Privacy Policy

This Privacy Policy explains how MyQRMart ("MyQRMart", "Qura", "we", "us", "our") collects, uses, shares, and protects information when you use the Qura mobile app, the Qura web app, or any Qura-branded service made available to patients, doctors, hospital staff, and hospital administrators (together, "the Service").

Qura is a queue-management and hospital-operations platform. When you use Qura at a specific hospital or clinic, that hospital or clinic is the data controller for your health records and clinical data, and MyQRMart acts as its data processor / technology provider. This policy covers what MyQRMart itself does with your data as the platform operator.

1. Information we collect

2. How we use your information

• To create and secure your account, and verify you via OTP.
• To run the queue: joining, calling, serving, rescheduling, and completing your visit.
• To let doctors and hospital staff view the health information relevant to your visit.
• To recommend nearby hospitals when you enable location.
• To process booking-fee payments and show you your payment/visit history.
• To send you transactional notifications (queue turn, delays, visit summaries).
• To provide customer support.
• To maintain, secure, debug, and improve the Service.
• For MyQRMart's own internal business purposes — analytics, product development, and research across our company's products and services (see §5).
• To send you marketing and promotional messages about Qura and other MyQRMart products, where you have not opted out (see §5).
• To comply with legal obligations and enforce our Terms & Conditions.

3. How we share information

• The hospital/clinic you visit — as the data controller of your clinical record.
• Razorpay (payment processor) — to process booking-fee payments and refunds. See Razorpay's Privacy Policy.
• Firebase Cloud Messaging (Google) — to deliver push notifications to your device.
• WhatsApp Business Platform (Meta) — to deliver OTPs, queue alerts, and visit notifications you receive over WhatsApp.
• Email and SMS delivery providers — to send OTPs, visit summaries, and receipts.
• Law enforcement or regulators — only where required by applicable Indian law.
• Other MyQRMart group companies/services — for the internal business and marketing purposes described in §5, under this same policy.

We do not sell your personal data to third parties for their own independent marketing.

4. Notifications — push, WhatsApp, email, SMS

Qura communicates with you over four channels. Each channel carries two kinds of messages:

5. Marketing & company use of your data

In addition to running the Service, MyQRMart uses account, usage, and (where you've consented) contact data for its own business purposes: understanding how Qura is used, improving the product, building new features, generating aggregated/anonymised business insights, and — unless you opt out — telling you about Qura features and other MyQRMart products and services. This is standard "controller-for-our-own-purposes" use of platform data, separate from the hospital's use of your clinical record. You can opt out of promotional messaging at any time without affecting your ability to use Qura for queue management.

6. Payments & Razorpay

Where a hospital enables self-booking, a booking fee may apply before you can confirm a queue slot; the amount, if any, is shown to you before you pay. All payments are processed by Razorpay Software Pvt. Ltd., a licensed payment aggregator. Qura/MyQRMart never receives or stores your card number, UPI ID, or net-banking credentials — only a payment status and reference ID from Razorpay. Refunds, where applicable, are issued back to your original payment method via Razorpay; see Terms & Conditions §5 for the refund policy.

7. Data retention

We retain account and visit data for as long as your account is active, and for a reasonable period after that to meet legal, accounting, and dispute-resolution obligations (typically up to 7 years for payment/financial records, in line with Indian tax law). Clinical data is retained per the retaining hospital's own policy and applicable healthcare recordkeeping law.

8. Your rights & account/data deletion

You can, at any time:

• Request a copy of the personal data we hold about you.
• Correct inaccurate profile information from within the app.
• Withdraw consent for optional location or marketing use.
• Delete your account and associated personal data — go to Profile → Settings → Delete Account in the Qura app, or email [email protected] with the subject "Delete my Qura account".

We process deletion requests within 30 days. Data we're required to keep for legal, tax, or dispute-resolution reasons (e.g. payment records) is retained in an archived, access-restricted form for the legally required period, then deleted. Clinical records held by a hospital follow that hospital's retention obligations under Indian healthcare law and are not deleted by MyQRMart directly — contact the hospital, or ask us to forward your request to them.

Account/data deletion request URL: [email protected] · In-app path: Profile → Settings → Delete Account

9. Security

All traffic between the app and our servers is encrypted in transit (HTTPS/WSS). Passwords are stored as salted hashes, never in plain text. Access to clinical data is restricted by hospital and role. No system is 100% secure, and we continually work to improve our safeguards.

10. Children's privacy

Qura accounts are intended for adults. A parent/guardian or hospital staff member may create and manage a visit record on behalf of a minor patient; Qura is not directed at children as independent users, and we do not knowingly allow a child to independently register an account.

11. Where your data is stored

Qura's infrastructure and databases are hosted in India. We do not knowingly transfer personal data outside India except where a third-party processor listed in §3 (e.g. Google Firebase, Meta WhatsApp) does so as part of its own global infrastructure.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app or by email before they take effect. Continued use of Qura after an update means you accept the revised policy.

13. Company & legal details

14. Contact us

Questions about this policy or your data: [email protected].