About this notice
This notice explains what personal data HomeCareSaathi collects when you use our home health care platform, why we collect it, who we share it with, and what you can ask us to do about it. It applies to our website, our mobile applications and the care visits we arrange in India.
We have tried to write it in plain language. Where we say "we" or "us" we mean Swastify Healthcare Private Limited, and where we say "you" we mean the person using the platform — whether you are booking care, receiving it, or delivering it as a care partner.
Who we are
Swastify Healthcare Private Limited is a company registered in India under CIN U86900DC2026PTC471710, with its registered office at B-26 Mansaram Park, Uttam Nagar West Delhi-110059. Under the Digital Personal Data Protection Act 2023 we are the Data Fiduciary for the personal data described here.
What we collect
When you create an account
- Your mobile number, which is how you sign in. We send a one-time code to it, and we do not store a password for customer accounts.
- Your name and email address, if you give them to us.
When you add a patient
A patient is the person who receives care, and may not be you. For each patient we collect:
- Name, age, gender and relationship to you.
- The address where care is to be delivered, and its location coordinates, so that we can match a care partner nearby.
- Health information you choose to share so that the visit can be delivered safely — existing conditions, allergies, mobility needs, and the doctors or hospitals treating them.
When you book a visit
- The service requested, the date and time, and any notes you add for the care partner.
- A prescription, where the service requires one. Prescriptions are reviewed by a qualified professional before the visit is dispatched.
- Readings recorded during the visit — blood pressure, pulse, SpO2, temperature and similar observations — entered by the care partner in our mobile app.
- Payment records. We do not store your full card or bank details; those are handled by our payment provider.
If you are a care partner
- Identity verification data, including Aadhaar-based eKYC, and the result of that verification.
- Your qualifications and the certificates supporting them, which our compliance team checks before approving you to deliver a service.
- Background verification results.
- Your location, but only while a visit you have accepted is in progress. We do not track where care partners are between visits, and we do not collect location from a care partner who is off duty.
Automatically
- Your IP address, device type and browser, and the pages you visit, which we use to keep the service secure and working.
- Records of when you signed in and what actions were taken on an account, which we keep so that a dispute about a booking or a record can be investigated.
Why we use it
- To match a booking with a qualified, verified care partner near the patient.
- To deliver and record the visit, and to make that record available to you afterwards.
- To operate safety features, including the SOS alert that stays active during a visit and for a limited period after it.
- To take payment and issue receipts.
- To respond to your enquiries and complaints.
- To verify that a care partner is who they say they are and is qualified to do what they have been booked for.
- To detect and prevent fraud and misuse, and to keep accounts secure.
- To meet our legal and regulatory obligations.
The basis on which we use it
We rely on your consent for most of what is described above, and you give that consent when you create an account, add a patient or book a visit. Where the law permits us to act without consent — for example to comply with a legal obligation, or to respond to a medical emergency affecting the patient — we rely on that instead.
You can withdraw your consent at any time by writing to the contact address at the end of this notice. Withdrawing consent does not undo anything we did while it was in force, and for most of our services it will mean we can no longer arrange care for you.
Who we share it with
- The assigned care partner, who is shown the patient's name, address, the service booked, and the clinical notes needed to deliver it safely.
- Our support and compliance staff, who can see bookings and records in order to help you or to investigate a complaint.
- Family members you nominate, where you have asked us to share visit records with them.
- Service providers who work for us — hosting, communications, payment processing — under contracts that require them to protect the data and use it only as we instruct.
- Authorities, where we are required to disclose by law or by a valid order.
We do not sell your personal data, and we do not share it for anyone else's advertising.
Where it is stored, and for how long
Your data is stored on servers located in India. Documents such as prescriptions and identity certificates are stored separately from our public website and can only be retrieved through an authenticated request by someone entitled to see them.
We keep booking and clinical records for [RETENTION PERIOD — for example, seven years], because medical and consumer records may be needed long after the visit. Identity verification records for care partners are kept for as long as they are registered with us, and for [RETENTION PERIOD] afterwards. Data we no longer need is deleted or anonymised.
How we protect it
Access to patient records is restricted by role, so a member of staff can see only what their job requires. Documents are held outside the public web root and are served only to an authenticated, authorised requester. Connections to our platform are encrypted. Sign-in attempts are rate limited, and accounts lock after repeated failures.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board as the law requires.
Your rights
Under the Digital Personal Data Protection Act 2023 you may ask us to:
- Tell you what personal data of yours we hold, and who we have shared it with.
- Correct anything that is inaccurate or incomplete.
- Erase personal data we no longer need for the purpose it was collected for.
- Nominate someone to exercise these rights on your behalf if you die or become incapable of doing so.
Write to our Grievance Officer using the details below. We will respond within the time the law allows. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Children
Our services may be booked for a patient under 18, but the account holder must be an adult. Where the patient is a child, we process their data on the instruction of the parent or guardian who booked the care. We do not knowingly allow anyone under 18 to hold an account, and we do not use children's data for tracking or advertising.
Changes to this notice
We update this notice when what we do with your data changes. The version number and the date it was published are shown at the top of this page. Where a change materially affects you, we will tell you before it takes effect.
Contact and grievance redressal
Our Grievance Officer under the DPDP Act 2023 and the Information Technology Rules is:
- Name: Rishab Jain
- Email: support@homecaresaathi.in
- Address: B-26 Mansaram Park, Uttam Nagar West Delhi-110059
- Response time: within 15 days of receiving your request
For anything else, contact our support team on the helpline or email shown on this site.