AHCS Privacy Policy

1. Our Core Privacy Commitment

AHCS (Advanced Health Care System, "we", "us", or "our") provides sovereign digital health identities and patient-directed clinical access. We believe that your health records belong solely to you. We do not sell, rent, commercialize, or monetize your health data under any circumstances.

2. Data We Collect & Process

• Authentication Data: Mobile phone number and email address verified via cryptographic one-time passwords.
• Demographics & Vitals: Full legal name, date of birth, gender, user-declared blood group, and emergency contact details.
• Verification Proofs: Cryptographic SHA-256 hashes of government identity documents (Aadhaar, PAN, Voter ID, Passport) stored in private encrypted vaults.
• Audit Telemetry: Immutable audit records of logins, document updates, QR scans, and consent grants including timestamps and masked IP addresses.

3. Patient-Directed Consent Barrier

No healthcare provider, clinic, hospital, doctor, or corporate sponsor can access your clinical prescriptions, lab diagnostics, or doctor notes without your explicit, time-bounded consent. You maintain the right to revoke consent at any moment with instant effect.

4. Break-Glass Emergency QR Data Minimization

In life-threatening situations where a first responder scans your physical or digital health card, our emergency gateway applies strict data minimization: only life-critical parameters (blood group, critical allergies, emergency contact phone) are disclosed. Your full diagnosis records remain private and encrypted.

5. Data Storage, Encryption & Security

All data in transit is encrypted using TLS 1.3. Identity documents and clinical records at rest are secured with AES-256 encryption. We utilize managed, isolated relational cloud infrastructure with continuous security telemetry.

6. Your Rights Under DPDP Act 2023

As a Data Principal under Indian law, you have the right to access your health data, request correction of inaccurate records, nominate emergency representatives, and request account deletion or data portability through our Data Protection Officer at privacy@ahcs.in.