Last updated: May 2026
Sampurna Swasthya Pvt. Ltd. ("Sampurna", "we", "our") operates the Sampurna clinic management platform at sampurna.app. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA).
We collect the following categories of data:
Patient health data is owned by the clinic (data fiduciary). Sampurna acts as a data processor and stores this data securely on behalf of the clinic. We do not access, read, or analyze patient health records except for technical support when explicitly authorized by the clinic owner. Patient consents are recorded and stored in an append-only log as required by DPDPA 2023.
We do not sell personal data. We share data only with:
All data is encrypted in transit (TLS) and at rest. Access is controlled via Row Level Security (RLS) ensuring clinics can only access their own data. We use industry-standard security practices and conduct regular security reviews.
Patient health records are retained for a minimum of 7 years as required by NMC guidelines. After account termination, data is available for export for 30 days, then permanently deleted.
As a data principal under DPDPA 2023, you have the right to:
To exercise these rights, contact us at privacy@sampurna.app.
We use only essential session cookies required for authentication. We do not use advertising or tracking cookies. Session replay is permanently disabled to protect patient privacy.
We may update this policy periodically. We will notify clinic owners of material changes via email at least 30 days before they take effect.
Data Protection Officer: Dr. Sarang Patil
Email: privacy@sampurna.app
Address: Sampurna Swasthya Pvt. Ltd., Pune, Maharashtra, India
