Privacy Policy - Manasa Health

1. Introduction

Manasa Health ("the App") is a healthcare bill auditing application developed and operated by Manasa Healthcare Services ("we", "us", "our"). The App helps users in India verify hospital bills and medicine costs against government-published healthcare rates.

We are committed to protecting your privacy. This Privacy Policy explains what information the App collects, how it is used, and your rights regarding that information. By using Manasa Health, you agree to the practices described in this policy.

2. Information We Collect

2.1 Images You Provide

The App requests access to your device camera and photo library so you can photograph or select images of hospital bills and medicine strips. These images are transmitted to Google's Gemini AI service solely for the purpose of extracting text and structured data from the bill or strip.

        Images are processed in transit by Google Gemini AI and are not permanently
        stored on Google's servers. We do not retain copies of your original images on
        our servers.
    

2.2 Parsed Bill Data

After AI parsing, the structured data extracted from your bills (e.g., itemised charges, medicine names, quantities, amounts) is stored in Firebase Firestore. This data is stored anonymously — it is not linked to any personal identity, user account, or device identifier.

2.3 Feedback

If you choose to submit feedback, it is collected through Google Forms. Any information you provide in the feedback form is governed by Google's Privacy Policy.

2.4 Information We Do NOT Collect

Personal identity information (name, email, phone number, address)
User accounts, login credentials, or authentication tokens
Personal health records, medical history, or diagnoses
Location data, IP addresses, or device identifiers
Contacts, calendar data, or other on-device information

3. How We Use Your Information

Data	Purpose
Bill / medicine images	Sent to Google Gemini AI for text extraction; not stored permanently
Parsed bill data	Compared against CGHS, NPPA, and PM-JAY government rates to generate an audit report
Audit results	Stored anonymously in Firebase Firestore so you can view your audit history within the App
Feedback	Used to improve the App's features and accuracy

4. Data Sharing and Disclosure

We do not sell, rent, or trade your data to any third party.

We share data only with the following service providers, strictly for the purposes described above:

Google Gemini AI — for image-to-text parsing of bills and medicine strips
Google Firebase (Firestore) — for anonymous storage of parsed audit data
Google Forms — for optional user feedback collection

We may disclose data if required by law, court order, or government regulation applicable in India.

5. Data Retention

Images: Sent to Google Gemini AI for processing. API logs may be retained by Google for up to 55 days for abuse monitoring, then automatically deleted. We do not store your original images on our servers.
Parsed bill and audit data: Retained in Firebase Firestore indefinitely for your in-app access. Since data is anonymous, it cannot be traced back to you.
Feedback: Retained in Google Forms for as long as needed to improve the App.

If you wish to request deletion of specific audit data, please contact us at contact.maddina@gmail.com. We will make reasonable efforts to assist you, though anonymous data may not always be identifiable.

6. Data Security

We use commercially reasonable measures to protect data in transit and at rest, including:

HTTPS/TLS encryption for all network communication
Firebase security rules restricting unauthorised data access
No storage of personal identifiers that could link data to individuals

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Children's Privacy

Manasa Health is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. Since the App does not collect personal information or require user accounts, there is no mechanism through which a child's personal data would be gathered. If you believe a child has somehow provided personal information through our feedback form, please contact us and we will promptly delete it.

8. Device Permissions

Permission	Why It Is Needed
Camera	To photograph hospital bills and medicine strips for auditing
Photo Library	To select previously taken photos of bills and medicine strips

These permissions are requested only when needed and can be revoked at any time through your device settings.

9. Third-Party AI Service Disclosure

        Important: Manasa Health uses Google Gemini AI, a third-party artificial intelligence
        service operated by Google LLC, to process your bill and medicine images.
    

9.1 What Data Is Sent

When you choose to analyze a bill or medicine strip, the following data is sent to Google Gemini AI:

The photograph(s) of your hospital bill or medicine strip that you provide
No other data from your device is sent — no contacts, location, device ID, or personal identifiers

9.2 Who the Data Is Sent To

Your bill/medicine images are sent to Google Gemini AI, operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google processes the images using its Gemini large language model to extract structured text data (item names, quantities, amounts) from the images.

9.3 Your Consent

Before any image is sent to Google Gemini AI, the App displays a clear consent dialog explaining what data will be sent and to whom. No data is transmitted until you explicitly agree. You may decline, in which case no image data is sent and the analysis will not proceed.

9.4 How Google Handles Your Data

Manasa Health uses the Gemini API under a paid Google Cloud billing account. Under Google's Generative AI Additional Terms of Service, this means:

Your images and prompts are not used to train AI models or improve Google products.
Your data is not reviewed by humans at Google.
API logs (including images) may be retained for up to 55 days solely for abuse monitoring and legal compliance, after which they are automatically deleted.

9.5 Data Protection

Google provides the same or equivalent level of data protection as described in this Privacy Policy. Google's handling of data is governed by the Google Privacy Policy.

10. Other Third-Party Services

In addition to Google Gemini AI, the App uses the following third-party services:

Google Firebase (Firestore) — for anonymous storage of parsed audit data. See Firebase Privacy and Security.
Google Forms — for optional user feedback collection. See Google Privacy Policy.

11. Compliance

This Privacy Policy is designed to comply with:

Information Technology Act, 2000 (India) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
Digital Personal Data Protection Act, 2023 (India), to the extent applicable
Apple App Store Review Guidelines, including data collection and privacy disclosure requirements

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted within the App and the "Effective Date" at the top will be revised. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us:

Manasa Healthcare Services
Email: contact.maddina@gmail.com