Privacy Policy
Last updated: 5 October 2026
This policy explains what information Bal Chikitsa (balchikitsa.com, the "website") collects, why, and what control you have over it. Bal Chikitsa is run by Dr. Dipesh Raj Manhar, MD Scholar, Kaumarbhritya (Ayurvedic Paediatrics), Raipur, Chhattisgarh, India ("we", "us"). The separate Bal Chikitsa Android app works offline and does not collect personal or patient data; this policy covers the website.
1. What we collect
| Information | When | Why |
|---|---|---|
| Name, email address, role (for example Vaidya or Parent), password (stored only by Firebase Authentication, never visible to us) or Google sign-in identity | You create an account | To sign you in and run your account |
| Practitioner details (only if you sign up as Vaidya / Doctor / Student): qualification, current position, state, and optionally college or clinic and registration number. You enter these yourself and we do not verify them at sign-up | You sign up, or add them later in your profile | To understand who uses the tools and to improve them, and to decide on Vaidya Premium access. They are visible only to you and the administrator. |
| Your plan and plan expiry date | You subscribe, or an administrator sets your plan | To unlock the features you have paid for |
| Saved prescriptions, child health reports and clinic letterhead | Only when you choose to save them | So you can open them again. They are readable only from your own account. |
| Appointment requests and waitlist entries (name, email, message) | You submit the form | To reply to you |
| Payment record: order ID, payment ID, amount, plan, date | You pay | To activate your plan, resolve issues, and keep accounts as the law requires |
| Small items kept in your own browser (for example your plan and name shown in the header) | You sign in | To show the right page quickly. You can clear them in your browser settings. |
Growth, dose, vaccination and milestone calculations run in your browser. The values you type into a calculator are not sent to us unless you save a report.
2. Payments
Payments are processed by Razorpay (a payment gateway regulated in India). You enter your UPI, card or netbanking details on Razorpay's secure window. We never see or store them. Razorpay shares with us only the confirmation of payment (IDs, amount and status). Razorpay has its own privacy policy.
3. Who processes your data
- Google Firebase (Authentication and Cloud Firestore database, hosted in the Mumbai region) to store accounts and saved records.
- Cloudflare to host the website and run the payment service. Cloudflare may process technical data such as IP address to deliver the site and block abuse.
- Razorpay for payments, as described above.
We do not use advertising trackers or third-party analytics cookies on the website. We do not sell, rent or trade your data.
4. Who can see what
Only you can read your saved prescriptions and reports. The site administrator (Dr. Dipesh Raj Manhar) can see account details (name, email, role, plan, practitioner details), payment records, appointment requests and waitlist entries, which is needed to run the service and to answer you. The administrator does not read saved reports in the normal course of work.
5. Children and parental consent
The website is meant for adults: Vaidyas, doctors, students and parents or guardians aged 18 or above. Children should not create accounts. If you enter information about a child (for example a patient's name or age in a report), you confirm that you are the child's parent or legal guardian, or a practitioner treating the child with the guardian's consent, and that you are entitled to enter it. We do not track, profile or target children, and we do not show advertising. If you believe a child has created an account or that a child's data was entered without consent, write to us and we will delete it.
6. How long we keep data
Account and saved records are kept until you ask us to delete them or you delete them yourself in the app. Payment records are kept for as long as accounting and tax law requires. After deletion, residual copies in backups are removed in the normal backup cycle.
7. Your rights
Under the Digital Personal Data Protection Act, 2023, you may ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights for you. Email gogolu22009@gmail.com from your registered address with the subject "Data request". We aim to reply within 7 days and complete the request within 30 days. Withdrawing consent or deleting your account will remove access to paid features without refund, except as stated in the Refund Policy.
8. Security
Data is stored in Google Cloud with access rules that restrict each user to their own records, and all traffic uses HTTPS. No online service can be 100% secure, so please use a strong password and do not share your login. If we learn of a breach affecting your data we will inform you and the authorities as the law requires.
9. Grievance contact
Dr. Dipesh Raj Manhar, Raipur, Chhattisgarh, India. Email: gogolu22009@gmail.com.
10. Changes
If we change this policy we will update the date above, and for significant changes we will tell signed-in users.