Western HospitalsWestern HospitalsOverseas Family Care

Privacy Policy

This policy explains what Overseas Family Care collects, why, who can see it, and how you can have it deleted. It covers the mobile apps and the web portal.

Last updated 10 September 2026

Who we are

Overseas Family Care is operated by Western Hospitals, a multi-speciality hospital at 11-5-423/B, Niloufer Road, Red Hills, Lakdikapul, Hyderabad, Telangana 500004, India. Western Hospitals is the data controller for the information described here.

For any privacy question or request, contact westernhospitalskrishna@gmail.com.

What we collect

We only collect what the service needs to work.

  • Account details — your name, email address and role. Used to sign you in and decide what you are allowed to see.
  • Health and care information — patient records, appointments, care plans, medicines, vitals and care reports written by the monitoring team. This is sensitive personal data and is treated accordingly.
  • Photos and documents — files you attach to a care report or profile. The app asks for camera and photo library access only at the moment you choose to attach something.
  • Messages — what you send to and receive from the care team inside the app.
  • Notification tokens — an anonymous device identifier issued by Firebase Cloud Messaging or your browser, used only to deliver alerts to your device.
  • Basic usage and diagnostic data — records of errors and sign-in activity, used to keep the service secure and working.

Face ID and fingerprint

If you turn on biometric sign-in, the check happens entirely on your device. Your face or fingerprint data is never sent to us, never leaves your phone, and we never have access to it. Your device only tells the app whether the check passed.

How we use it

  • To provide care coordination between the hospital team and your family.
  • To notify you about appointments, care reports and emergencies.
  • To keep the service secure, prevent misuse and diagnose faults.
  • To meet medical record-keeping and legal obligations.

We do not sell your data. We do not use it for advertising. We do not use it to train machine learning models.

Who can see your information

Access is limited by role. Family members see the records of the patient they are connected to. Monitoring staff see the families assigned to them. Administrators can manage accounts. Nobody sees records outside their assignment.

We share data with service providers only to the extent needed to run the service:

  • Supabase — database, authentication and file storage.
  • Google Firebase Cloud Messaging — delivering push notifications.
  • Email and messaging providers — sending you notifications you have asked for.

We may also disclose information where the law requires it, or where it is necessary to protect someone's life or safety.

How we protect it

All traffic is encrypted in transit using HTTPS. Data is encrypted at rest by our hosting providers. Access is controlled by row-level security rules enforced at the database, so the rules apply no matter how the data is requested.

No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authorities as required by law.

How long we keep it

Medical records are retained for as long as Indian medical record-keeping rules require, even after an account closes. Account details, messages and notification tokens are deleted when you delete your account.

Your rights

  • Ask what we hold about you, and get a copy.
  • Ask us to correct anything wrong.
  • Ask us to delete your account and data, subject to the retention rules above.
  • Turn off notifications at any time in your device settings.
  • Withdraw consent for optional processing.

Write to westernhospitalskrishna@gmail.com and we will respond within 30 days.

Deleting your account

You can delete your account from inside the app: open Profile, then Delete account. You will be asked to confirm.

Deleting removes your sign-in credentials, profile, messages and notification tokens. Clinical records that the hospital is legally required to retain are kept, but are disconnected from your account and are no longer accessible to you or your family through the app.

If you cannot access the app, email westernhospitalskrishna@gmail.com from your registered address and we will action it for you.

Children

The app is intended for adults. Where a patient is a minor, their records are managed by a parent, guardian or authorised family member, who is responsible for the account.

Changes to this policy

If we make a material change we will update the date at the top of this page and, where the change is significant, notify you in the app.

Contact

Western Hospitals
11-5-423/B, Niloufer Road, Red Hills
Lakdikapul, Hyderabad, Telangana 500004, India
westernhospitalskrishna@gmail.com