Privacy Policy
The short version. Mahima is a women’s health app with a maternity care mode, made with hospitals. We ask for one thing about you — your mobile number — and that is how you sign in.
Almost everything else you put into the app stays on your phone: your journal, your photos and voice notes, your period and cycle history, your readings, your weight, your feeding log, your contraction timings and your medical ID card. None of it is uploaded to us, and none of it is included in your phone's cloud backups either.
If you link a hospital, the readings and entries you choose to share go to that hospital, because that is the point of linking. Your period and cycle history is never shared with anyone — not even a linked hospital.
We do not sell your data, we do not advertise to you, and there is no analytics or tracking in this app.
What we collect
Your mobile number
Used to sign you in and to send you a 6-digit code by SMS. A sign-in lasts up to 30 days; after that you sign in again with a fresh code.
On our server it is stored as a keyed hash — a one-way scrambling — plus the last four digits so we can show you which number you used. We do not keep your number in readable form.
To deliver the SMS we pass your number to MSG91, an Indian SMS provider registered under TRAI's DLT scheme. They deliver the message; they are not permitted to use your number for anything else.
Your sign-in codes
The 6-digit codes are stored hashed, expire after five minutes, and are deleted when you delete your account. We never store the code itself.
Your hospital link
If your hospital invites you and you enter their code, we store the link between your account and your hospital's patient number, only after your hospital confirms it. The app cannot create this link on its own.
What you share with a linked hospital
Only if you have linked a hospital, and only for things the app clearly marks as shared:
- The readings you record against your care plan — blood pressure, sugar, baby's movements, whether you took your medicine, and symptom check-ins. Each one tells you on screen that it is shared and with whom.
- A journal entry, only when you share that specific entry yourself. Sharing an entry sends what that entry contains — your words, and any photos or voice notes attached to it. There is no "share all"; each entry is a separate choice, and an entry you never share never leaves the phone.
- Reports you upload for your care team, and appointment requests you make.
Your period and cycle data
Stated on its own because it deserves to be: menstrual history is among the most sensitive things this app could hold.
Your period dates, flow, symptoms, pain, mood, day notes and stated cycle length are stored only on your phone, in the platform's secure storage. They are never sent to us and never shared with anyone — including a linked hospital. There is no code path in the app that can transmit them; this is not a setting, it is how the app is built.
The app also does not predict fertility. It shows an expected date only when you have told it your own usual cycle length, it labels that date as based on your own number, and it computes no fertile window and no ovulation estimate, ever.
The answer you give to "what are you tracking" (periods, pregnancy, or after a birth) also stays on the phone.
What stays on your phone
This app is built to keep your own words and your own measurements on your own device. The following are stored in your phone's secure storage and are not sent to us:
- Your journal — what you write, the photos you attach, the voice notes you record. Nothing transcribes your voice notes. A journal entry leaves the phone only if you share that entry with your linked hospital, as described above.
- Your period and cycle history — never sent to anyone, see the section above.
- Your readings and symptom entries, unless you are linked to a hospital and choose to share them.
- Your name and your dates (last period, due date, birth date), if you choose to enter them.
- Your medical ID card, your emergency contact, the doctor you added yourself, your weight entries, your contraction timings, and your feeding log.
- Your app-lock PIN, stored as a hash. We never see it, and it is not recoverable — including by us.
Your data is excluded from phone backups. The app switches off Android's app-data backup, so nothing above is copied into a Google backup or carried across in a phone-to-phone transfer. On a new phone you sign in again, and what you kept on the old phone stays on the old phone.
Signing out erases all of this from the phone.
What we share, and with whom
| Who | What | Why |
|---|---|---|
| Your hospital | The readings and entries you choose to share, but only if you have linked that hospital | So your care team can see them. This is what linking is for. |
| MSG91 | Your mobile number | To deliver your sign-in SMS |
That is the complete list. Your period and cycle data appears nowhere in it, because it is never shared with anyone.
We do not sell your data, share it with advertisers or data brokers, or use it to build a profile of you. There is no advertising, no analytics software and no third-party tracking in this app. Crash reports are not sent anywhere either — no crash-reporting service is connected.
What this app does not do
- It does not give you medical advice. Every clinical instruction you see was written by your hospital's clinicians for you, not generated by the app.
- It does not diagnose anything, score anything, or predict anything — not your health, and not your fertility.
- It does not read your contacts, your messages, your location, your call history, or your photo library. It never asks for these permissions; when you attach a photo, the phone's own picker hands the app just the one image you chose.
- It does not listen in the background. The microphone is used only while you are recording a voice note, and only after you tap Record.
- It does not show notifications in this version at all. When notifications are added, they will never contain clinical details — a reminder will say a reminder is waiting, not what for, so nothing sensitive appears on your lock screen where someone else could read it.
Emergency features
Emergency contacts, the ambulance number, danger-sign information and your medical ID card work without signing in, without a subscription, and while the app is locked. That is deliberate: in an emergency, the person holding your phone may not be you, and may not know your PIN.
This means anyone holding your unlocked phone can see your medical ID card. It is a trade we made on purpose, and it is stated on the card itself.
Deleting your account
In the app: Profile → Privacy → Delete my account.
Without the app: see how to delete your account, or email privacy@docran.in from any device — include the mobile number you signed in with. We will confirm before deleting.
Deletion works like this:
- Everything the app kept on your phone is erased immediately.
- Your account on our server is closed immediately and deleted after 7 days. Those 7 days are a safety margin, not a trick: if someone else reached this screen on your phone, or you change your mind, signing in again within 7 days keeps your account. After 7 days it cannot be recovered.
- Deleting removes your account, your hashed phone number, your sign-in codes and your hospital link from our servers.
What deletion does not do: it does not delete your medical record at your hospital. Hospitals are required to keep medical records under Indian law, and that record is theirs rather than ours. To ask about it, speak to your hospital.
How long we keep things
- Your account: until you delete it, plus the 7-day deletion margin above.
- Sign-in codes: five minutes, then they expire; removed when you delete your account.
- On-device data: until you delete your account, sign out, or uninstall the app.
Keeping it safe
Your number is hashed with a secret key, so a stolen copy of our database does not reveal it. Traffic between the app and our servers is encrypted. Data on your phone is held in the platform's secure storage — the Android Keystore — rather than ordinary app storage, it is excluded from backups, and you can add a biometric or PIN lock.
No system is perfectly secure, and we are not going to claim otherwise.
Children
This app is for adults using maternity services. It is not directed at children and we do not knowingly create accounts for anyone under 18.
Your rights
Under India's Digital Personal Data Protection Act 2023 you may ask us what we hold about you, ask us to correct it, and ask us to delete it. Write to privacy@docran.in. For most of what this app touches, the honest answer to "what do you hold about me" is: a hashed phone number, your sign-in history, and your hospital link — everything else is on your phone, not with us.
Changes
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app.