Privacy notice
Version 2026-10 · Plain-language summary of how QueroCura handles your information
QueroCura is an early product. This summary says what the app actually does today. Formal legal terms are being finalised with counsel and will replace or extend this page. If anything here is unclear, write to us and we'll explain.
The short version
- Your health information is yours. We use it to run the features you use, and for nothing else.
- No hospital, doctor or family member sees it unless you say yes, and you can take that back at any time.
- We don't sell your information and we don't show advertising.
- You can download everything, or delete everything, from Privacy & sharing in the app.
What we collect, and why
| What | Why we need it |
|---|---|
| Name, e-mail, password (stored only as a one-way hash) | To create your account and let you sign in and recover it. |
| Health profile you enter: age, sex, conditions, allergies, medicines, lifestyle | To personalise symptom checks, insights and reminders. |
| Vitals you log or import (blood pressure, pulse, glucose, weight and so on) | To show trends, flag readings worth a second look and build your weekly summary. |
| Symptom checks you run | To give you results and help you remember what you reported. |
| Documents you upload to CuraVault (reports, prescriptions, scans) | To read them for you, keep them in one place and show trends. They are encrypted when stored. |
| Calendar items and reminders | To remind you of appointments and medicines. |
| Family profiles you create | So you can look after people in your family. You are responsible for having the right to act for them (for example as a parent or guardian). |
| Technical data: a one-way hash of your network address, and sign-in and security events | To protect accounts from abuse and show you your own recent activity. We don't store your raw network address for this. |
Who can see it
- You, always.
- Someone you choose: a doctor you send a time-limited link and PIN; a hospital or clinic you approve under Care teams (you pick what they see and for how long); a family member you invite to a profile.
- Verified hospital doctors in an emergency, only if you switched emergency access on. It shows allergies, conditions and medicines for two hours, the doctor must write a reason, you're told, and it's logged.
- Our service providers who host and operate the app on our behalf (hosting, database, e-mail delivery). They process data only to provide those services.
- If you turn on the optional AI reader for a photo of a measuring device, that photo is sent to our AI provider for that one reading. It's off unless you opt in each time.
QueroCura is built so our team doesn't need to read your health information to run the service, and our administrative actions are logged.
How long we keep it
- Your information stays while you have an account. When you delete your account we erase it, including family profiles, documents, links, hospital connections and the records hospitals added to your account.
- Sign-in and security events are kept for a few days. Reset links expire within an hour.
- A minimal access log (which organisation did what, and when, with no health content) is kept so hospitals can show who accessed what. After you delete your account it no longer points to you.
Your rights
- See and download your information (Privacy & sharing, Download my data).
- Correct it: edit your profile, vitals and records in the app.
- Erase it: Delete my account.
- Withdraw consent: switch off optional features (weekly e-mail, emergency access) and end any hospital or doctor access. Your consent history is shown in the app.
- Complain: tell us first and we'll respond promptly. You can also approach the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.
- Nominate someone to exercise your rights if you die or can't act for yourself: write to us and we'll record it.
Children
Accounts are for adults. A parent or guardian can create a profile for a child to look after the child's health. When you do, you confirm that you are the child's parent or guardian. We don't track children's behaviour or show them advertising.
If something goes wrong
If we discover a security incident that affects your information, we'll tell you without unnecessary delay and tell the authorities as the law requires.
Contact
Grievance and privacy requests: grievance@querocura.com. We aim to reply within 7 days.