Privacy Policy
Last updated: September 2026
Your health data belongs to you. This notice explains, in plain terms, what we collect, why, where it is stored, and the control you have over it. It is aligned with India's Digital Personal Data Protection Act, 2023 (DPDP).
Who we are
Your Metabolic Doctor (yMD) is a physician-led metabolic health platform operated in India. For the purposes of the DPDP Act, yMD is the Data Fiduciary that determines how your personal data is processed. Registered practitioner and business details are available on request and will be listed here.
What we collect, and why
Account details: your name, email and WhatsApp number, so we can create your account and your care team can reach you.
Health reports you upload: lab reports, prescriptions, ultrasound, ECG, radiology and discharge summaries, and the values extracted from them, so MetOS can organise and explain your results.
Information you add later: height, weight, waist, date of birth, sex, medications, conditions and lifestyle inputs, each asked with a stated reason, so your care team can read your record accurately.
Usage data: basic analytics about how the site is used, to improve it. We do not sell this or use it for third-party advertising.
How we use it
We use your data to read and explain your reports, to let your doctor, dietitian and lifestyle coach work from one shared record, to send you service messages on WhatsApp and email, and to run and improve the platform. We do not use your health data to train advertising systems.
Where it is stored
Your data is stored encrypted, on infrastructure located in India. Access is limited to the people who need it to provide your care, and every clinical value enters your record only after a human confirmation.
Who we share it with
We share data only with the members of your care team and with service providers that help us run the platform (for example, secure hosting, SMS and payment processing), under contract and only to the extent needed. We do not sell your data. We share with authorities only where the law requires it.
Your rights under the DPDP Act
You have the right to access the data we hold about you, to correct it, to withdraw consent, and to have your data erased. You can export or delete everything, at any time, in one click from your account, or by contacting us. Withdrawing consent may mean we can no longer provide parts of the service.
How long we keep it
We keep your record for as long as your account is active, or as required by applicable medical-record and tax laws. When you delete your account, we remove your personal data except where we are legally required to retain specific records.
Grievances
If you have a concern about how your data is handled, contact our Grievance Officer, whose details are on the Grievance page. We will acknowledge and respond within the timelines the law requires.