Privacy policy
ShasthoLipi ("we") provides digital prescription, patient-record and front-desk software for doctors and their chamber staff in Bangladesh, on the web at app.shastholipi.com and in the ShasthoLipi Android app. This policy explains what information we handle, why, and the choices you have.
Who this applies to
- Doctors who hold a ShasthoLipi account.
- Compounders and front-desk staff whose accounts a doctor links to their chamber.
- Patients, whose details doctors and their staff record in ShasthoLipi. The doctor is responsible for the patient records they keep; ShasthoLipi stores and processes them on the doctor's behalf.
Information we handle
Account information: name, email address, password (stored only in encrypted form), role, the chamber and practice details a doctor enters for their prescription pad (qualifications, BMDC number, chamber address, schedule), and plan status.
Patient and clinical records entered by a doctor or their staff: patient name, mobile number, age, sex, blood group, allergies, address, vital signs, complaints, history, examination findings, diagnoses, investigations, medicines, advice, follow-up dates, notes, appointments, and uploaded reports (lab reports, X-rays, previous prescriptions).
Technical information needed to run and secure the service, such as sign-in times, the app version, and error details you choose to send with "Report a problem".
We do not sell personal information, and we do not use patient records for advertising.
How we use it
- To provide the service: writing, saving, printing and sending prescriptions; patient records; appointments, check-in and queues; follow-up reminders.
- To send the SMS a doctor or front desk asks for: prescription links, appointment confirmations, reschedules, cancellations and follow-up reminders.
- To keep accounts secure: password checks, password-reset emails, and access rules between doctors and their linked staff.
- To help when you report a problem.
Meghla, the clinical assistant
Meghla is optional and must be unlocked by the doctor. When a doctor uses it, the clinical details needed for the request (such as age, sex, vital signs, diagnosis and medicines) are sent to Google's Gemini service to produce a suggestion. The patient's name and mobile number are not sent. Meghla only suggests; the doctor decides what goes on the prescription.
Who we share information with
Only the service providers needed to run ShasthoLipi, under their own security and privacy terms:
- Supabase: database, file storage and sign-in.
- An SMS gateway in Bangladesh: delivers the SMS you choose to send.
- Google (Gemini): Meghla requests, as described above.
- An email provider: account and password-reset emails.
We may also disclose information when Bangladeshi law or a valid legal request requires it.
Within a chamber: a doctor's linked compounder sees appointments and basic patient details, and sees a patient's earlier prescriptions only when the doctor allows it.
Android app permissions
- Internet: to sync with your account.
- Camera and files: only when you choose to add a report or a photo.
- Notifications (optional): new patients in the queue and access requests while the app is running. Turn them off in More → Settings.
- Printing: uses Android's own print service when you choose Print.
Prescriptions saved without internet stay on the device until they sync.
Keeping information safe
Data travels over encrypted connections (HTTPS) and is protected by access rules, so each doctor and their linked staff see only their own chamber's records. Shared prescription links are private and hard to guess. No system is perfectly secure: please use a strong password and sign out on shared devices.
How long we keep it
We keep account and clinical records while the doctor's account is active, because medical records need to stay available for patient care. When an account is deleted we remove its data within 30 days, except where the law requires us to keep it longer.
Your choices
- Doctors and staff can view and update their details in the app and on the web.
- You can ask us to delete your account from the app (More → Delete account), from Settings on the web, or by email.
- For a copy of your data or a correction, email mtahbib@gmail.com. Patients who want a copy or a correction of their record should contact their doctor, who controls that record; we will help the doctor respond.
Children
ShasthoLipi is used by doctors and their staff. Children's health information is entered only by doctors as part of their care.
Changes
We will update this page when our practices change and show the new date at the top.
Contact
ShasthoLipi · mtahbib@gmail.com · +880 1688-789684