Halo Aid

Privacy Policy

Last updated: August 2026

1. Who we are

Halo Aid is operated by HALO AID PRIVATE LIMITED (CIN U62090PB2026PTC069487), Gali No. 10, Shiv Nagar, Batala, Gurdaspur - 143505, Punjab, India. You can reach us at founder@haloaid.com.

We provide software that healthcare practices use to answer patient enquiries, book appointments, run consultations, and record clinical notes. This policy explains how information is handled when you interact with the service through Instagram, Facebook, our booking pages, a consultation link, or a practice's front desk.

Your records belong to your practice. The doctor or clinic you booked with decides what is collected and how long it is kept. Halo Aid processes that information on their instructions, in order to provide the service. If you want your records changed or removed, your practice can action that directly, and you can also ask us using the routes in section 8.

2. Information we collect

Information you give us when you book or message:

  • Name and contact details (phone, email)
  • Age or date of birth, and a relative's name where a practice records one
  • Reason for visit and appointment preferences
  • Your Instagram or Facebook user ID, when you message a practice there
  • Conversation history related to your enquiry or booking

Health information created while your practice cares for you. This is sensitive personal data and we treat it accordingly:

  • Vital signs recorded at check-in
  • Consultation notes written by your doctor
  • Transcripts of voice or video consultations
  • Recordings of video or voice consultations, where your practice uses them and you have consented
  • Prescriptions and other clinical records your doctor issues

We also keep payment metadata (gateway reference, amount, status) where a practice collects payment. We never receive or store your full card details — those go directly to the payment gateway.

3. How we use your information

We use it to schedule and confirm appointments, send reminders, run the consultation, let your doctor record and retrieve your clinical notes, process payments where applicable, and provide support to your practice. We do not sell your data, and we do not use it for marketing without your consent.

4. Who we share it with

Your information is shared with the healthcare practice you booked with, and with the service providers we use to run the product. Each is used only for the purpose listed:

  • Hosting and database — Supabase, which stores your records
  • Video and voice consultations — Twilio, which carries the call and stores any recording
  • Transcription — Deepgram, which converts consultation audio to text
  • AI assistant — OpenAI and Anthropic, which generate assistant replies and draft summaries (see section 5)
  • Messaging — Meta, where you contact a practice through Instagram or Facebook
  • Payments — Razorpay and PayPal, which process the transaction
  • Email — Resend, which delivers confirmations and notifications

We may also disclose information where the law requires it. Beyond that, we do not share your records with anyone else.

5. AI and your data

The assistant that answers enquiries and drafts summaries is powered by third-party AI models. Before any request leaves our systems for those models, we strip out identifying details such as name and phone number.

Your data is not used to train third-party AI models.

6. Where your data is stored

Your data is encrypted in transit and at rest. Some of the service providers listed in section 4 process or store data outside India in order to deliver their part of the service — video consultations are one example. If you want to know where a specific category of your data is held, ask us at founder@haloaid.com.

7. Retention

We keep information for as long as your practice needs it to care for you and to meet their record-keeping and tax obligations, then delete or anonymise it. Clinical records are kept longer than booking and conversation data, because your doctor is required to retain them.

8. Your rights and data deletion

You can ask to access, correct, or delete your personal data, and you can withdraw consent you previously gave. To request deletion:

Deletion requests are processed within 30 days, after a 7-day grace window in which you can cancel the request. Note that the clinical parts of your medical record are retained under your doctor's record-keeping obligations — see the deletion page for exactly what is removed and what is kept. You can also remove the app from your Facebook or Instagram settings to trigger a deletion request.

9. Security

We use encryption, access controls, database-level separation between practices, and audit logging to protect your data. Our practices are designed to align with the Digital Personal Data Protection Act, 2023.

10. Grievances and contact

If you have a privacy question or complaint, write to our Grievance Officer at founder@haloaid.com. We will acknowledge your complaint and respond within 30 days.

11. Changes to this policy

We may update this policy as the product changes. The date at the top shows when it was last revised.