Privacy Notice

Version privacy-1.2-draft · Effective 24 August 2026

Who we are

Csyte is an appointment-booking platform for hospitals and clinics in India. It is operated by CSYTE LLP. Csyte books appointments; it is not a medical provider and gives no medical advice.

What we collect, and where

• Account — your mobile number, verified by one-time password through Google Firebase. Optionally a display name and photo.
• Patient registration — for each person you book for: name, father's name, age, gender, phone, address, and Aadhaar number. The address and the Aadhaar number are stored encrypted (AES-256-GCM); only the last 4 Aadhaar digits are ever displayed — in the app, on receipts, or to hospital staff. Aadhaar is optional for children under 10.
• Booking — the doctor, hospital, slot, and the symptom description you type, which is stored encrypted and shown only to you. Hospital staff see the patient's identity for the visit; your symptom text is not part of their appointment screen.
• Payments — order and payment identifiers, amounts, and the tax invoice. Card, UPI and banking credentials are entered directly with Razorpay and never reach or get stored by Csyte. We send Razorpay no name, phone or email with your order.
• Notifications — if you enable push, the device's push token. Notification content is generic ("Appointment confirmed") and never carries medical details.
• Support chat — messages you type are answered automatically and are not stored.
• Scanned clinic QR codes — if you scan a clinic's printed QR code, Csyte records that a scan happened, which code it was, and a coarse device type (Android, iPhone, or a web browser). Your IP address, your browser's identifying string and your identity are not stored. So that a clinic can tell twelve people apart from one person scanning twelve times, the scan is tagged with a one-way code derived from your address, your browser and that day's date — which means two scans on different days cannot be linked to one another, by the clinic or by us. The clinic sees counts, never who scanned.
• Approximate location — only if you tap Nearest first on the clinic list, read the panel it opens, and confirm. Your device is asked for a rough position, never a precise fix; it is rounded to about a kilometre before it leaves your device, and our servers refuse a finer one. It is used for one purpose — ordering that list by how near each clinic is — and is then gone: not stored on your device, against your account, or in our records, and the response built from it is marked so that no cache may keep it. Nothing is asked for until you confirm, you can use the city selector instead at any time, and refusing costs you nothing but the ordering. Distances shown are approximate for the same reason, which is why they read “~ 3 km” rather than a precise figure.
• Cookies and browser storage — exactly one cookie, the session cookie that keeps you signed in. No analytics, advertising or tracking cookies exist on this site, and no analytics SDK ships in the apps. If you arrive from a scanned QR code, one short-lived token is held in that browser tab — not a cookie — for up to two hours, purely so that a booking you go on to make can be counted against that poster. It names nobody, is cleared the moment it is used, and disappears when you close the tab.

Why we process it

To identify the patient to the hospital you book at; to run bookings, payments, refunds and invoices; to send transactional notifications about your appointments; to tell a clinic how many people its own printed QR codes reached and how many went on to book; to order the clinic list by distance when you ask for that and only while you are looking at it; and to keep the service secure (every access to patient records is logged). Csyte does no advertising, no profiling, and never sells personal data — and an approximate location is never used for any of the other purposes on this list.

Who receives it

• The hospital you book at — the patient's identity details for that visit, shown to its signed-in staff only, with every view logged.
• Razorpay — processes payments. Receives the order amount and identifiers; collects your payment credentials directly under its own privacy policy.
• Google (Firebase / Google Cloud) — phone sign-in, push delivery, crash reporting (crash reports carry no personal or medical content), and the cloud infrastructure Csyte runs on. Our databases and storage run in Google Cloud's Mumbai region (asia-south1), and database backups are kept in Google Cloud's Delhi region (asia-south2) — both in India.
• Talsec freeRASP — device-integrity checks in the mobile apps (root/tamper detection), receiving device-integrity signals, not your records.

There are no other recipients. No data broker, ad network or analytics provider is involved.

How long we keep it

Your account and patient records are kept until you delete them (below). Payments and tax invoices are retained as Indian tax and financial-record law requires, linked to an internal identifier rather than your name once you delete your account. The access log that records who touched which record is append-only and never contains the record's contents. Sign-in sessions are pruned automatically after they expire. Support-chat text is not retained at all.

Your rights, and the buttons that exercise them

• Access / download — Account → Download my data gives you everything Csyte holds about you as one file, including a log of who accessed your records.
• Correction — re-submit your registration to correct your own details, any time. In the Csyte app you can also edit a family member's record directly; on the web, family corrections can be requested.
• Withdraw consent — one tap on the Account page, as easy as granting it. Booking and new data collection stop immediately; you can re-consent whenever you choose.
• Erasure — Account → Delete my account, or see the deletion page. In the Csyte app you can also remove a single family member without deleting your account.
• Grievance — write to Aditya Kumar at grievance@csyte.com. If unresolved, you may complain to the Data Protection Board of India.

Children

Appointments for children are booked by a parent or guardian from their own account, on their declaration of that authority. Aadhaar is optional for children under 10. Csyte shows children's records only to the booking account and the treating hospital.

Security

Sensitive fields (Aadhaar, address, symptoms) are encrypted at rest with AES-256-GCM; everything moves over TLS; access to patient records is logged to an append-only audit trail; hospital staff see masked patient lists and every unmasked view is recorded. Csyte stores no payment credentials of any kind.

Changes to this notice

This notice is versioned. A change that matters to you bumps the version at the top of this page, and a change to what you have consented to is re-presented for consent in the app.

Questions: support@csyte.com. See also the Terms & Conditions, which form the binding agreement.