1. Scope of this Privacy Policy
This Privacy Policy applies to the Nirvor mobile application, Nirvor website, and related digital services operated by Panorama Infosys Limited. It applies to patients, doctors, healthcare providers, caregivers, family-member profiles, and other users who access or use Nirvor services.
By using Nirvor, you acknowledge that your information will be handled in accordance with this Privacy Policy and any additional in-app notices or consent screens presented for specific features.
2. Information We Collect
Depending on the services you use, Nirvor may collect or process the following categories of information:
2.1 Account and identity information
- Name, mobile number, email address, profile photo, gender, date of birth, age, and address.
- OTP verification information and account authentication/session information.
- For doctors or healthcare providers: professional profile, medical registration/BMDC information, specialty, education, experience, consultation fee, credentials, and approval-related information.
2.2 Patient and healthcare service information
- Appointment information, selected doctor/provider, appointment date and time, consultation type, symptoms, notes, and appointment status.
- Consultation-related information required to support audio, video, chat, or in-person service workflows.
- Prescription information, medicine details, dosage, frequency, duration, medical advice, test advice, and related clinical records created through the service.
2.3 Medical and wellness information
- Medical history, health conditions voluntarily provided by the user, vital signs, blood group, BMI, blood pressure, glucose information, or other health-tracking inputs.
- Medical reports, prescriptions, diagnostic documents, images, PDFs, and other files uploaded by the user.
- Medicine reminder information such as medicine name, schedule, start/end dates, reminder time, and taken/skipped status.
2.4 Technical and device information
- Device model, operating system, app version, device identifiers where permitted, crash logs, diagnostic data, IP-related technical information, and network information.
- Firebase Cloud Messaging token or similar notification identifiers used to deliver push notifications.
- Security, fraud-prevention, and app-integrity signals, including signals provided by supported security services.
2.5 Location information
With your permission, Nirvor may access your approximate or precise location when required for location-based features such as nearby healthcare services, ambulance/emergency support, blood donation/community features, address selection, or geocoding. Location access is only used for enabled features that require it.
2.6 Communication and support information
If you contact Nirvor or Panorama Infosys Limited, we may process your name, contact details, message contents, attachments, and support history to respond to your request and maintain service records.
3. Health and Other Sensitive Personal Data
Nirvor may process sensitive health-related information when you voluntarily provide it or when it is generated through healthcare services you request. Access to medical records and health information is limited to authorized personnel, healthcare professionals, service providers, or systems where such access is required for the requested service or permitted by law.
Nirvor does not sell patient medical records or health information to advertisers, data brokers, insurance companies, or other third parties for advertising purposes.
Doctors or healthcare professionals do not automatically receive unrestricted access to a user's entire medical history. Health information is made available according to the service workflow, the user's sharing choices, authorization, applicable access controls, and legitimate clinical requirements.
4. App Permissions and Device Access
Nirvor may request device permissions only when needed for a specific feature. These may include:
| Permission / Access | Purpose |
|---|---|
| Camera | Profile photos, document capture, medical report uploads, video consultation, and supported healthcare features. |
| Microphone | Audio/video consultation, calling features, speech input, and other user-initiated audio features. |
| Photos / Media / Files | Selecting, uploading, viewing, saving, or sharing medical documents, prescriptions, reports, and profile images. |
| Location | Location-based healthcare services, emergency/ambulance support, blood community features, address selection, and geocoding. |
| Notifications | Appointment updates, consultation calls, medicine reminders, prescriptions, health-service updates, and account/security notices. |
| Phone / Call-related access | Only where necessary for supported consultation or call-notification functionality and where permitted by the operating system. |
You may manage permissions through your device settings. Denying a permission may prevent the related feature from functioning, but unrelated features should remain available where technically possible.
5. How We Use Information
We use information for purposes such as:
- Creating, securing, authenticating, and managing user accounts.
- Connecting patients with doctors, healthcare providers, pharmacies, caregivers, ambulance services, or other supported services.
- Booking, confirming, rescheduling, cancelling, and managing appointments and consultations.
- Supporting audio/video consultation, notifications, prescription workflows, health records, medicine reminders, and other requested features.
- Providing customer support and responding to complaints, requests, or technical issues.
- Preventing misuse, fraud, unauthorized access, and security incidents.
- Monitoring app reliability, diagnosing crashes, improving performance, and maintaining service quality.
- Complying with applicable legal, regulatory, audit, and safety requirements.
- Sending service-related notifications and communications.
7. Third-Party Services and SDKs
Nirvor uses third-party technologies and service providers to support app functionality. Depending on the version and features in use, these may include services from Google/Firebase for app infrastructure, authentication, notifications, storage, database functionality, analytics, app integrity, and related operational services.
Nirvor may also use third-party payment, communication, mapping/geocoding, file-processing, or healthcare-service integrations where necessary. These third parties may process limited information under their own privacy terms and applicable contractual or legal requirements.
Users should review the privacy terms of external services when a Nirvor feature clearly redirects to, integrates with, or depends on such a service.
8. Data Security
Panorama Infosys Limited applies reasonable administrative, technical, and organizational safeguards designed to protect personal and health information against unauthorized access, disclosure, alteration, loss, or misuse.
Safeguards may include, as appropriate:
- Encryption in transit using secure transport protocols.
- Authentication, authorization, and role-based access controls.
- Access restrictions for sensitive healthcare information.
- Logging, monitoring, session controls, and security review processes.
- Secure development and infrastructure practices.
- Data backup and recovery measures where applicable.
No electronic system can be guaranteed to be completely secure. Users are responsible for protecting their account credentials, OTPs, device access, and other authentication information.
9. Data Retention
We retain personal information only for as long as necessary to provide the requested services, maintain legitimate business and security records, comply with legal or regulatory requirements, resolve disputes, enforce agreements, and preserve healthcare records where retention is required or reasonably necessary.
Retention periods may differ depending on the type of data, the service used, legal requirements, healthcare record obligations, fraud-prevention needs, accounting requirements, or active disputes.
When information is no longer required, we may delete, anonymize, de-identify, or securely archive it as permitted by applicable law.
10. Account Deletion and Data Deletion
Users may request deletion of their Nirvor account and associated personal information through an available in-app account deletion option or by contacting Nirvor using the contact information listed in this Privacy Policy.
Following a valid deletion request, we will delete or anonymize eligible personal information, subject to information that must be retained for legal, regulatory, healthcare-record, fraud-prevention, accounting, dispute, or security purposes.
Where technically supported, users may also request correction or deletion of specific information without deleting the entire account.
11. Children, Dependents, and Family-Member Profiles
Nirvor may allow an adult account holder to create or manage a profile for a child, dependent, or family member for healthcare purposes. The responsible adult must have appropriate authority or consent to provide and manage that person's information.
Nirvor is not intended to encourage children to independently submit personal or health information without appropriate parental, guardian, or legally authorized involvement where required by law.
12. Payments and Financial Information
If paid services are offered, payment processing may be handled through authorized payment gateways or financial service providers. Nirvor may receive transaction-related information such as payment status, transaction reference, amount, and service details.
Full payment-card or banking credentials may be processed directly by the applicable payment provider rather than stored by Nirvor, depending on the payment method and integration.
13. AI, Speech, and Automated Features
Nirvor may offer AI-assisted health information, speech-to-text, text-to-speech, or other automated features. Information submitted to these features may be processed to generate the requested response or functionality.
AI-generated information is intended to support users and is not a substitute for professional medical diagnosis, emergency care, or treatment decisions. Users should seek qualified medical assistance for medical concerns and use emergency services when necessary.
14. Your Privacy Choices and Rights
Subject to applicable law and technical availability, users may be able to:
- Access or review personal information associated with their account.
- Update or correct profile information.
- Manage app permissions through device settings.
- Control certain notification preferences.
- Request deletion of eligible personal information or the user account.
- Withdraw consent where processing is based on consent, subject to legal and service limitations.
- Contact us with questions, complaints, or privacy requests.
15. Data Hosting and International Transfers
Nirvor's service providers or infrastructure may process or store information in countries other than the user's country. Where this occurs, Panorama Infosys Limited seeks to use appropriate contractual, organizational, and technical safeguards consistent with applicable legal requirements.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in Nirvor services, technology, legal requirements, security practices, or data-processing activities. The updated policy will be published on this page with a revised effective or last-updated date.
Where required, we may provide additional notice inside the app or through other appropriate communication channels before material changes take effect.
17. Contact Us
If you have questions about this Privacy Policy, your personal information, account deletion, or Nirvor's privacy practices, please contact:
Panorama Infosys Limited
Developer of Nirvor
Dhaka Trade Centre (14th Floor), 99 Kazi Nazrul Islam Avenue, Karwan Bazar, Tejgaon, Dhaka 1215, Bangladesh
Email: hello@panoramainfosys.com
Website: https://panoramainfosys.com/
Nirvor: https://nirvor.health/