छोटकरीमा
- तपाईंको स्वास्थ्य जानकारी नेपालभित्रका सर्भरमा सुरक्षित राखिन्छ।
- हामी तपाईंको जानकारी कहिल्यै बेच्दैनौं र विज्ञापनका लागि प्रयोग गर्दैनौं।
- तपाईंले जोडेका अस्पताल र तपाईंले अनुमति दिएका व्यक्तिले मात्र रेकर्ड हेर्न सक्छन्।
- एपभित्रै आफ्नो खाता जुनसुकै बेला मेटाउन सक्नुहुन्छ।
Who we are
BCON PHR is made by B.CON Systems, a product of Citizen Infotech Pvt. Ltd., Nepal. Your account is held on the B-CON server that serves the hospital you chose when you signed up. Each hospital you link remains responsible for the medical records it creates; the app shows you a copy of them.
What we collect
| Information | Where it comes from | Why |
|---|---|---|
| Name, mobile number, email, password (stored only as a one-way hash) | You, when you sign up | To create your account and sign you in with a one-time code |
| Hospital records: visits, diagnoses, medicines, lab and imaging reports, vital signs, vaccines, admissions, appointments, bills and payments | The hospitals you link, after you confirm a code sent to the contact they hold | To show you your own records |
| Records and photos you add (prescriptions, reports, notes) | You | To keep them with your other records |
| Home readings such as blood pressure, sugar, weight, oxygen and temperature | You, or Health Connect when you allow it | To show trends and include them in your records |
| Health Connect data: steps, exercise, sleep, heart rate, hydration and cycle data | Health Connect on your phone, only the types you allow | To show your activity, sleep and cycle screens |
| Questions to the assistant, typed or spoken, and its answers | You | To answer questions about your own records and let you reopen past chats |
| Approximate location | Your phone, only when you open Find care and allow it | To sort nearby hospitals and health posts by distance |
| Device name, app version, notification token, IP address, sign-in times | Your phone | To send notifications you asked for, keep your account secure and show you who viewed your records |
We do not collect your contacts, your photos beyond the ones you choose, or your location in the background.
Health Connect
The app reads from Health Connect only the data types you allow on Android's permission screen, and writes only the blood pressure, blood sugar and weight readings you enter yourself. Blood pressure, sugar, weight, oxygen and temperature readings are saved to your account so they appear with your hospital records. Steps, exercise, sleep, heart rate, hydration and cycle data are read on your phone to draw your screens and are not sent to our servers.
Data from Health Connect is never used for advertising, never sold, and never shared with anyone except as described on this page. Its use follows the Health Connect Permissions policy, including the Limited Use requirements.
The assistant
When you ask the assistant a question, we send the question and a summary of your records to an AI language model service to write the answer. The summary leaves out your name, phone, email and hospital numbers. Spoken questions are turned into text by a speech service, and answers you choose to hear are read aloud by a voice service. Answers are generated by a computer, can be wrong, and are not medical advice; always follow your doctor. You can report any answer from inside the app, and our team reviews every report.
Who can see your information
- You, and anyone you give family access to inside the app, until you remove it.
- Doctors you share with through a share link, until the link expires or you end it. Every view appears under Who viewed my records.
- The hospitals you link, which already hold your medical records.
- Service providers that run parts of the app for us under contract: SMS delivery for sign-in codes, notification delivery (Expo and Google Firebase Cloud Messaging), the AI language, speech and voice services named above, and the payment gateways (eSewa, Khalti, Fonepay) when you choose to pay a bill. They receive only what they need for that task.
- Authorities, only when Nepali law requires it.
We never sell your information and never use it for advertising.
How we protect it
- All traffic between the app and our servers is encrypted (HTTPS).
- Your sign-in token is kept in the phone's secure keystore, and the records saved for offline use are encrypted on the phone.
- The app can require your fingerprint, face or phone PIN to open.
- Our servers are in Nepal, and only the staff who run the service can reach them.
How long we keep it
We keep your account until you delete it. When you delete it, your account, the records you added, home readings, hospital links, family access, share links, reminders and assistant chats are deleted straight away. Copies in server backups are removed as those backups are replaced. Hospitals keep their own medical records as Nepali law requires.
Your choices and rights
- See and download your records from the app (Me, Download my records).
- Turn off Health Connect, location, microphone, camera or notifications at any time in your phone's settings.
- Remove a hospital link, end family access or end a share link in the app.
- Delete your account in the app (Me, Delete my account), or follow the steps at bconhealth.com/phr/delete-account.
- Ask us to correct information we hold. Corrections to a hospital's medical record are made by that hospital.
We handle personal information in line with the Individual Privacy Act, 2075 (2018) of Nepal.
Children
Accounts are for people aged 16 and over. A parent or guardian may keep a child's records through their own account and family access.
Changes and contact
If we change this policy we will update the date above and, for important changes, let you know in the app.