Privacy Policy

Last updated: January 2025

At MIOS (Medical Integrated Ophthalmic Software), operated by Mahati Innovations Private Limited ("we", "us", or "our"), we are committed to protecting the privacy of your patient data and your hospital's administrative information. This Privacy Policy details how we collect, process, secure, and manage information in compliance with the Digital Personal Data Protection (DPDP) Act, 2023, of India.

1. Database Isolation & Data Ownership

Unlike standard shared-cloud (multi-tenant shared database) systems, MIOS operates a strict database isolation strategy. Each hospital client is provisioned with a physically isolated PostgreSQL database. Your patients' personal data and clinical history reside strictly inside your database container and are never co-mingled or visible to any other hospital client.

2. Information We Collect

  • Lead & Sign-up Information: Full name, hospital name, registration details, email address, phone/WhatsApp number, and location.
  • Patient Data (On behalf of Clinicians): Name, age, gender, contact details, diagnostic test parameters, clinical prescriptions, optometrist charts, visual acuity, keratometry, and surgical records. Under the DPDP Act, the hospital acts as the Data Fiduciary, and we act as the Data Processor.

3. Data Processor Obligations

As a Data Processor, we act solely on the instructions of the Hospital Client (Data Fiduciary). We implement physical, electronic, and administrative controls to protect patient health records. We do not access, analyze, share, or sell clinical data to third parties, pharmaceutical agencies, or search engines.

4. Data Security & Storage

All data is hosted within secure data centers in India. Data in transit is encrypted using TLS 1.3, and backups are stored encrypted using AES-256. Database containers are restricted by firewalls, allowing access only to authorized app instances.

5. Contact

If you have any questions or data principal requests (access, correction, or erasure under the DPDP Act), please contact our Data Protection Officer at privacy@mios.in.