RemedionAI ("RemedionAI," "we," "us," or "our") provides an AI-powered practice management and remedy-analysis platform for homoeopathic practitioners at remedionai.com. This policy explains what information we collect, how we use it, and the choices you have.
This policy uses two terms throughout:
- Doctor — the practitioner who creates a RemedionAI account, signs in (including via Google), and uses the platform.
- Patient — an individual whose clinical and contact information a Doctor enters into RemedionAI as part of managing their practice. Patients do not create their own RemedionAI accounts or sign in to the platform.
1. Information We Collect
1.1 Doctor account information
- Name, email address, and password (stored as a salted hash, never in plain text) if you register directly.
- Name, email address, and profile picture if you sign in with "Sign in with Google" instead.
- Billing and subscription details (plan tier, payment status) — see Section 1.4 for how payments themselves are handled.
1.2 Patient records
Doctors enter the following about their own patients: name, age, gender, phone number, email address, presenting symptoms, and clinical/treatment notes. All of these fields are encrypted at rest using AES-256-GCM before being stored in our database — they are not stored as plain text.
1.3 Appointment data
Date, time, duration, appointment type, and any internal scheduling notes a Doctor adds. Appointment notes are encrypted at rest and are never sent to Google Calendar (see Section 2).
1.4 Payment information
Subscription payments are processed by Razorpay and, for UPI/GPay transactions, directly between the Doctor and their payment app. RemedionAI does not receive or store full card numbers, UPI PINs, or bank account credentials — we retain only the transaction status and amount needed for billing records.
1.5 Technical and usage data
Standard server logs (IP address, browser type, timestamps, pages accessed) for security monitoring, fraud prevention, and diagnosing issues.
1.6 Mobile number and Student Offer information
If you claim a free trial or register for the Student Offer, we collect your mobile number. For the Student Offer we also collect your student ID number and an image of your student ID card. We use these to verify eligibility, manage and limit use of the offer, and protect against misuse. Student ID card images are stored in access-restricted storage and can be retrieved only by you and by authorized RemedionAI administrators when needed for verification, security, administration, or legal obligations.
2. Google User Data We Access
If you connect a Google Account to RemedionAI, we request the following, and only the following, permissions:
| Feature | Scope requested | What we do with it |
|---|---|---|
| Sign in with Google | openid, email, profile |
Create and authenticate your Doctor account using your name, email address, and profile picture. We do not read your Gmail, Drive, or Contacts. |
| Google Calendar sync (optional) | calendar.events |
Create, update, and delete events on your own Google Calendar corresponding to appointments you schedule in RemedionAI. We request the narrower "events" scope, not full Calendar access. |
If you separately turn on "Send patients a Google Calendar invitation" (off by default), the patient's email address is shared with Google as an event attendee so Google can send them a calendar invite directly. This is entirely optional and can be turned off at any time; it does not affect events already created.
We do not sell Google user data, use it for advertising, or share it with any party other than Google itself (to create the calendar events you've asked for). You can disconnect Google Calendar at any time from the Appointments tab — this revokes our access going forward but does not delete events already placed on your calendar.
3. How We Use Information
- Operate core features: patient records, appointment scheduling, and AI-assisted remedy analysis.
- Send appointment reminder emails and account-related emails (password resets, receipts).
- Process subscription payments and prevent billing fraud.
- Maintain security: detect abuse, rate-limit requests, and lock accounts after repeated failed logins.
- Verify Student Offer eligibility and prevent misuse of the offer.
- Respond to support requests.
4. How We Protect Information
- Patient PII (name, age, gender, symptoms, notes, phone, email) is encrypted at rest with AES-256-GCM.
- All traffic between your browser and our servers is encrypted with HTTPS/TLS.
- Sessions are authenticated with JWTs; refresh tokens are stored in HttpOnly, Secure, SameSite cookies rather than browser storage accessible to scripts.
- Google Calendar refresh and access tokens are encrypted at rest and are never exposed to the browser.
- Passwords are hashed and salted; repeated failed login attempts trigger temporary account lockout.
No system is perfectly secure, and we cannot guarantee absolute security, but we apply industry-standard safeguards throughout.
5. Who We Share Information With
We do not sell personal data, and we do not share it for advertising purposes. We share data only with the service providers needed to run RemedionAI:
- Google — for Sign in with Google and, if connected, Calendar sync (Section 2).
- Razorpay — to process subscription payments.
- Our transactional email provider — to deliver password-reset, receipt, and appointment-reminder emails.
- Law enforcement or regulators — only where required by applicable law.
Student ID card images and Student Offer details are not shared with any third party other than our hosting infrastructure and where required by law.
6. Data Retention
We retain account and patient data for as long as a Doctor's account remains active, plus a reasonable period afterward for accounting, legal, and dispute-resolution purposes. A Doctor may request deletion of their account and associated data at any time (Section 7).
Student ID card images are kept only as long as needed for verification, eligibility management, security, administration, and legal obligations, and are then deleted. To prevent repeated use of the Student Offer, we keep a record of the mobile number used for Student Offer registration, and the fact of that registration, even after an account is deleted. This record is used only for that purpose.
7. Your Rights and Choices
- Access or correct your account or patient data by editing it directly in the app, or by contacting us.
- Delete your account and associated data by contacting us at the email below. Deletion does not remove the Student Offer record described in Section 6.
- Withdraw consent to processing at any time by contacting us. Withdrawal may mean we can no longer provide parts of the Service.
- Disconnect Google Calendar at any time from the Appointments tab.
- Revoke Google Sign-In access at any time from your Google Account permissions page.
8. Children's Privacy
RemedionAI is intended for use by licensed practitioners, not by children. Patient records may include minors' information where a Doctor is treating a minor patient; responsibility for any required parental or guardian consent for that treatment relationship rests with the treating Doctor. RemedionAI accounts, including Student Offer registration, are for adults aged 18 or over.
9. Where Data Is Stored
RemedionAI is hosted on Amazon Web Services (AWS) cloud infrastructure. RemedionAI Private Limited is incorporated in India, and data is primarily processed and stored in accordance with Indian law.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by updating the effective date at the top of this page.
11. Contact Us
Questions about this policy or your data can be sent to contact@remedionai.com.
Grievance Officer: Grievance Officer, RemedionAI Private Limited — contact@remedionai.com. Grievances are acknowledged within 48 hours and addressed within one month of receipt.
RemedionAI Private Limited · Mangalore, Karnataka, India