Terms of Service
1. Introduction and Acceptance of Terms
Welcome to MyDiabetesBox ("MyDiabetesBox", "the Platform", "we", "us", or "our"), a patient-doctor health management platform operated by MyDiabetesBox, a business registered under the Udyam (MSME) portal, Government of India ("the Company"). MyDiabetesBox is available via our website, our mobile application (Android and iOS), and our WhatsApp bot integration (collectively, the "Services").
These Terms of Service ("Terms") constitute a legally binding agreement between you ("User", "you", or "your") and the Company governing your access to and use of the Services. By creating an account, accessing, or using the Services in any capacity — whether as a Patient or as a Doctor — you confirm that you have read, understood, and agree to be bound by these Terms and by our Privacy Policy, which is incorporated herein by reference.
If you do not agree to these Terms, you must not access or use the Services. If you are using the Services on behalf of a minor or a patient under your care, you represent that you are authorised to do so and that you accept these Terms on their behalf.
2. Definitions
- "Patient": An individual User who registers on the Platform to log, track, and manage their own health data.
- "Doctor": A registered medical practitioner who uses the Platform to review health data of Patients who have linked their account to that Doctor, in a read-only capacity.
- "Admin": The Platform administrator responsible for oversight of the Platform, identified solely by an internal role designation.
- "Health Data": Any data relating to blood glucose readings, vitals, laboratory results, treatment history, diagnoses, prescriptions, and any other health-related information a User submits to the Platform.
- "Content": Any handouts, educational material, text, images, or other material made available through the Platform.
3. Eligibility
To use the Services, you must be at least 18 years of age, or be using the Platform under the supervision and consent of a parent, legal guardian, or treating physician if you are a minor. By registering, you represent and warrant that all information you provide is accurate, current, and complete.
Doctors registering on the Platform represent and warrant that they hold a valid and current medical licence/registration recognised in their jurisdiction of practice, and that all professional credentials provided to the Platform are true and accurate.
4. Nature of the Service — Important Medical Disclaimer
MyDiabetesBox is NOT:
- A substitute for professional medical advice, diagnosis, or treatment.
- An emergency service. In case of a medical emergency, you must contact emergency services or visit the nearest hospital immediately — do not rely on the Platform.
- A guarantee of Doctor responsiveness. The Platform enables Doctors to view Patient data, but does not guarantee that a Doctor will review, respond to, or act upon any data within any particular timeframe.
- A telemedicine consultation service, unless expressly stated otherwise for a specific paid feature.
You should always seek the advice of a qualified physician or other qualified health provider with any questions you may have regarding a medical condition, and never disregard professional medical advice or delay seeking it because of something you have read or recorded on the Platform.
All clinical validation ranges, warnings, and alerts shown within the Platform (including but not limited to blood pressure, blood glucose, and laboratory value ranges) are provided for informational and data-quality purposes only, and do not constitute medical advice or a diagnosis.
5. Account Registration and Security
Access to the Platform requires registration using your mobile number and verification via a one-time password (OTP), and/or a personal identification number (PIN) that you create. You are solely responsible for:
- Maintaining the confidentiality of your PIN and account credentials.
- All activities that occur under your account.
- Promptly notifying us of any unauthorised use of your account.
The Company is not liable for any loss or damage arising from your failure to comply with the above obligations. Doctor accounts require Admin approval before becoming active. While the Company utilizes reasonable administrative checks to verify medical registrations at the time of onboarding, it does not independently warrant the ongoing active status or daily clinical standing of any registered Doctor. The Company reserves the right to request supporting documentation to verify a Doctor's professional credentials at any time.
6. Roles and Permissions
6.1 Patients: Patients may log Health Data including sugar readings, vitals, laboratory results, treatment information, and diagnoses. Patients may link their account to one Doctor using a Doctor code, and may unlink at any time.
6.2 Doctors: Doctors are granted read-only access to the Health Data of Patients who have actively linked their account to that Doctor. Doctors may not edit, delete, or otherwise modify a Patient's Health Data. Doctors are solely responsible for how they use the information viewed on the Platform in the course of their independent clinical judgment and practice.
6.3 Admin: The Admin role is reserved for Platform oversight, including approving Doctor registrations, managing Platform-wide content such as educational handouts, and ensuring the Platform operates within these Terms.
7. Acceptable Use
You agree not to:
- Provide false, inaccurate, or misleading information, including false medical credentials.
- Use the Platform to impersonate any person or entity.
- Attempt to gain unauthorised access to another User's account or Health Data.
- Use the Platform for any unlawful purpose or in violation of any applicable law or regulation.
- Reverse-engineer, decompile, or attempt to extract the source code of the Platform, except as permitted by applicable law.
- Upload any content that is unlawful, defamatory, obscene, or infringes upon the rights of any third party.
- Interfere with or disrupt the integrity or performance of the Platform, including through malware, unauthorised scripts, or excessive automated requests.
8. Health Data, Privacy, and Data Protection
Your use of the Services is also governed by our Privacy Policy, which explains how we collect, use, store, and protect your Health Data. We process personal and health-related data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable data protection laws of India.
Health Data you submit is shared only with the Doctor you have actively linked your account to, and is not sold or shared with third parties for marketing purposes. You may request deletion of your account at any time through the account settings; certain data may be retained where required for clinical continuity, medical record-keeping obligations, or legal compliance, as further explained in our Privacy Policy.
Communications sent via our WhatsApp bot integration are processed through our Business Solution Provider in accordance with WhatsApp's Business Terms and applicable data protection law.
9. Fees and Payments
Certain features of the Platform are currently offered free of charge. The Company reserves the right to introduce fees for specific features in the future, including but not limited to Doctor registration fees, premium educational content, sponsored or partnered content, or other value-added services ("Paid Features").
Where Paid Features are introduced, the applicable pricing, payment terms, and refund policy (if any) will be clearly communicated to you prior to purchase, and your continued use of such Paid Features will constitute acceptance of the specific terms disclosed at that time. All payments, where applicable, will be processed through a secure third-party payment gateway, and the Company does not store your payment card details.
Any sponsored or partnered content displayed on the Platform (such as educational handouts supported by third parties) will be clearly disclosed as such, in line with applicable healthcare marketing regulations, including the Uniform Code for Pharmaceutical Marketing Practices (UCPMP).
10. Intellectual Property Rights
All content on the Platform, including the MyDiabetesBox name, logo, tagline ("Track. Manage. Conquer."), design, graphics, software, and educational handouts authored by the Company, is the intellectual property of the Company or its licensors and is protected by applicable intellectual property laws.
You are granted a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform for personal, non-commercial purposes (for Patients) or professional clinical purposes (for Doctors), strictly in accordance with these Terms. You may not reproduce, distribute, modify, or create derivative works of any Platform content without prior written consent from the Company, except where such content is expressly made available for download and further distribution (such as patient handouts).
Health Data you submit remains yours. By submitting Health Data, you grant the Company a limited licence to store, process, and display that data solely for the purpose of providing the Services to you and your linked Doctor.
11. Third-Party Services
The Platform relies on third-party service providers, including but not limited to Google Firebase (hosting, database, authentication, and cloud functions) and our WhatsApp Business Solution Provider, to deliver the Services. Your use of the Platform is also subject to the applicable terms and privacy policies of these third-party providers. The Company is not responsible for the acts, omissions, or service interruptions of third-party providers, though we take reasonable steps to select and monitor reliable providers.
12. Disclaimers and Limitation of Liability
THE SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, OR NON-INFRINGEMENT.
To the fullest extent permitted by applicable law, the Company shall not be liable for:
- Any decision made, or action taken, by a Doctor or Patient based on information available on the Platform.
- Any delay, failure, or interruption in the availability of the Platform, including due to third-party service outages.
- Any indirect, incidental, special, consequential, or punitive damages arising out of or relating to your use of the Services.
- Any loss of data, subject to the Company's reasonable efforts to maintain data backups and security.
Nothing in these Terms shall limit or exclude the Company's liability for death or personal injury caused by its gross negligence, fraud, or any other liability that cannot be excluded or limited under applicable Indian law.
13. Indemnification
You agree to indemnify and hold harmless the Company, its founders, employees, and affiliates from and against any claims, liabilities, damages, losses, and expenses, including reasonable legal fees, arising out of or in any way connected with: (a) your breach of these Terms; (b) your violation of any applicable law; (c) your Health Data or any content you submit; or (d) your use or misuse of the Services.
14. Suspension and Termination
The Company reserves the right to suspend or terminate your access to the Platform, with or without notice, if we reasonably believe you have violated these Terms, provided false credentials (particularly for Doctor accounts), or engaged in conduct harmful to other Users or the integrity of the Platform.
You may terminate your account at any time by using the in-app account deletion feature. Upon termination, your right to use the Services will immediately cease, though certain provisions of these Terms (including Sections 10, 12, 13, and 16) will survive termination.
15. Changes to the Services and These Terms
The Company reserves the right to modify, suspend, or discontinue any part of the Services at any time. We also reserve the right to update these Terms from time to time. Where changes are material, we will provide reasonable notice via the Platform or through your registered contact details. Your continued use of the Services after any such update constitutes your acceptance of the revised Terms.
16. Governing Law and Dispute Resolution
These Terms shall be governed by and construed in accordance with the laws of India, without regard to its conflict of laws principles. Subject to applicable law, any dispute, controversy, or claim arising out of or relating to these Terms or the Services shall be subject to the exclusive jurisdiction of the competent courts at Bhopal, Madhya Pradesh, India.
The parties agree to first attempt to resolve any dispute amicable through good-faith negotiation before initiating formal legal proceedings.
17. Miscellaneous
17.1 Entire Agreement: These Terms, together with our Privacy Policy, constitute the entire agreement between you and the Company regarding the Services and supersede any prior agreements.
17.2 Severability: If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.
17.3 No Waiver: The failure of the Company to enforce any right or provision of these Terms shall not constitute a waiver of such right or provision.
17.4 Assignment: You may not assign or transfer these Terms, by operation of law or otherwise, without the Company's prior written consent. The Company may assign these Terms without restriction.
17.5 Force Majeure: The Company shall not be liable for any failure or delay in performance resulting from causes beyond its reasonable control, including but not limited to natural disasters, internet or telecommunications failures, or third-party service outages.
18. Contact Us
If you have any questions, concerns, or feedback regarding these Terms, please contact us at:
- Support Email: support.mydiabetesbox@gmail.com
- Business Name: MyDiabetesBox (Udyam/MSME Registered)
- Registered Address: C-42, Palace Orchard, Kolar road, Bhopal (M.P., India)
Privacy Policy
1. Introduction
MyDiabetesBox ("MyDiabetesBox", "the Platform", "we", "us", or "our") is operated by MyDiabetesBox, a business registered under the Udyam (MSME) portal, Government of India ("the Company"). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal and health-related information when you use our website, mobile application, and WhatsApp bot integration (collectively, the "Services").
We process personal data, including sensitive personal data relating to health, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and other applicable data protection laws of India. By using the Services, you consent to the data practices described in this Privacy Policy.
This Privacy Policy should be read together with our Terms of Service. Terms not defined here have the meaning given to them in the Terms of Service.
2. Who This Policy Applies To
This Policy applies to all Users of the Platform, including:
- Patients who register to log and track their own health data.
- Doctors who register to review health data of patients linked to their account, in a read-only capacity.
- Any individual who interacts with our WhatsApp bot, even without creating a full account, to the extent we process their data during that interaction.
3. Information We Collect
3.1 Information You Provide Directly:
- Account information: full name, mobile number, and a PIN you create for account security.
- Doctor credentials: for doctor accounts, professional details such as specialisation, medical registration number, clinic name, and city.
- Health Data you log, including blood glucose readings, vitals, HbA1c/laboratory panels, exercise schedules, oral medications, and insulin doses.
- Doctor-Patient linkage information: the Doctor code used to link a Patient account to a Doctor account.
- Communications: messages you send us for support, including via the WhatsApp bot.
3.2 Information Collected Automatically: Device details, app version, general usage statistics, and authentication logs managed by Firebase Authentication.
3.3 Information We Do Not Collect: We do not collect precise real-time location data or store your payment card/banking details directly.
4. How We Use Your Information
We use the information we collect to:
- Create and manage your account, including OTP-based verification and PIN-based authentication.
- Enable Patients to log, view, and track their Health Data over time.
- Enable a Doctor to view the Health Data of linked Patients in a read-only capacity.
- Display relevant clinical validation ranges and safety threshold alerts.
- Deliver educational materials and WhatsApp communication updates.
- Comply with applicable legal, regulatory, or medical record-keeping obligations.
We do not use your Health Data for advertising, and we do not sell your personal data to third parties.
5. Legal Basis for Processing
We process your personal data on the following bases, consistent with the DPDP Act:
- Your explicit consent, given at the time of registration.
- Performance of the Services you have requested.
- Compliance with applicable legal and medical record-keeping obligations.
- Our legitimate interest in maintaining Platform security and integrity.
6. How We Share Your Information
6.1 With Your Linked Doctor: Your Health Data is visible, on a read-only basis, only to the Doctor you have actively linked your account to. You remain in control of this linkage at all times.
6.2 With Service Providers: Google Firebase (hosting, storage, database, authentication) and our WhatsApp Business Solution Provider (BSP) for message delivery.
6.3 For Legal Reasons: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
6.4 What We Do Not Do: We do not sell your personal or Health Data to third parties, share it with insurance providers, or use it for targeted ads.
7. Data Storage and Security
Your data is stored securely using Google Firebase's infrastructure, which employs encryption in transit and at rest. Your PIN is never stored in plaintext and is protected using cryptographic hashing mechanisms. While we take standard security measures to protect your records, no transmission system is 100% secure.
8. Data Retention & Erasure
We retain your data for as long as your account remains active. Patients may request account deletion at any time in settings. Upon account deletion, clinical data is flagged and archived for 3 years to comply with statutory healthcare audit rules before final permanent purging, and Firebase Auth records are immediately purged to release the phone number.
9. Your Rights as a Data Principal
Under the DPDP Act, you have the right to access, correct, or request deletion of your data, nominate a representative in the event of death/incapacity, and lodge a grievance with our Grievance Officer or the Data Protection Board of India.
10. Children's Privacy
The Platform is intended for users who are at least 18 years of age. Minors require account management by a parent, legal guardian, or treating physician.
11. Contact Us & Grievances
- Support Email: support.mydiabetesbox@gmail.com
- Grievance Officer: Prakhar Gupta
- Registered Address: C-42, Palace Orchard, Kolar road, Bhopal (M.P., India)
Medical Disclaimer
1. Not a Substitute for Medical Care
MyDiabetesBox is a tool to help you record, organise, and track your own health information — such as blood sugar readings, vitals, and lab results — and to share that information with a doctor you choose to link your account to.
MyDiabetesBox does not provide medical advice, diagnosis, or treatment. Nothing on the Platform — including clinical ranges, warnings, alerts, or educational content — should be treated as a substitute for the advice of a qualified physician.
Always consult your doctor before making any decision about your medication, diet, or treatment plan. Never disregard or delay seeking professional medical advice because of something you have read or recorded on this Platform.
2. Not for Emergencies
MyDiabetesBox is not an emergency or monitoring service. If you are experiencing a medical emergency, call your local emergency number or go to the nearest hospital immediately. Do not rely on this Platform, or on your doctor seeing your data in time, during an emergency.
3. Doctor Review Is Not Guaranteed or Immediate
Linking your account to a doctor allows that doctor to view your data. It does not guarantee that your doctor will review, respond to, or act on any entry within a specific time, or at all. Response times depend entirely on your doctor's availability.
4. Accuracy of Your Own Data
The usefulness of MyDiabetesBox depends on the accuracy of the information you enter. The Platform is not responsible for decisions made based on incomplete, incorrect, or outdated data.
5. Your Acknowledgement
By using MyDiabetesBox, you acknowledge that you understand and accept this disclaimer, in addition to our Terms of Service and Privacy Policy.