Privacy Policy
Last Updated: 26 August 2026
This Privacy Policy ("Policy") informs you of important information about how Locumedico ("we", "us", or "our") processes the personal data that we collect in online and offline formats, that directly or indirectly identifies you ("Personal Data"), the privacy practices we undertake, the types of data we collect, how we use and secure that data, and how long we retain that data.
Your Personal Data are processed in accordance with applicable laws, including but not limited to the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("IT Rules"), and other relevant data protection laws in India.
Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will process it. If you do not agree with our policies and practices, your choice is not to use our Platform and/or Services (defined below).
This Policy may change from time to time. Your continued use of the Platform after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.
Data Controller
The Data Controller for your Personal Data is Locumedico Private Limited, registered in India (CIN U82990KA2026PTC216845). Registered office: Unit 101 Oxford Towers, 139/88 Hal Old Airport Rd, H.A.L II Stage, Bangalore North, Bangalore 560008, Karnataka, India.
The Locumedico mobile app is published on Google Play and the App Store by Narba Consulting.
For any privacy-related inquiries, please contact us at contact@locumedico.com
Scope of This Policy
When we use the term "Service(s)", we mean to refer collectively to:
- The provision of online platform services to registered users ("Users").
- The information provided through websites and mobile applications owned and controlled by us, including the website at locumedico.com.
- Any related digital services provided through our platform.
Information We Collect
- Personal Information: Name, email address, phone number, date of birth, gender, and address.
- Google Sign-In: If you sign in with Google, we receive your Google account identifier and basic profile information (such as name and email) to create or authenticate your Locumedico account.
- Professional Information: Qualifications, certifications, years of experience, medical registration or council details, and work history where applicable to our services.
- Identity and professional verification (KYC): Government-issued ID, certificates, and photos you upload for verification. Phone numbers may be verified by OTP.
- Attendance photos: Check-in and check-out may require a selfie (or a photo from your gallery if the camera is unavailable) at the job site.
- Location: Precise GPS during an active duty journey and at check-in/check-out. On supported devices we may also use motion or activity signals during a journey (for example whether the device is stationary).
- Financial Information: Wallet balances, escrow holds, transaction history, and bank-account details you add for payouts (for example account holder name, account number, IFSC). Card and UPI details are processed by our payment gateway; we do not store full card numbers or UPI PINs.
- Communications: In-app chat messages (including team and hospital chats), notification receipts, and related logs.
- Device and security information: Device identifier, push-notification token, app version, and operating system. After you sign in, the account may be bound to that device.
- Usage Data: Profile views, screens and features used, app open/close, and general platform activity.
- Technical Information: Device information, IP address, browser type, operating system, cookies or similar technologies on the website, crash and performance diagnostics, and analytics data.
How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision: To provide, maintain, and improve our platform services.
- Verification: To verify the identity and credentials of users where applicable.
- Duty tracking and attendance: To share live location with the hospital during an active journey, and to confirm check-in and check-out at the job site.
- Communication: To communicate with you about your account and platform updates, including service notifications for jobs, KYC, wallet, attendance, and chat via push notification, SMS/OTP, and email.
- Payment Processing: To process wallet top-ups, escrow, refunds, and payouts through our payment gateway.
- Safety and Security: To ensure platform security, prevent fraud, bind an account to a device, detect and prevent unauthorized access, and protect user safety. Using the account on another device may require contacting support.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes, including data protection laws.
- Analytics and Improvement: To analyze platform usage, improve our services, and develop new features.
- Marketing: If you enable Marketing Emails in Profile → Notification preferences, we may send promotional email. You can turn this off at any time in the same screen.
Location information
When you start a journey to a duty, we collect your precise GPS location so the hospital can confirm you are en route and see live distance until you check in. Tracking runs only for that active journey. It continues if you leave the app or lock the screen, and a notification stays visible while sharing. Tracking stops after you check in.
We also use location at check-in and check-out to confirm you are at the job site. On supported devices we may use motion or activity signals during an active journey to improve tracking quality.
We do not use location for advertising. You can refuse Always/background access; journey tracking will not work without it.
How We Share and Disclose Personal Data
We share Personal Data with the following categories of recipients:
- Service providers: Payment processors, cloud hosting providers, authentication and maps providers, push notification services, crash and performance diagnostics providers, and product analytics providers, who process data on our instructions and are bound to keep it confidential.
- Corporate Affiliates: Including our corporate affiliates and their employees, agents, officers, directors, and contractors, subject to confidentiality obligations.
- Business Transfers: In connection with substantial corporate transactions, such as mergers, consolidations, or asset sales, subject to the same privacy protections.
- With Your Consent or at Your Direction: For any other purposes disclosed to you at the time we collect the information or with your explicit consent.
- Legal Reasons: To comply with legal obligations, respond to government requests, protect our rights, privacy, safety, or property, or protect the rights of our users or the public.
- Regulatory Bodies: When required by law or regulatory authorities, we may share information with government agencies or regulatory bodies.
Some of these providers may process data outside India (including the United States). See International Data Transfers.
Crash reporting and product analytics
In production we use third-party tools to record crashes, performance data, and how the app is used (screens, features, app open/close), so we can fix bugs and improve the product. On a sample of sessions we may also record session replay. This may include device information and IP address. We do not use this for advertising or to track you across other companies' apps.
Data Security
We use reasonable organizational, technical, and administrative measures to maintain the privacy and security of your Personal Data. These measures include:
- Encryption of sensitive data in transit and at rest.
- Secure authentication and access controls.
- Regular security audits and vulnerability assessments.
- Employee training on data protection and privacy.
- Secure payment processing through PCI-DSS compliant gateways.
Although we work hard to protect your Personal Data, we cannot guarantee the absolute security of any information you transmit to us. In case of a data breach that may affect your Personal Data, we will inform you and relevant authorities as required by applicable laws.
Retention of Personal Data
We will retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, provide you the Services, and comply with our legal obligations. You may delete your account in the Locumedico app (Profile → Delete account). Account deletion does not cancel the periods below for financial, job, and communication records.
- Account data: Kept while the account is active. After account closure, login access and personal profile data (including KYC documents, photos, and medical licence or credential uploads) are deleted. Related operational records for that account may be kept for up to 3 years after closure, unless a longer period applies below (for example financial records).
- Financial Records: Retained for 7 years as required by Indian financial regulations.
- Communication Logs: Retained for 2 years for dispute resolution and platform safety.
- Job Application Data: Retained for 2 years after the completion of the job placement.
Children's Privacy
The Platform is intended for individuals who are at least 18 years of age. We do not knowingly collect Personal Data from anyone under 18 years of age. If we learn we have collected Personal Data from a child under 18 without verification of parental consent, we will delete that information immediately.
Financial Information
Locumedico provides a prepaid platform wallet for job holds, refunds, and payouts. It is not a bank account, loan, or credit product. Top-ups and withdrawals are processed by a third-party payment gateway. We store wallet balances, escrow holds, transaction history, and the bank-account details you add for payouts (for example account holder name, account number, IFSC). We do not store full card numbers or UPI PINs on our servers.
Small leftover wallet balances below the withdrawal minimum may be forfeited when you delete your account and are not refunded if you restore during the grace period.
Your Personal Data Choices and Rights
You have the right to:
- Access: Request access to your Personal Data and receive a copy of the data we hold about you.
- Correction: Update, correct, or modify your Personal Data and account information.
- Deletion: Delete your account in the app (Profile → Delete account), subject to the retention periods in this Policy.
- Data Portability: Receive your Personal Data in a structured, commonly used format.
- Withdraw Consent: Withdraw your consent for processing Personal Data where consent is the legal basis.
- Opt-out: Turn off promotional communications at any time.
- Profile Visibility: Control the visibility of your profile information to other platform users.
To exercise your rights, contact us at contact@locumedico.com. We will respond to your request within 30 days, or as required by applicable law.
Withdrawal of Your Consent
Where you have provided consent to process Personal Data, you have the right to withdraw such consent at any time by emailing us at contact@locumedico.com. Please note that withdrawal of consent may affect our ability to provide certain services to you.
Cookies Notice
Our website uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and provide personalized content. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted or expired). You can manage your cookie preferences in your browser settings, but please note that disabling cookies may affect the functionality of our website.
The Locumedico mobile app does not use browser cookies in the same way. It uses local storage, device identifiers, and software development kits (including those named in this Policy) to operate the app, send notifications, and measure product use.
Links to Other Sites
Our Platform may contain links to third-party websites, including payment gateways, verification services, and healthcare resources. This Privacy Policy does not apply to these third-party sites, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party sites you visit.
International Data Transfers
Your Personal Data may be transferred to and processed in countries other than India, including countries that may have different data protection laws (for example where our payment, analytics, or crash reporting providers operate). We ensure that appropriate safeguards are in place to protect your Personal Data in accordance with this Privacy Policy and applicable laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on our Platform and updating the "Last Updated" date. Your continued use of the Platform after such changes constitutes your acceptance of the updated Privacy Policy.
How to Contact Us
If you have any questions or concerns about this Privacy Policy or our Personal Data handling practices, please contact us at:
Email: contact@locumedico.com
Platform: www.locumedico.com
We will make every effort to address your concerns and respond to your inquiries in a timely manner.