Privacy policy

Account. Your mobile number or email address, used to sign you in with a one-time code. Your name, if you give it. We never see or store a password — there is none.

Delivery addresses. The full address and, if you allow location access, its coordinates, so a rider can find you. Your area PIN code is checked against the areas we serve.

Prescriptions. The image or PDF you upload, and the patient name, doctor name and issue date our pharmacist reads from it. These are stored in a private bucket that only you and our pharmacists can open.

Doctor consultations. If you ask a doctor to call, the contact number, patient name, symptoms and preferred time you enter.

Orders. What you ordered, when, where it was delivered, and how you paid. For online payments we keep Cashfree’s payment reference; we do not receive or store card, bank or UPI details.

Device. If you enable notifications in the app, a push token that identifies your device to Firebase or Apple so we can tell you when your order moves.

Website visits. Which pages of pharmyquick.in are opened, the site that linked to them, and the visitor’s country, browser and type of device. Vercel counts these without cookies; they are not linked to your account, and search terms are not included.

To dispense and deliver medicines lawfully. Prescription medicines (Schedules H, H1 and X) may only be sold against a valid prescription verified by a registered pharmacist, so we must hold the prescription and the pharmacist’s decision. Schedule H1 sales are recorded in a register we are required to keep for three years.

To sign you in, send you a one-time code, take payment, deliver the order and tell you where it is. We do not use your data for advertising and do not sell it.

Only the services needed to run the pharmacy, and only the data each one needs:

• SSupabase hosts our database, authentication and prescription storage.
• VVercel hosts the website and counts page visits, without cookies and without knowing who you are.
• MMeta (WhatsApp) receives your mobile number to deliver your sign-in code on WhatsApp. Nothing else about you is sent.
• RResend delivers sign-in codes and order updates by email.
• CCashfree processes online payments under its own privacy policy.
• FFirebase and Apple deliver push notifications to your device.
• OOur riders see your name, address and phone number for the order they are delivering, and nothing else.

We disclose data to authorities only where the law requires it — for example, a drug inspector asking to see the Schedule H1 register.

Your account, addresses and order history stay while your account exists. Prescriptions and the H1 register are retained for the periods the Drugs and Cosmetics Rules require, even after an account is deleted. Sign-in codes expire within minutes and are never written to our logs. Push tokens are removed when you sign out.

You can see and edit your name, addresses and notification settings in the app. You can ask us to correct anything else, to tell you what we hold about you, or to delete your account. We will delete everything we are not legally required to keep and tell you what was retained and why.

To make a request, call or WhatsApp us at +91 89496 71268 or send a WhatsApp message. We respond within 7 days.

Accounts are for adults. A parent or guardian may order for a child and upload the child’s prescription under their own account.

If this policy changes in a way that matters, we will say so on the site before the change takes effect. The date at the top is the date of the current version.