Privacy Policy

This policy applies to our websites, the parent and school applications, and the screening services we deliver on school premises. By using MHP or consenting to a child's screening, you agree to the practices described here.

• Account information — name, email, phone number, role (parent, school staff, expert) and login credentials.
• Child & screening information — a child's name, date of birth, gender, grade/section, school, and the health-screening data captured across our domains (physical, nutrition, vision, dental, developmental, psychological/emotional, and laboratory biomarkers where applicable), together with expert observations and recommendations.
• Payment information — processed by our payment partner (Razorpay). We do not store full card or bank details on our servers.
• Usage & device information — log data, device and browser type, and similar technical information used to operate and secure the service.

A child is screened only with the verifiable consent of a parent or lawful guardian. We process children's personal data solely to deliver screening, generate the Health Passport, and support follow-up care. We do not undertake any processing likely to cause a detrimental effect on a child's well-being, and we do not use children's data for behavioural tracking or targeted advertising. Consent can be withdrawn at any time (see “Your Rights”).

• To deliver screenings and produce the child's Health Passport.
• To enable expert review, recommendations, and optional appointments.
• To provide parents and authorised school staff appropriate visibility.
• To process payments and manage subscriptions.
• To secure, maintain, and improve the platform, and to comply with law.

We never sell personal data. We share it only as needed to provide the service:

• Authorised MHP clinical experts and analysts who review screening data and prepare recommendations.
• The child's school — limited to participation and aggregate or consented information; clinical results are shared with parents.
• Service providers who process data on our behalf under contract (for example, cloud hosting, database, email, and payment processing), bound to confidentiality and security obligations.
• Legal and safety — where required by law or to protect rights, safety, and the integrity of the service.

We apply reasonable technical and organisational safeguards, including encryption in transit and at rest, access controls and role-based permissions, and audit logging. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify the appropriate persons and authorities of any breach as required by law.

We retain personal data only for as long as necessary to provide the service, maintain longitudinal health records for the child's benefit, comply with legal obligations, and resolve disputes. When data is no longer required, we delete or anonymise it.

Subject to applicable law, you may:

• access and obtain a copy of the personal data we hold;
• request correction or completion of inaccurate or incomplete data;
• request erasure of personal data;
• withdraw consent for a child's participation at any time;
• nominate another individual to exercise rights on your behalf; and
• raise a grievance with our Grievance Officer (below).

We use essential cookies and similar technologies to keep you signed in and to operate and secure the platform. We do not use them for cross-site advertising.

We may update this policy from time to time. Material changes will be notified through the platform or by email, and the “last updated” date above will change.

For privacy questions or to exercise your rights, contact us at admin@myhealthpassport.in or call +91 77939 25151. My Health Passport is based in Hyderabad, India. The name and contact details of our designated Grievance Officer under the DPDP Act will be published here following legal review.