Effective date: 29 August 2026 Last updated: 29 August 2026 Application: Dental clinic (Android) · com.bijalwandentalclinic.app
This Privacy Policy explains what information the Bijalwan Dental Care mobile application collects, why it is collected, where it is stored, and the choices available to you.
The application is used by clinic patients and by clinic staff (doctors, receptionists and the clinic owner). It records dental appointment and treatment information, which is health-related information. Please read this policy before using the application.
Data controller. The clinic responsible for the information described in this policy is: Bijalwan Dental Care, Laxmi Tower, Bangali Kothi Chowk, Jogiwala, Dehradun 248001, India.
1. Who Uses This Application
The application supports four types of accounts:
Patients — register themselves and manage their own care and that of family members they add.
Receptionists — manage appointments and register patients at the clinic.
Doctors — record consultations, treatment plans and prescriptions.
Clinic owner / administrator — creates and manages doctor and receptionist accounts.
Doctor, receptionist and owner accounts are created by the clinic. Patients create their own accounts.
2. Information We Collect
2.1 Account and sign-in information
Mobile number. Signing in requires a mobile number and a one-time password (OTP) sent by SMS. The mobile number is stored with your account.
Account identifier and role. A unique identifier for your account and your role (patient, doctor, receptionist or owner).
PIN. After the first sign-in you create a 4-digit PIN used to unlock the application. This PIN is stored with your account record in our database, together with a count of failed PIN attempts.
Sign-in activity. The date and time of your most recent sign-in, and whether your account is active.
2.2 Patient profile information
Full name, gender and date of birth (required to complete a patient profile).
Email address, blood group and postal address details (address line, city, state, PIN code) — optional.
A patient reference number generated by the application.
Profile photo, if you choose to add one.
Family members you add, including their profile details and their relationship to you.
2.3 Health and treatment information
The application records dental health information entered by you or by clinic staff:
Medical alerts — allergies and medical conditions recorded for a patient.
Appointments — date, time, branch, doctor, consultation type and purpose, appointment status, and any note you add when booking.
Treatment plans — diagnosis, clinical notes, planned procedures, the teeth involved (using standard dental tooth numbering), the number of sittings planned and completed, and progress notes.
Prescriptions — diagnosis, medicines prescribed with dosage, timing, duration and instructions, general advice and follow-up guidance.
Medicine doses — the schedule of individual doses for a prescribed course and whether each dose was marked as taken.
Messages — messages exchanged between a patient and the clinic about a specific visit.
2.4 Documents
The application generates prescription documents in PDF format. These are stored so that they can be viewed again, and a record of each generated document (type, file name, size and location) is kept.
2.5 Staff information
For doctor and receptionist accounts, the clinic records name, mobile number, professional details entered in the staff profile, an optional profile photo, and whether the account is active. Doctors' working schedules (working hours, break times and appointment durations) are also stored.
2.6 Information stored on your device
Basic session information — your account identifier, role, mobile number and the currently selected patient profile — so you are not signed out unnecessarily.
A record of the medicine reminders scheduled on your device.
Prescription PDF files you choose to download, saved in the application's own storage on your device.
3. Microphone and Speech-to-Text
The application includes a voice dictation feature used by doctors only, to dictate prescription details instead of typing them.
The microphone is used only while the doctor actively starts dictation on the prescription screen.
Dictation uses the speech recognition service built into the device. Depending on the device and its settings, speech may be processed on the device or by the device's speech recognition provider. That processing is governed by the device manufacturer's and speech provider's own privacy policies.
The application receives only the resulting text. Audio recordings are not stored by the application and are not uploaded to our systems.
4. Notifications
The application sends medicine dose reminders to a patient's device for medicines prescribed to them. Reminders are scheduled on the device itself. From a reminder you can mark the dose as taken or snooze it for 10 minutes. You can turn dose reminders off in your profile, or disable notifications for the application in your device settings.
5. Permissions Used by the Application
Permission
Why it is used
Internet & network state
To connect to the clinic's cloud services.
Microphone (RECORD_AUDIO)
Voice dictation of prescriptions by doctors only.
Notifications (POST_NOTIFICATIONS)
To show medicine dose reminders.
Alarms & reminders (SCHEDULE_EXACT_ALARM)
To deliver dose reminders at the correct time.
Run at startup (RECEIVE_BOOT_COMPLETED)
To restore scheduled reminders after the device restarts.
Vibrate
Reminder alerts.
Selecting a profile photo uses the Android photo picker, which gives the application access only to the single image you choose. The application does not request access to your photo library, videos or audio files.
6. How We Use Information
To create and secure your account and verify your identity when signing in.
To book, confirm, reschedule, cancel and manage appointments.
To record consultations, treatment plans and prescriptions, and to make them available to you and to the treating clinic staff.
To generate prescription documents you can view, save and share.
To schedule medicine dose reminders on your device.
To let you communicate with the clinic about a specific visit.
To manage clinic staff accounts and doctors' schedules.
The application does not use your information for advertising, and does not sell your information.
7. Where Information Is Stored
Information is stored using Google Firebase services operated by Google LLC:
Firebase Authentication — verifies your mobile number by SMS one-time password.
Cloud Firestore — stores account, patient, appointment, treatment, prescription, medicine and message records.
Firebase Storage — stores profile photos and generated prescription PDF documents.
Firebase Authentication also uses Google Play services to verify that sign-in requests come from a genuine installation of the application.
Storage location: The application's database and file storage are configured in Google's asia-south1 (Mumbai, India) region. Google operates this infrastructure and may process information in other locations in the course of providing its services, as described in Google's own privacy documentation linked above.
8. Analytics, Advertising and Tracking
The application does not include analytics tools, crash-reporting tools, advertising networks, or third-party tracking or profiling services. It does not use cookies, and it does not build advertising profiles about you.
9. Who Can See Your Information
Information recorded in the application is used to operate the clinic and is available to:
You — your own records, and the records of family members you have added to your account.
Clinic staff — doctors, receptionists and the clinic owner, for the purpose of providing dental care and running the clinic.
Our service provider — Google, which hosts the application's data as described in section 7.
Information may also be disclosed where required by applicable law or legal process.
Two features share information only when you actively choose to use them: opening the phone dialler to call a patient (staff only), and sharing a prescription document to another application you select on your device.
10. Data Security
Access to the application requires verification of your mobile number by one-time password, followed by a PIN. Accounts can be deactivated by the clinic, which prevents sign-in. Server-side rules control which records the application can create and change.
Please note: no method of transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted to or stored by the application.
11. Data Retention
The clinic retains patient and treatment records for at least 10 years from the patient's most recent visit, in line with medical record-keeping requirements, or longer where required by applicable law. After that period, records are removed by the clinic.
Please note how this works in the current version of the application:
The application does not delete records automatically. Removal at the end of the retention period is carried out by the clinic.
Cancellations and removals inside the application (for example cancelling an appointment, or removing a family member) are recorded as a change of status; the underlying record is kept as part of the clinical history until it is removed by the clinic.
Information stored on your own device — session details, scheduled reminders and any prescription PDFs you downloaded — is removed when you uninstall the application.
12. Account Deletion and Your Choices
Choices available to you inside the application today:
View and edit your profile information at any time.
Add or remove family members linked to your account.
Add or remove your recorded medical alerts.
Turn medicine dose reminders on or off.
Sign out of the application.
Requesting deletion of your account and data
The current version of the application does not include an in-app "Delete Account" option. Account and data deletion is handled by the clinic on request, as follows:
Send your request by email to techshilaminds@gmail.com, or contact the clinic using the details in section 15.
Include your registered mobile number and any other account details that help us identify your records. We need these to locate the correct account.
We verify the request. An authorised person at the clinic checks that the request genuinely comes from the account holder before any information is removed. We may contact you on your registered mobile number to confirm.
We process the deletion manually. Eligible personal and account information is deleted, and clinical records are retained as described below.
What is deleted and what is retained
Deleted on request:
Your account and sign-in details, including your registered mobile number and your PIN.
Your patient profile information — name, gender, date of birth, email, blood group and address details.
Your profile photo.
Family relationship links between your account and family members you added.
Medical alerts you recorded yourself (allergies and conditions).
Messages you exchanged with the clinic through the application.
Retained after deletion:
Clinical and treatment records — appointments attended, treatment plans, procedures performed and prescriptions issued — are kept as part of the clinic's dental records for at least 10 years, as described in section 11. These are removed at the end of that retention period.
Once your account is deleted you will no longer be able to sign in to the application. If you return to the clinic later, a new account will be created for you. Records for family members you added are handled in the same way as your own.
13. Children's Privacy
The application is intended to be used by adults. Children do not hold their own accounts. A child's dental information is managed through the family members feature of an adult account holder's account — the adult adds the child as a family member and books and manages appointments on the child's behalf.
Where information about a child is recorded, it is provided by the adult account holder, or by clinic staff in the course of providing dental care to that child. The adult account holder is responsible for the information they provide about family members.
If you believe a child has created an account directly, please contact us using the details in section 15 and we will remove the account.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page and publish the updated policy at this address. Please review this page periodically.
15. Contact Us
For questions about this Privacy Policy, or to make a request about your information: