Terms, Privacy & Regulatory Compliance

Effective Date: August 20, 2026  |  Applicable To: Boturo Doctor, Boturo PillPod Device App, Boturo Consumer App

1. Information We Collect and Process

Depending on which app in the Boturo ecosystem you use, we process the following categories of data strictly for core app functionality:

A. Doctor Profile Information (Boturo Doctor App)

• Identity Details: Full Name, Professional Medical Qualifications (e.g., MBBS, MD), Medical Specialization, and State/National Medical Council Registration Number (optional or verified).
• Clinic / Practice Details: Clinic Name, Practice Address, Official Consultation Phone Number, and Email Address.
• Storage Location: Stored locally on the doctor's device in local Drift/SQLite storage.

B. Patient & Prescription Data (Boturo Doctor App)

• Patient Identifiers: Patient Full Name, optional Age, and optional Sex. (Boturo Doctor does not mandate patient phone numbers or national IDs to author a prescription).
• Clinical Medication Records: Medication brand and generic names, dosage strengths, administration instructions (e.g., "1 tablet after breakfast"), time slots (Morning, Afternoon, Evening, Night), exact administration times, food relations, and course duration.
• Prescription Templates: Doctor-created reusable medication regimens for clinical workflow speed.

C. Smart Hardware & Synchronization Data (Boturo Device / PillPod App)

• Bluetooth Low Energy (BLE) Identifiers: PillPod MAC address and local peripheral UUID used solely to establish an authenticated direct peer-to-peer connection with your physical PillPod device.
• Medication Slot Schedules: Daily 4-slot reminder timings (Morning, Afternoon, Evening, Night) synced over BLE to hardware non-volatile memory.

D. Technical and Diagnostic Data

• Crash & Operational Logs: Local error logs retained on device to diagnose database integrity or BLE transmission errors. We do not use third-party analytics trackers, advertising IDs (AAID/IDFA), or telemetry brokers.

2. Health and Medical Data Protection (HIPAA & DPDP Act Alignment)

We treat all medication records, dosage schedules, and doctor-patient communications with the highest level of confidentiality and data hygiene:

• No Commercial Monetization: We do not sell, rent, license, or monetize any health information or prescription history under any circumstances.
• No Behavioral Profiling or Ad Targeting: Data entered into Boturo is never utilized for marketing, behavioral ad profiling, or shared with pharmaceutical sponsors.
• Preservation of Medical Privilege: The doctor-patient confidentiality relationship is respected by storing data locally on the user's controlled hardware rather than on centralized third-party servers.

3. Zero-Knowledge Prescription Sharing Architecture

When a doctor shares a prescription via a link (https://doctor.boturo.co.in/rx#<payload>) or QR Code:

• URL Fragment Privacy: The prescription payload is compressed (Gzip) and encoded into the URL hash fragment (after the # symbol). Under standard RFC HTTP specifications, URL fragments are never transmitted to the web server in HTTP requests.
• Client-Side Decompression: The recipient's browser or patient app unpacks and renders the prescription entirely client-side using Web API DecompressionStream without the web host ever inspecting the prescription contents.
• Patient Approval Gate: Shared prescriptions never silently overwrite the patient's PillPod hardware. The patient must explicitly review and tap "Add to my routine" before Bluetooth sync occurs.

4. Device Permissions and Purpose Disclosure

5. Third-Party Service Providers

We restrict third-party network services to essential infrastructure:

• Cloudflare Inc.: Provides Edge routing for digital asset links (/.well-known/assetlinks.json), Apple App Site Association (/.well-known/apple-app-site-association), and static fallback web viewing at doctor.boturo.co.in. Cloudflare operates as a high-security CDN/edge proxy and does not inspect client URL fragments.

6. Children's Privacy (COPPA & Global Standards)

Boturo apps are intended for licensed medical practitioners and adult patients (18+). Boturo does not knowingly collect personal information directly from children under 18. Pediatric prescriptions must be authored by a qualified pediatrician and managed by the child's lawful parent or legal guardian.

7. Security and Encryption

We implement defense-in-depth security measures:

• Encrypted Database Backups: Doctor backups exported from the app are encrypted using AES-256-GCM with PBKDF2 key derivation from a doctor-supplied passphrase.
• Secure Storage: Sensitive device tokens and credentials use hardware-backed iOS Keychain and Android EncryptedSharedPreferences / Keystore.
• TLS 1.3 Transport: All edge endpoints mandate HTTPS with modern TLS 1.3 encryption.

Effective Date: August 20, 2026  |  Contracting Entity: Boturo Healthcare Technologies

1. Scope and Nature of the Service

Boturo Doctor is a software tool designed to facilitate the structured creation, local archival, formatting, and digital transmission of prescription schedules from medical practitioners to patients and compatible Boturo PillPod medication adherence hardware.

2. Medical Practitioner Representations and Warranty

If you create or share prescriptions using Boturo Doctor, you represent, warrant, and covenant that:

• You are a duly qualified, licensed medical doctor or practitioner authorized to practice medicine and prescribe pharmaceuticals under the jurisdiction in which you operate.
• You are in good standing with your governing medical council, state medical board, or regulatory authority.
• You will only issue prescriptions in compliance with all applicable digital health, telemedicine, and pharmacy regulations in your jurisdiction.

3. Clinical Decision-Making and Liability Boundary

• No Automated Clinical Diagnosis: Boturo Doctor is not an artificial intelligence medical diagnostic device, clinical decision support system (CDSS), or automated prescribing software.
• Sole Practitioner Responsibility: The prescribing physician retains sole, complete, and unshared clinical, ethical, and legal responsibility for verifying patient identity, conducting appropriate examinations, selecting pharmaceutical agents, determining dosages, evaluating contraindications and drug-drug interactions, and instructing patients.
• Independent Verification: Doctors and patients must independently verify medication names, strengths, and administration timing before physical consumption.

4. Patient Approval and PillPod Synchronization Rules

• Explicit Patient Consent: Prescription links shared from Boturo Doctor require affirmative patient review and approval in the patient's Boturo app prior to updating any physical PillPod hardware.
• Battery & Deep-Sleep Operation: PillPod operates in low-power deep sleep. Medication schedules transfer via Bluetooth LE only when the patient explicitly wakes the device. Boturo is not liable for missed synchronizations resulting from depleted hardware batteries or unconfirmed app prompts.

5. Intellectual Property Rights

All software code, user interface designs, logos, wordmarks (including "Boturo", "PillPod", "From prescription to PillPod"), documentation, and edge routing algorithms are the exclusive intellectual property of Boturo Healthcare Technologies. Users are granted a limited, revocable, non-exclusive, non-transferable license for professional and personal medication management.

6. Disclaimer of Warranties

THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. BOTURO DOES NOT WARRANT THAT THE SOFTWARE WILL BE UNINTERRUPTED, BUG-FREE, OR FREE FROM DATA LOSS.

7. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL BOTURO, ITS DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS, DATA LOSS, MEDICAL COMPLICATIONS, OR ADVERSE DRUG REACTIONS ARISING OUT OF OR IN CONNECTION WITH THE USE OR INABILITY TO USE THE SERVICE.

8. Governing Law and Jurisdiction

These Terms shall be governed and construed in accordance with the laws of India, without regard to its conflict of law provisions. Any legal action or proceeding arising under these Terms will be brought exclusively in the courts of competent jurisdiction in India.

Compliance Standards: Google Play Data Deletion Policy & Apple App Store Review Guideline 5.1.1(v)

How to Delete All Data Inside the Mobile Application

You can instantly and permanently erase all doctor profiles, patient rosters, prescription history, and medication templates from your device at any time by following these steps:

Data Retention & Types of Data Deleted

• Data Purged Upon In-App Reset: Doctor profile, registration numbers, clinic addresses, patient demographics, clinical notes, active and archived prescriptions, schedule slots, custom templates, and temporary cached PDF files.
• Data Retained: None. Boturo does not hold shadow copies or remote backups of your local Drift database.
• Encrypted User Backups: If you created an encrypted backup file (e.g. .boturo_bak), that file is stored on your own external storage or personal cloud drive (such as Google Drive/iCloud) and remains entirely in your possession until deleted by you.

1. No Medical Advice or Doctor-Patient Relationship

The information, tools, and prescription formatting capabilities provided within Boturo apps are for workflow optimization and medication schedule handoff purposes only. Boturo does not practice medicine, provide medical diagnoses, offer pharmaceutical consultations, or establish an independent doctor-patient relationship.

2. Practitioner Clinical Authority

The registered prescribing physician is exclusively responsible for the clinical appropriateness of all pharmaceutical regimens, strengths, frequency, duration, drug-allergy interactions, and food guidelines. Boturo does not override, alter, or validate the clinical wisdom of a licensed practitioner's order.

3. Hardware Medication Synchronization Limitations

The Boturo PillPod device is an assistive adherence tool designed to deliver reminder cues (lights/chimes) based on schedule slots configured by the patient. It does not contain automated pharmaceutical dispensing robotics or chemical verification sensors. Patients and caregivers remain responsible for manually filling corresponding compartments with the correct medications.

This disclosure matches the official Google Play Data Safety Section and Apple App Store Privacy Nutrition Labels submitted for Boturo apps:

Governance, Inquiries & Legal Contact

For questions regarding our privacy compliance, terms of service, data deletion requests, or regulatory filings, contact our dedicated compliance office:

• Data Protection Officer: Privacy & Compliance Lead
• Official Privacy Email: privacy@boturo.in
• Technical Support: support@boturo.in
• Entity Name: Boturo Healthcare Technologies
• Official Web Endpoint: https://doctor.boturo.co.in