Privacy policy
- Patient records you enter in DoxDesk stay on your phone, encrypted. We never receive them.
- Backups go to your own Google Drive, locked with a recovery password that only you know. We can't open them.
- DoxDesk has no user accounts, no advertising, no analytics and no crash tracking.
- Google Play handles the purchase. We never see your card or UPI details.
1. Who we are
DoxDesk is an Android app made in India by the DoxDesk team ("we", "us"). This policy covers the DoxDesk app and this website, doxdesk.i-gpt.in.
2. Who is responsible for patient data
DoxDesk is used by doctors and clinics ("you") to keep records about their patients. You decide what to record and why, so for the purposes of India's Digital Personal Data Protection Act, 2023, you are the Data Fiduciary for your patients' data. That includes getting any consent you need from patients, answering their requests, and keeping records for as long as medical rules require.
We do not process patient data on your behalf, because it never reaches us. DoxDesk works on your phone and has no DoxDesk server that stores, receives or reads clinic records.
3. What DoxDesk stores on your phone
Everything you enter, for example:
- Clinic and doctor details: clinic name, address, timings, fees, UPI ID, registration number, logo and signature.
- Patient details: name, age or date of birth, sex, phone number, address, allergies and medical history.
- Visits: complaints, vitals, examination notes, diagnoses, prescriptions, advice and follow-up dates.
- Files you add, such as report scans and photos.
- Appointments, bills, receipts, payments, dues and reminders.
- App settings, your PIN (stored only as a one-way hash) and the trial start date.
All of this is stored in an encrypted database (AES-256). Files are encrypted one by one. The encryption key is kept in your phone's Android Keystore and does not leave the phone. Android's own cloud backup is turned off for DoxDesk, so your data is not copied anywhere without your knowledge.
4. When data leaves your phone
Data leaves your phone only in these cases:
Backups to your Google Drive (if you turn it on)
DoxDesk encrypts the backup on your phone with a key made from your recovery password, then uploads it to the private app folder of your own Google Drive. DoxDesk asks Google only for access to its own app folder; it cannot see your other Drive files. Google stores the encrypted file under Google's privacy policy. Neither we nor Google can read the backup without your recovery password. DoxDesk also keeps a small file there that records which phone is currently active, so that your clinic is used on one phone at a time.
You can also save a backup file to your phone or any place you choose. That file is encrypted the same way.
Sharing that you start
When you share a prescription, bill or reminder through WhatsApp, SMS, email or another app, it goes to that app and to the person you send it to. Those apps have their own privacy policies. DoxDesk sends nothing on its own.
Printing
Documents you print go to the printer you choose: Android's printing service, or a receipt printer connected over Bluetooth or your clinic's Wi-Fi.
Your purchase
The one-time purchase is made through Google Play. Google processes the payment under its own terms and privacy policy. We receive the order details Google Play gives developers, such as the order number, date, price, country and purchase status. We do not receive your card, bank or UPI details. The app asks Google Play whether this Google account owns DoxDesk; no clinic data is sent.
QR codes on printed documents
The QR code on a prescription or bill contains the document type, number, date, revision, total amount, a short fingerprint of the document and your clinic's digital signature. It does not contain the patient's name, phone number, diagnosis or medicines. Scanning a QR code to check it happens on the phone and uses Google Play services' code scanner, which processes the camera image on the device.
5. What we collect
- From the app: nothing. DoxDesk has no sign-up, no advertising, no analytics and no crash reporting.
- When you contact us: your email address and what you write, so that we can reply. Please don't send patient details in support emails.
- From this website: this website has no cookies and no analytics. It is hosted on GitHub Pages and uses Google Fonts; GitHub and Google may log basic technical data, such as IP addresses, under their own policies.
If Google Play offers us crash or usage statistics that Android shares with developers, these are anonymous and controlled by your phone's settings. We do not sell or rent personal data to anyone.
6. Permissions the app asks for
| Permission | Why |
|---|---|
| Internet | Google Drive backups, the Google Play purchase, and Wi-Fi receipt printers. |
| Nearby devices (Bluetooth) | Only to connect to a Bluetooth receipt printer. Asked on the printer screen. |
| Notifications | Only if you turn on the daily summary on your phone. |
When you add a photo or a file, Android's own picker lets you choose it, so DoxDesk does not need access to all your photos or files.
7. Security
- Encrypted database and files, with the key in the Android Keystore.
- A PIN, or fingerprint, to open the app, and the app locks itself after a time you choose.
- Screenshots and screen recording of DoxDesk are blocked, and the app's screens are hidden in the recent-apps list.
- Backups are encrypted before they leave the phone, with authenticated encryption that detects changes.
No system is perfectly secure. Keep your phone's own screen lock on, and keep your PIN and recovery password private.
8. How long data is kept, and how to delete it
- Data stays on your phone until you delete it or uninstall DoxDesk. Uninstalling removes it from the phone.
- To delete Drive backups: open Google Drive on the web, go to Settings → Manage apps → DoxDesk → Options → Delete hidden app data.
- Backup files you saved yourself are yours to keep or delete.
- Medical rules may require you to keep patient records for a minimum period. Check them before you delete records.
Because we hold none of your clinic data, we can't delete it, recover it or hand it over to anyone.
9. Patients
If you are a patient whose details were entered by a doctor using DoxDesk, the doctor holds those records. Please contact the doctor or clinic to see, correct or delete them. We can't access them.
10. Children
DoxDesk is for adult doctors and clinic owners. Records about child patients are entered by the doctor, who is responsible for getting a parent's or guardian's consent where needed.
11. Changes to this policy
If we change this policy, we will update the date at the top and, for important changes, tell you in the app. If a future version of DoxDesk handles data in a new way, this policy will be updated before that version is released.
12. Contact and grievances
For questions or complaints about privacy, write to us at support.doxdesk@gmail.com. We reply within 7 working days and try to resolve complaints within 30 days. You can also complain to the Data Protection Board of India once it accepts complaints.