Privacy policy.
Last updated: [date to be confirmed]
Draft. This page describes how HospAux works today. It is to be reviewed by a lawyer before HospAux takes payments or opens to students.
Who we are
HospAux, [registered address to be confirmed] ("HospAux", "we"), decides how your personal data is used for HospAux. Write to us about it at hello@hospaux.com.
What we collect
- Your account: your name, email address and mobile number (with its country code), and your password, which we store only as a secure hash. If you sign in with Google, your name, email and Google account ID, and the mobile number you add. When you sign up we email you a code to confirm the address is yours; the code is kept only until it's used or expires.
- Your learning: the tasks you've learned and practised and your results, your data entry drill and case scenario scores, your assessment attempts and certificates, your weekly plan and any finish date you set.
- Institutes: the batches you join, and, if your institute imports a class list, the name and email it lists for you.
- Payments: the course, amount, order number and status. Your card, UPI or bank details go to our payment provider, Razorpay, and we don't receive or store them.
- Certificates: the name you confirm to print, the course, grade, number and date.
- Meeting requests and messages: what you send us through this website's form or by email.
- Technical data: a sign-in cookie, settings saved on your device, and server logs (such as IP address and browser) kept for security.
Why we use it
To run your account and your courses, save your progress, mark assessments and issue certificates, take payments and keep the records the law requires, let the institutes you join follow your progress, answer your messages, and keep HospAux secure. We don't sell your data, and we don't use it for advertising.
Who sees it
- Your institute's staff, for the batches you join. Not your mobile number: only you and HospAux see that.
- Anyone with your certificate's number sees its name, course, grade, date and whether it's still in force.
- Service providers who work for us: our hosting provider, Razorpay for payments, our email provider, Cloudflare for this website and its meeting form, Sentry for reports of errors in the app (what went wrong and where, never your password or what you typed), Google for “Continue with Google” sign-in if you use it, and Google Fonts for the website's fonts.
- Authorities, when the law requires it.
Where it's stored and for how long
Your data is stored with Railway (Singapore). We keep it while your account is open. You can delete your account at any time from your profile, or ask us to. Deleting it erases your data at once, except payment and tax records, which we keep as long as the law requires, and the record of certificates already issued, so they can still be checked; neither stays linked to your email (a certificate still shows the name printed on it). Copies in our backups are deleted as the backups expire, within a year.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us for a summary of your personal data and how we use it, correct or update it, have it erased (you can delete your account yourself, from your profile), withdraw your consent, have a grievance addressed, and nominate someone to act for you. Write to hello@hospaux.com; we reply within the time the law sets.
Children
If you're under 18, we need the consent of your parent or guardian before you use HospAux.
Security
Passwords are stored only as secure hashes, connections are encrypted, staff access is limited to what each role needs, and changes made by admins are recorded in an audit log.
Cookies
The HospAux app uses one cookie, to keep you signed in. We don't use advertising or tracking cookies. This website loads its fonts from Google Fonts, and counts its visits with Cloudflare Web Analytics, which sets no cookies and doesn't identify you: it counts the pages viewed, the site a visitor came from, their country and the kind of device.
Grievance Officer
[Grievance Officer's name to be confirmed], hello@hospaux.com.
Changes
If we change this policy, we'll show the new date at the top, and tell you of important changes.