Privacy policy.
Last updated: [date to be confirmed]
Draft. This page describes how HospAux works today. It is to be reviewed by a lawyer before HospAux takes payments or opens to students.
Who we are
HospAux, [registered address to be confirmed] ("HospAux", "we"), decides how your personal data is used for HospAux. Write to us about it at info@hospaux.com.
What we collect
- Your account: your name and email address, and your password, which we store only as a secure hash. If you sign in with Google, your name, email and Google account ID.
- Your learning: the tasks you've learned and practised and your results, your data entry drill and case scenario scores, your assessment attempts and certificates, your weekly plan and any finish date you set.
- Institutes: the batches you join, and, if your institute imports a class list, the name and email it lists for you.
- Payments: the course, amount, order number and status. Your card, UPI or bank details go to our payment provider, Razorpay, and we don't receive or store them.
- Certificates: the name you confirm to print, the course, grade, number and date.
- Meeting requests and messages: what you send us through this website's form or by email.
- Technical data: a sign-in cookie, settings saved on your device, and server logs (such as IP address and browser) kept for security.
Why we use it
To run your account and your courses, save your progress, mark assessments and issue certificates, take payments and keep the records the law requires, let the institutes you join follow your progress, answer your messages, and keep HospAux secure. We don't sell your data, and we don't use it for advertising.
Who sees it
- Your institute's staff, for the batches you join.
- Anyone with your certificate's number sees its name, course, grade, date and whether it's still in force.
- Service providers who work for us: our hosting provider, Razorpay for payments, our email provider, Cloudflare for this website and its meeting form, and Google Fonts for the website's fonts.
- Authorities, when the law requires it.
Where it's stored and for how long
Your data is stored with Railway (Singapore). We keep it while your account is open. When you close your account we delete it, except payment and tax records, which we keep as long as the law requires, and the record of certificates already issued, so they can still be checked.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us for a summary of your personal data and how we use it, correct or update it, have it erased, withdraw your consent, have a grievance addressed, and nominate someone to act for you. Write to info@hospaux.com; we reply within the time the law sets.
Children
If you're under 18, we need the consent of your parent or guardian before you use HospAux.
Security
Passwords are stored only as secure hashes, connections are encrypted, staff access is limited to what each role needs, and changes made by admins are recorded in an audit log.
Cookies
The HospAux app uses one cookie, to keep you signed in. We don't use advertising or tracking cookies. This website loads its fonts from Google Fonts.
Grievance Officer
[Grievance Officer's name to be confirmed], info@hospaux.com.
Changes
If we change this policy, we'll show the new date at the top, and tell you of important changes.