Privacy Policy
Effective date: January 1, 2025
1. Overview and Purpose
VitaMend operates an online platform to facilitate the safe redistribution of unopened, unexpired surplus medicines from individual donors and institutions to certified community health clinics and registered non-profit healthcare providers in India. This Privacy Policy describes how we collect, store, and process your data.
2. Information We Collect
We collect only information necessary to authenticate users, facilitate donations, and fulfill verification obligations:
- Account Information: Name, email address, password hash, and optional institutional role (donor, volunteer, clinic representative).
- Donation and Request Data: Medicine brand name, generic chemical name, manufacturer, batch number, expiry date, package quantity, and city or pickup location.
- Uploaded Packaging Images: Photographs of medicine strips, packaging cartons, or blister packs submitted for OCR scanning and pharmacist review.
- Technical Logs: Browser user-agent and IP addresses stored temporarily for rate limiting and fraud prevention.
3. Data Storage and Infrastructure
Your user account data, medicine inventory records, and audit logs are securely stored in MongoDB Atlas cloud databases with encryption at rest and TLS encryption in transit. Uploaded packaging images are stored in secure blob object stores with restricted access.
4. AI and OCR Processing
When you upload a medicine packaging photo, the image is transmitted securely to Google Gemini AI models for optical character recognition (OCR). The AI service extracts text including the drug name, expiration date, and batch number. These images are processed exclusively for text extraction and are never used to train external public models. Final distribution decisions are always verified by human personnel.
5. Information Sharing and Disclosure
VitaMend does not sell, rent, or trade your personal information. Information is shared only under the following strictly defined conditions:
- With Registered Partner Clinics: Only donation item details and logistics pickup/dropoff coordinates are provided to coordinating receiving clinics.
- Infrastructure Providers: Database and hosting services (Vercel, MongoDB Atlas, Upstash Redis) operating under strict data protection agreements.
- Legal and Regulatory Compliance: When required by statutory Indian healthcare authorities or law enforcement subpoenas.
6. User Rights and Data Deletion
You have the right to review, update, or request deletion of your account and personal records at any time. To request data export or permanent account deletion, please email us directly. We will process your request within 30 business days, subject to mandatory statutory retention requirements for completed medicine transfer manifests.
7. Contact Information
For privacy inquiries, data access requests, or policy questions, please contact our data team at:
Email: contact@vitamend.in