Nuskha Privacy Policy
DRAFT for review by a lawyer. Not final. Version 1, October 2026.
This policy explains what information Nuskha (run by Pratham Arun Hadap, Maharashtra, India) handles. It is written for the doctor or clinic using Nuskha.
1. The short version
- Patient data never leaves your computer through Nuskha. It is stored in a file on your PC. Nuskha has no server that receives it, and we cannot see it.
- Nuskha does not show ads, does not track you, and does not sell anything about you.
- You decide what is shared with a patient (for example by WhatsApp), and you send it yourself.
2. Patient data (kept by you)
Nuskha stores what you or your staff type in: patient names, phone numbers, age or date of birth, sex, allergies, notes, visits, prescriptions, follow-ups, and the patient's consent to keep records. This data is stored only in the Nuskha database file on your computer and in the backups you choose to make (encrypted with your backup password).
For this data, you (the clinic) are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. You decide why and how it is used. Nuskha is software you run; we do not process this data on your behalf because it never reaches us.
Your duties include: getting each patient's consent (Nuskha records when it was given), using the data only for the patient's care, keeping it secure (PIN lock, backups, a Windows password), and correcting or deleting it when a patient asks and the law allows.
3. When information leaves your computer
Only when you or your staff do it:
- Printing or saving a PDF of a prescription or plan.
- WhatsApp: Nuskha copies a picture of the prescription or plan and opens the patient's chat in WhatsApp (wa.me). You choose whether to send it. Messages are then handled by WhatsApp under its own terms.
- Backups: encrypted files are written to the folders you choose (for example a pen drive).
- Export: files you save, such as your medicine list.
4. What Nuskha sends to us
- Update checks: Nuskha downloads a small file from GitHub (github.com) to see if a newer version exists, and downloads updates. GitHub may see your computer's IP address, as with any website. No patient data or clinic data is sent.
- Problem reports: only if you choose "Save the report" and send it to us yourself. The report contains the app version, counts (for example number of prescriptions in 30 days), backup and lock status and recent error messages with names, numbers and other details removed. You can read the whole report before saving it.
- Payments and licence keys: when you pay, the payment is handled by your UPI app or payment provider (for example Razorpay), not by Nuskha. When you tell us you have paid, you send us a WhatsApp message with your name or clinic name, the plan and the payment reference. We keep these details to issue your licence key and for accounts and tax records.
5. Information about you that we keep
Your name or clinic name, phone number or email (from WhatsApp or email you send us), payment reference, plan and licence key dates. We use this only to issue and support your licence, to contact you about Nuskha, and for legal and tax records. We do not sell or share it, except where the law requires.
6. Security
Nuskha's database is on your computer. Backups are encrypted (AES-256-GCM) with your backup password, which we never know. The PIN lock hides patient data when you step away. Licence keys are checked on your computer without the internet.
7. Children
Patient records may include children. Their parent or guardian gives consent on their behalf, as the law requires.
8. Changes
If we change this policy in an important way, Nuskha will show the new version and ask you to agree again.
9. Grievance officer and contact
Grievance officer: Pratham Arun Hadap, Nuskha, Maharashtra, India. Email prathamhadap@gmail.com, WhatsApp +91 80877 37010. We will reply within 7 working days.