JanAushadhiOnlineCart

Privacy notice

Last updated 17 August 2026. This notice is issued under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

JanAushadhiOnline is operated by not yet published, not yet published. In this notice, "we" means that company and "you" means the person using the app.

1. What we collect, and why

| What | Why we need it | Can you refuse? |

|---|---|---|

| Mobile number | To create your account, confirm orders, and let a pharmacist reach you | No — it is the account |

| Delivery address | To deliver medicine to you | No, for delivered orders |

| Order history | To show past orders, enable reorder, and meet retention duties under pharmacy law | No |

| Prescriptions you share | So a registered pharmacist can verify what may lawfully be dispensed | Only if you order Schedule H, H1 or X medicines |

| Relationship label ("Papa", "Amma") | So reordering is easier | Yes — it is optional and free text |

| Searches that returned no match | To decide what to add to the catalogue | No, but they are stored without your identity attached |

We do not collect your name, date of birth, gender, Aadhaar, PAN, or any government identifier. We do not ask for them and the app has no field for them.

2. Prescriptions are sensitive personal data

A prescription is health data. Under the DPDP Act it is personal data processed on the basis of your consent, and under the SPDI Rules it is sensitive personal information. Accordingly:

  • Only a pharmacist registered with a State Pharmacy Council can open a prescription you send.
  • Access is logged. Every view is recorded against a named user with a timestamp.
  • Prescriptions are never used for advertising, never used to build an audience, and never sold, shared or licensed to any third party for their own purposes.

3. Consent, and how to withdraw it

We ask for consent separately for each purpose, and every consent is independent. Two are required to place an order: account and fulfilment, and the health-data consent that lets a pharmacist read your prescription. Everything else is optional.

Withdrawing a consent is as easy as giving it. Open Profile → Privacy and consent and switch it off; the change takes effect immediately. Refusing or withdrawing an optional consent never blocks an order and never changes a price.

Where a number has already been passed to a pharmacy partner for an order, it exists in that partner's records. Withdrawal stops further sharing but cannot retrieve what was already sent — the law obliges that partner to keep its own dispensing records.

4. Who else sees your data

  • **The dispensing Kendra.** not yet published, a registered Janaushadhi Kendra, receives your number, address and the order contents, because it is the entity that lawfully dispenses and hands over the medicine.
  • **The delivery partner.** Name on the parcel, address, phone number. Nothing about what is inside.
  • **The payment processor.** We never see or store your card number, UPI PIN or bank credentials.
  • **No advertising network.** No medicine name, search term, condition or prescription ever leaves our systems for an ad platform. There is no advertising in this app.

We do not sell personal data. We do not run a data-broking business. We have never received a payment for access to a customer list and we do not intend to.

5. How long we keep it

  • **Prescriptions and sale records for Schedule H, H1 and X medicines:** retained as long as the Drugs and Cosmetics Rules, 1945 require the dispensing pharmacy to retain its register. This obligation survives the deletion of your account. What is retained is the sale record; identifiers that are not legally required are erased.
  • **Order history and addresses:** until you delete your account.
  • **Consent records:** for as long as we rely on the consent, plus the limitation period, because we must be able to prove what you agreed to and when.

6. Your rights

Deleting your account

You can delete your account at any time, from Profile → Delete account in the app, or on the web at https://janaushadhionline.com/account/delete — which works without installing the app.

Erased immediately: your sign-in, your phone number, your saved addresses, the family members you added, your reminder and marketing preferences, and any prescription image we have not dispensed against.

Kept, because the law requires it and for no other purpose: records of medicines dispensed to you and the prescriptions that authorised them, for as long as the Drugs and Cosmetics Rules, 1945 require a pharmacy to keep its register; and invoices, for six years, under the GST rules. These are detached from your account, your phone number is replaced with a one-way code, and no member of staff can look you up by name or number afterwards.

Deletion cannot be undone. Ordering again afterwards starts a new account with no history.

Under sections 11 to 14 of the DPDP Act you may ask for a copy of your data, ask us to correct or complete it, ask us to erase it, nominate someone to exercise your rights if you cannot, and raise a grievance.

Write to not yet published. Our Grievance Officer is not yet published. We reply within seven days. If our answer does not satisfy you, you may complain to the Data Protection Board of India.

7. Children

The app is for people aged 18 and over. We confirm age at sign-up. We do not knowingly process the data of a child, and we do not run behavioural advertising or tracking directed at children, as section 9 of the DPDP Act prohibits.

8. Security

Data in transit is encrypted with TLS. Prescriptions are stored encrypted at rest with access restricted by role, so only accounts held by registered pharmacists can decrypt them. Access to production data is logged and reviewed. We will notify you and the Data Protection Board of a personal data breach as section 8(6) requires.

9. Changes

If we change how we use your data in a way that needs your agreement, we will ask again rather than assume. Material changes are notified in the app before they take effect.

10. Contact

not yet published

not yet published

Privacy: not yet published · Grievance Officer: not yet published