Privacy Policy

What ConfirmKaro does

ConfirmKaro lets patients search for medicines, check availability at nearby licensed pharmacies, and place pickup requests before visiting. We are a technology platform—not a pharmacy, warehouse, or delivery service.

Under India's Digital Personal Data Protection Act, 2023, ConfirmKaro acts as the Data Fiduciary for data processed through our platform. You are the Data Principal.

Data we collect

Account & contact details

Name, email address, mobile number, and city—provided when you sign up, request a medicine, or contact support.

Search & order activity

Medicine names you search for, pickup requests, messages with pharmacies, and order status history.

Health-related information

If you upload a prescription or share health details to complete a pickup, we treat that information carefully. It may qualify as sensitive personal data under Indian law and is used only to facilitate your order with the pharmacy you choose.

Technical data

Device type, browser, IP address, approximate city (for showing nearby pharmacies), session logs, and security signals used to prevent fraud and abuse—not for selling ads.

How we use your data

We process personal data to:

• Match you with pharmacies and process pickup requests
• Send order updates and support replies
• Improve reliability and security of the platform
• Meet legal and regulatory obligations

We do not sell your personal data to third parties for marketing.

Who receives your data

• Pharmacies you interact with — to confirm stock and fulfil your pickup
• Infrastructure partners — hosting, authentication, and analytics providers bound by confidentiality
• Authorities — when required by valid legal process

Security

We use encryption in transit (HTTPS), access controls, and standard safeguards appropriate to the data we hold. No online system is perfectly secure; please use a strong password and keep your login details private.

If a breach affecting your personal data occurs, we will take remedial steps and notify affected users and regulators where the law requires it.

Retention

We keep order and account data for as long as needed to provide the service, resolve disputes, and comply with law. When data is no longer required, we delete or anonymise it unless a longer period is legally mandated.

Your rights

Depending on applicable law, you may request access, correction, deletion, or a copy of your data, withdraw consent, or raise a grievance. Email support@confirmkaro.com. We may verify your identity before fulfilling a request.

To delete your account and associated data, email us at the address above or see our Grievance Officer page.

Cookies

We use cookies and similar tools for sign-in sessions and basic usage analytics. You can limit cookies through your browser settings; some features may not work without them.

Children

ConfirmKaro is not intended for users under 18 without parental or guardian consent. Contact us if you believe a minor has submitted data without appropriate consent.

Data outside India

Our cloud providers may process data on servers located outside India. We require appropriate protections and comply with applicable cross-border transfer rules.

Complaints

Questions or concerns about privacy: support@confirmkaro.com. Our Grievance Officer handles formal complaints under Indian law—see Grievance Officer.

Applicable law

This policy is designed to align with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and related rules including intermediary guidelines and reasonable security practices, as applicable to ConfirmKaro's discovery platform.

Updates

We may revise this policy. The "Last updated" date at the top will change when we do. Continued use after an update means you accept the revised policy.