by Qasmin
Privacy Policy
Effective 5 November 2026
FairCare helps families in India check hospital bills and understand lab reports. To do that it handles health information, which is some of the most personal information there is. This page explains what FairCare collects, why, who else handles it, how long it is kept, and how you can delete it.
FairCare is run by Qasmin (“we”, “us”). For India’s Digital Personal Data Protection Act, 2023, Qasmin is the data fiduciary for the personal data FairCare handles.
- We use your data only to check your bills and explain your lab reports.
- The photos and PDFs you scan are not stored. We keep what was read from them, not the pages.
- No ads, no selling, no tracking SDKs. We never sell or rent your data, or use it for advertising.
- You can delete a person, an admission or a lab report at any time, and it is gone for everyone who could see it.
1. What we collect
What you give us
- Bills you scan. The photos or PDF pages are sent to our server to be read. From them we keep the hospital’s name and area, the patient’s name and IP number as printed, admission and discharge dates, each line item (description, quantity, rate, amount), the bill’s totals, the checks we ran and any questions they raised. We also keep what you record afterwards: whether each question was corrected or explained, and how much was refunded.
- Lab reports you scan. Pages are read the same way. We keep the lab’s name, the patient’s name and report date as printed, each test result with the range the report printed, and our plain-language explanation. We ask for a separate agreement before your first lab report.
- The people you look after (“members”). A name, and only if you choose to add them: date of birth, mobile number, email and address. When a scanned page prints these details, FairCare offers them to you; they are saved only if you accept. Any details printed on the page that you don’t accept are deleted once you say whose bill or report it is.
- Your account, if you sign in. Your mobile number and name. If FairCare is being used without signing in, you have no name or mobile number on file: your account exists only on your phone.
- Your agreement. Which version of our consent wording you agreed to, and when.
What we collect automatically
- A device identifier, stored scrambled. On Android, the app sends your phone’s Android ID. We never store the ID itself, only a one-way keyed scramble (hash) of it. We use it to limit how many bills one phone can send in a day, since each reading costs us money.
- Your last visit. The time of your most recent visit and the IP address it came from. Each visit replaces the one before, so we keep only the latest. This is kept for our records and to look into abuse; we do not use it to find out where you are.
- When you sent each bill. Just the time and the scrambled device identifier, with nothing from the bill itself. This is for the same daily limit.
- Server logs. Like any web service, our hosting provider records each request to our server (time, IP address, the address requested, and the type of app or browser). We use these logs only to keep FairCare running and secure.
What we don’t collect
We don’t collect your location, contacts, call logs, SMS messages or advertising ID. We don’t use analytics or advertising SDKs. The app uses your camera and files only when you choose to scan or upload a page.
2. Why we use it
- To read your bills, check them against reference prices and simple arithmetic, and show you what is worth asking about.
- To write a polite message you can take to the billing desk, in English, Hindi or Marathi.
- To explain lab report results in plain words.
- To let the family members you invite see the same records.
- To sign you in by sending a one-time code by SMS, when sign-in is required.
- To limit how many bills one phone can send, prevent abuse and keep the service secure.
- To find and fix mistakes in how bills are read, using the stored results above (never the pages).
We process your data based on the consent you give in the app. FairCare does not provide medical advice or diagnosis. Its checks are questions to ask, not verdicts about a hospital.
3. Who else sees it
People you invite
When you invite someone to follow a member, they can see everything kept under that member: every admission, bill and lab report, including ones added later. They can also add records themselves. Only invite people you trust with that person’s health information.
Service providers
These companies process data on our behalf, only to provide FairCare, under their own security and confidentiality terms:
| Provider | What for | Where |
|---|---|---|
| Anthropic, PBC | Reads the pages you scan (via its Claude AI model) and writes lab report explanations. Under Anthropic’s commercial terms, it does not train its models on this data. | United States |
| Google Cloud | Runs our server, which receives your pages and serves your records. | India (Mumbai) |
| Supabase | Hosts our database, where your records are kept, encrypted at rest. | India (Mumbai) |
| MSG91 (Walkover Web Solutions) | Sends sign-in codes by SMS. Used only when sign-in is required. | India |
Pages are sent to Anthropic in the United States to be read. We send only the pages; we do not send your mobile number, your account or your device identifier.
Nobody else
We don’t sell, rent or share your data with anyone else. In particular, we don’t share it with hospitals, insurers, employers or advertisers. We will disclose data only if Indian law requires it, for example under a valid order from a court or government authority.
4. How long we keep it
- Scanned pages: not kept. They are held in memory while being read, then discarded.
- Bills, admissions, lab reports and members: until you delete them. Deleting a member deletes all their admissions, bills and lab reports.
- Patient details printed on a page: kept only until you say whose bill or report it is. After that, only the details you accepted are kept, on the member.
- Sign-in codes: stored only as a scramble, and they stop working after 5 minutes.
- Invite codes: expire after 7 days, or sooner if you withdraw them.
- Device identifier, last visit and IP address: only the latest values, until your account is deleted.
- Server logs: deleted automatically by our hosting provider, usually within 30 days.
Deleted data is removed from our database straight away. Copies in our database provider’s routine backups are overwritten on a rolling schedule.
5. Deleting your data
- In the app: open a member and choose Delete to remove them and everything under them. You can also delete one admission or one lab report. If someone else added the member, you can stop following them instead.
- Your whole account: email support@qasmin.com with the subject “Delete my FairCare account”. Include your registered mobile number, or, if you use FairCare without signing in, the device you use it on. We may ask you to confirm the request. We will delete your account and everything only you could see within 30 days and let you know when it’s done. Members you added are deleted for everyone following them, as they are when you delete them in the app.
- Uninstalling the app without signing in leaves you unable to reach your records again. To remove them as well, delete your members in the app before uninstalling, or email us.
6. Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of the personal data we hold about you and how we use it;
- correct or update it (most of it you can edit in the app yourself);
- have it deleted;
- withdraw your consent at any time. This doesn’t affect anything done before you withdrew it, but FairCare can no longer check bills or reports for you;
- nominate someone to exercise these rights for you if you die or can no longer act for yourself;
- complain to us, and if you’re not satisfied with our answer, to the Data Protection Board of India.
To use any of these, email support@qasmin.com. We reply within 30 days.
7. Adding other people
FairCare is for adults (18 and over). You may add family members and friends whose care you are helping with. Add someone else’s details only if you are looking after them, or they have agreed. When you add a child, you do so as their parent or guardian.
8. How we protect it
- Everything between the app and our server travels over HTTPS.
- The database is encrypted at rest and closed to direct public access.
- Sign-in codes, session tokens, invite codes and device identifiers are stored only as one-way scrambles.
- Each record can be seen only by the person who added it and the people following that member.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
9. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects what we collect or how we use it, we will ask for your consent again in the app before it applies to you.
10. Contact and grievances
Questions, requests and complaints about privacy: support@qasmin.com. We acknowledge complaints within 7 days and resolve them within 30 days.