) applies, users may have rights concerning confirmation of processing, access, correction, anonymization, blocking or deletion where applicable, portability, information about sharing, review of certain automated decisions, and withdrawal of consent where consent is the applicable legal basis.

Applicable rights may be exercised by contacting support@shyamol.in.

18. Children's Privacy

Likhoto is a professional application intended for doctors and authorized clinic staff. It is not directed to children and is not intended for children to create or use accounts.

Doctors and healthcare professionals may nevertheless use Likhoto to maintain records concerning pediatric patients as part of their professional practice. In those circumstances, the healthcare provider remains responsible for complying with applicable laws governing children's and pediatric health information.

19. Automated Decision-Making & Profiling

Likhoto does not use patient medical records to make automated decisions about a patient's diagnosis, treatment, eligibility, or access to medical care.

Likhoto may use automated systems for ordinary operational functions such as authentication, subscription entitlement, storage calculations, security checks, and service reliability. These processes are not intended to make medical decisions.

20. Website Technologies

Our website may use essential technologies needed to operate, secure, and deliver the website.

If we introduce optional analytics, advertising, or other non-essential technologies, we will provide the notices and choices required by applicable law.

We do not use patient medical information for advertising or behavioral advertising.

21. Health & Medical Disclaimer

Likhoto is a medical practice record-keeping and organizational application for doctors and authorized clinic staff.

Likhoto is not a medical device and does not diagnose, treat, cure, or prevent any medical condition.

Likhoto does not provide medical advice, clinical decision support, or treatment recommendations. Healthcare professionals remain responsible for their professional judgments, diagnoses, treatments, and patient-care decisions.

22. Security & Compliance

We design and operate Likhoto with security and privacy safeguards appropriate to the nature of the information handled by the Service.

Depending on the service, region, and contractual relationship, additional legal or contractual requirements may apply to the use of Likhoto for healthcare information. Healthcare providers and clinics are responsible for determining the requirements applicable to their own practices.

Where Shyamol enters into specific security, privacy, or data-processing agreements with infrastructure or healthcare partners, those agreements govern the applicable contractual relationship in addition to this Privacy Policy.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Likhoto, our data practices, security measures, applicable laws, or regulatory requirements.

When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy and, where required by law, provide additional notice or obtain consent.

We encourage users to review this Privacy Policy periodically.

24. Contact Us

If you have questions, concerns, privacy requests, or complaints regarding this Privacy Policy or the handling of your personal information, please contact us: