Privacy Policy
Nabzs helps a family keep track of medicines, readings, records, visits and hospital bills in one place. This policy explains what we collect, why, who can see it, how long we keep it, and the choices you have.
Nabzs is provided by Ravish Kumar, New Delhi, India ("we", "us"). We are the data fiduciary (data controller) for the personal data described here. Questions: support@nabzs.com.
- Your family's health data is visible to your family, as your sharing settings allow, and to caregivers you invite. Nobody else sees it, including us, except as described below.
- No ads. No analytics or tracking tools. We never sell personal data.
- A page you scan is sent to an AI service to read it for you (see section 3).
- Your data is stored on servers in India. You can delete it, or your whole account, from Settings at any time.
1. What we collect
From your Google account, when you sign in
Your name, email address and profile photo link. We never see your Google password.
What you and your family add
- Profiles: name, relation, birth year, gender, photo, blood group, health conditions and allergies.
- Medicines: names, doses, times, how long to take them, how many are at home, and each dose marked taken or skipped, with the name of the person who marked it.
- Readings and activity: blood pressure, blood sugar, weight, heart rate, oxygen level, temperature, water, steps and workouts.
- Records: prescriptions, lab reports, bills and other documents you photograph or upload, and the details read from them.
- Visits and care: appointments, questions for the doctor, doctor's advice, daily routines, hospital stays, what was given or done during a stay, and bill checks.
Family and caregivers
Your family's name and its members' names and email addresses. Invites: the invited email address, name and relation, and who sent the invite. Caregivers: their name, email, role (for example nurse or helper) and what they're allowed to see.
From Health Connect, only if you allow it
Steps, distance, workouts, blood pressure, weight, heart rate, blood sugar and oxygen level. See section 5.
Technical information
How many scans you've used this month, and a check that requests come from the genuine app (an app-integrity check through Google Play). The services that run the app for us receive basic technical data, such as your IP address and app and device version, as they need to deliver it. We use no advertising ID and no analytics.
Information about other people
When you add someone who doesn't use the app, such as a child or a parent, you're telling us about them. Please add only people you're allowed to: your own children, or people who have agreed or whom you look after.
2. Why we use it
- To run the app: reminders, counts of medicines at home and what to buy, readings and trends, records, family sharing, and reports you choose to share.
- To read the documents you scan, only when you ask.
- To keep accounts safe and prevent misuse, for example app-integrity checks and the monthly scan limit.
- To reply when you contact us.
We don't use your data for advertising, we don't sell or rent it, and we don't use your health data to train AI models.
3. Reading documents with AI
When you scan or upload a document, the page (a photo or PDF), with our instructions, is sent to an AI service provider that reads it and sends back the details, such as medicines, test results or bill lines. Your name and age are not sent, except what's printed on the page. For a hospital bill check, the list of entries you logged for that stay is sent too, so the bill can be compared with it.
The provider reads these pages for us. On our current plan it may also use them to improve its own services, and its trained reviewers may read some of them. We plan to move to a plan where it doesn't do this, and will update this policy when we do. If you'd rather not send a page to AI, you can type medicines and readings in yourself instead of scanning.
AI can misread handwriting or a blurry photo, so the app shows you what it read and you check it before saving. The original file and what you saved are kept in your family's records.
4. Who can see your data
- Your family in the app. Profiles of people who don't use the app, such as children, are visible to everyone in the family. An adult who signs in chooses whether the family sees their medicines, their health readings and their records. Their name, photo, birth year, gender, blood group, conditions and allergies are always visible to the family, so someone can help in an emergency.
- Caregivers you invite. They see one person only, and only the parts you allow, and only what that person shares.
- Service providers that run Nabzs for us: cloud storage, database and sign-in; AI document reading; and app-integrity checks. They act on our instructions and must protect the data; section 3 explains what the AI provider may also do with scanned pages.
- When the law requires it: to comply with a valid legal request, or to protect someone's life or safety.
- When you share. A PDF report, a shopping list or an invite you send through WhatsApp, email or another app is then handled by that app.
We never sell personal data.
5. Health Connect
If you allow it, Nabzs reads steps, distance, workouts, blood pressure, weight, heart rate, blood sugar and oxygen level from Health Connect: when you open the app or the Health tab, and about once an hour in the background if you allow background access. It's saved to your own profile so you can see it in the Health tab and in reports you choose to share, and shared with your family only if your sharing settings allow.
Nabzs never writes to Health Connect. We never sell Health Connect data, never use it for ads, credit or insurance decisions, and never transfer it except to provide these features, for security, or when the law requires it. People don't read it except with your permission, for security, or when the law requires it. Our use of Health Connect data follows the Health Connect Permissions policy, including its Limited Use requirements.
You can turn this off any time in Health Connect's settings. Readings already copied stay in Nabzs until you delete them.
6. Where it's stored and how it's protected
- Your data is stored with our cloud provider in India (Mumbai). Pages sent for AI reading may be processed in other countries.
- Data is encrypted on its way between your phone and our servers, and our provider encrypts stored data.
- Server-side access rules let each piece of data be read only by the right family members and caregivers, and app-integrity checks block fake apps.
- On your phone, Nabzs keeps a copy so it works offline. Downloaded documents and generated reports are removed when you sign out, and reminders on a locked screen don't show medicine names. Some data can stay in the app's offline copy after you sign out; clearing the app's storage or uninstalling it removes that.
No system is completely secure, but we work to protect your data and will tell you and the authorities about a breach as the law requires.
7. How long we keep it, and deleting
- We keep your data while your account or your family's records exist. You can delete any record, reading, medicine or document at any time.
- Delete your account: Settings › Account › Delete my account and data. This deletes your account, your sign-in and everything recorded for you. If you're the only person in your family, the whole family's records are deleted too. If others remain, your profile and private data are deleted, but marks you made in other people's records, such as a dose you marked for your mother, stay in their records.
- Without the app: ask us to delete your account at nabzs.com/delete-account or by email to support@nabzs.com.
- We keep only a monthly scan counter (a month and a number) linked to your account ID after deletion, so the free scan limit can't be reset. It contains no health information.
8. Children
Nabzs accounts are for adults (18 or older). A parent or guardian may add a child's profile and manage it, and agrees to this policy for the child. We don't knowingly let children create accounts. If you believe a child has signed up, contact us and we'll delete the account.
9. Your rights
- See and correct: everything you add can be viewed and edited in the app.
- Delete: see section 7.
- Withdraw consent: change your sharing settings, turn off Health Connect or notifications, or delete your account. This doesn't affect what was done before.
- Nominate: you can name someone to use these rights for you if you die or can't act yourself. Write to us.
- Complaints: contact our Grievance Officer below. We'll reply within 30 days. If you're not satisfied, you may complain to the Data Protection Board of India.
If you live outside India, you may have similar rights under your local law. Contact us and we'll help.
10. Permissions on your phone
- Notifications: to remind you of doses, refills and appointments.
- Health Connect: see section 5.
- Camera: Nabzs opens your camera app to photograph a document. It doesn't need camera permission itself.
- Photos and files: you pick the file to add. Nabzs doesn't get access to your whole gallery.
- Run at start-up: to set your reminders again after the phone restarts.
11. Our website
nabzs.com sets no cookies and has no analytics or ads. Our hosting provider, and a font service used on the home page, receive your IP address and browser details to deliver and protect the pages.
12. Changes to this policy
When we change this policy, we'll update the date above. For important changes, we'll tell you in the app before they apply.
13. Contact and Grievance Officer
Ravish Kumar (Grievance Officer)
support@nabzs.com
New Delhi 110019, India