Privacy Policy for MediQuere

Operating Brand / Entity: Cquere ("Company", "We", "Us", or "Our"), operating the digital healthcare platform MediQuere ("Platform").

1. Introduction & Scope

This Privacy Policy describes how Cquere collects, uses, stores, and protects the personal data of users, including both healthcare professionals ("Doctors") and individuals seeking medical appointments ("Patients"). By registering, accessing, or using MediQuere, you consent to the data processing practices outlined in this policy.

2. Information We Collect

We collect only the minimum necessary data required to facilitate seamless doctor-patient appointment queueing and consultations:

For Patients:

• Personal & Contact Details: Full Name, Mobile Phone Number, Email Address, Date of Birth, Gender, and optional Emergency Contact/Family Member details.
• Health Information (Blood Group): Patient Blood Group is collected during appointment booking strictly to assist the attending physician during in-person chamber consultations.
• Appointment Information: Selected Doctor, Preferred Date/Session, Waitlist Position, Consultation Fee status, and Generated QR Pass.

For Doctors / Clinics:

• Professional Credentials: Full Name, Medical Registration Number (State/National Medical Council ID), Educational Qualifications, Specializations, and Years of Experience.
• Chamber Details: Chamber/Clinic Name, Complete Physical Address, GPS Location Coordinates, Visiting Days, Consultation Timings (AM/PM), and Consultation Fees.

Technical & Device Permissions:

• Camera Access: Used strictly for scanning appointment verification QR codes at doctor chambers.
• Location Access: Used with foreground prominent in-app disclosure to display nearby doctor chambers and calculate clinic distances while using the app. We do not track location in the background.
• Microphone Access (Voice Search): Used solely when you voluntarily tap the microphone icon in the search bar to search for doctors, medical specialties, or chambers using speech-to-text.
  • How It Works: Spoken audio is converted into search text using your device's default speech recognition engine (such as Google Speech Services).
  • Ephemeral Processing & No Storage: MediQuere does not record, retain, store, or archive your voice audio files or spoken search transcripts on our servers or cloud databases. Audio data is processed ephemerally in real time solely to service your immediate search request.
  • No Third-Party Sharing or Profiling: Voice search input is never used for commercial advertising, user profiling, or shared with third-party data brokers.
  • User Control: Microphone permission is strictly optional. You can deny or revoke microphone access at any time in your device settings. Standard on-screen keyboard text search remains permanently available without microphone access.
• Push Notifications: Used for real-time waitlist promotion alerts, slot reservation countdown timers, and booking confirmations.

3. Purpose of Data Processing

Your data is processed strictly for:

• Connecting Patients with verified Doctors for chamber and in-person consultations.
• Managing real-time serial queues, waitlist slot promotions, and payment confirmations.
• Admin verification of Doctor credentials prior to public directory listing.
• Sending operational transactional alerts (SMS, WhatsApp, and Firebase Push Notifications).
• Customer support and technical troubleshooting via mediquere@gmail.com.

4. Data Security Safeguards

We implement industry-standard technical and operational security measures:

• End-to-end TLS/SSL encryption for all data in transit across mobile and web interfaces.
• Secure Firestore cloud database encryption at rest.
• Firebase Authentication infrastructure to prevent unauthorized account access.

5. Third-Party Data Sharing

We do not sell, rent, or trade your personal data to third-party advertisers. Limited data sharing occurs solely with:

• Designated Doctors/Clinics: When an appointment is booked or promoted from the waitlist, patient details are shared to confirm the clinic visit.
• Infrastructure Providers: Google Firebase (authentication & database), Google Maps API (location services).
• Legal Compliance: Disclosed only if mandated by applicable law, court summons, or government regulation.

6. User Rights & Data Erasure

You have the right to access, update, or request complete deletion of your account and personal records at any time.

To submit an automated self-service request to erase your account and associated personal data, visit our dedicated Account & Data Deletion Portal. Alternatively, you can email our Grievance Officer at mediquere@gmail.com. Requests are fully processed within 30 days.

7. Grievance Officer & Contact

For any privacy concerns, data queries, or grievances, please contact: