CareFloww

Privacy policy

Last updated: 1 November 2026

CareFloww ("we", "us") helps clinics follow up patient enquiries. This policy explains what personal data we handle, why, and your rights under India's Digital Personal Data Protection Act, 2023.

Two kinds of data

How patient data is used

We never sell personal data or use it for advertising, and we never use one clinic's patient data for another clinic.

Who processes it

We use trusted service providers to run the service, including database, automation, email and WhatsApp messaging providers. Some may store data outside India. They process data only to provide their service to us.

How long we keep it

We keep a clinic's data while it uses CareFloww. When a clinic stops, we give it a full copy and delete our copy within 30 days, unless the law requires us to keep it longer.

Your rights

You can ask to see, correct or delete your personal data, or withdraw consent for WhatsApp messages at any time (reply STOP). If you are a patient, you can also contact the clinic directly. Write to connect@carefloww.com and we'll respond within 30 days.

Security

Access is limited to the clinic's authorised staff and the CareFloww team, and accounts are protected by passwords. No system is perfectly secure; if a breach affects your data, we will tell the clinic and the authorities as the law requires.

Contact

Questions or complaints: connect@carefloww.com, CareFloww, Whitefield, Bengaluru, Karnataka 560066.