Privacy Policy

How we handle
your data.

Last updated: May 2026. iyraCare Health Management System is committed to protecting the privacy of every medical centre and every patient on our platform.

1. Who we are

iyraCare is a healthcare technology platform operated by Iyra Health Management System. We provide medical centre management software to clinics, hospitals, and healthcare providers in India. Our registered office is in India and all data is stored in Indian data centres.

2. What data we collect

Centre data

When a medical centre subscribes to iyraCare, we collect: centre name and registration details, billing and contact information, staff user accounts and roles, and configuration preferences.

Patient data

Patient data entered into iyraCare by medical centre staff includes: name, contact details, date of birth, medical history, clinical notes, prescriptions, billing records, and appointment history. This data is owned by the medical centre and processed by iyraCare on their behalf.

Usage data

We collect anonymised usage telemetry — which features are used, performance metrics, and error logs — to improve the platform. This data cannot be used to identify individual patients.

3. How we use data

  • To operate and improve the iyraCare platform
  • To provide technical support and onboarding assistance
  • To send product updates and relevant communications (opt-out available)
  • To comply with legal and regulatory obligations

We do not sell patient data to third parties. We do not use patient data for advertising. We do not share data with any party outside of those necessary to operate the service.

4. Data storage and security

All data is stored in encrypted form on servers located in India. We use AES-256 encryption at rest and TLS 1.3 for all data in transit. Regular security audits and penetration testing are conducted by our engineering team.

5. Data retention

Patient records are retained for the period required by the medical centre and applicable Indian healthcare regulations (typically 7 years for medical records). Upon termination of service, we provide a full data export and delete all data within 30 days per written request.

6. Your rights

Medical centres have the right to access, correct, export, or delete all data stored in iyraCare at any time. Patients should contact their medical centre to exercise rights over their health records, as the centre is the data controller for patient data.

7. Cookies

We use minimal, essential cookies for authentication and session management in the iyraCare platform. We do not use advertising or tracking cookies. Our marketing website uses Google Analytics to understand anonymous traffic patterns.

8. Changes to this policy

We will notify all registered centres by email when this policy is updated in a material way. The date at the top of this page reflects the most recent revision.

9. Contact

For any privacy-related questions, please contact us at info@iyracare.com or call +91 94932 82916.