LEGAL

Privacy policy

What we collect, why we need it, who sees it, and how you stay in control of it.

Last updated 21 October 2026InstaMG Healthcare Private Limited
IN SHORT
  • We never sell your personal data or use your health information for ads.
  • Your prescription and full address go only to the pharmacy that accepts your order.
  • Today we hold only your waitlist details and anonymous website analytics.
  • You can ask to see, correct or delete your data at any time.

01Who we are

InstaMG is operated by InstaMG Healthcare Private Limited (CIN U46497DL2025PTC443284), a technology platform that connects you with licensed local pharmacies, registered doctors and delivery partners. In this policy, “we” and “us” mean InstaMG Healthcare Private Limited.

This policy covers our website (https://instamg.in), the launch waitlist, and the InstaMG app when it goes live. Under the Digital Personal Data Protection Act, 2023 we are the data fiduciary for the personal data described here.

02What we collect

We only ask for what we need to run the service. What we hold depends on how you use InstaMG.

Waitlist (today)
Your mobile number, whether you joined as a customer, pharmacy or delivery partner, and when you signed up.
Website usage
Pages you visit, the device and browser you use, approximate location from your IP address, and actions such as joining the waitlist. Collected through Google Analytics.
Account (after launch)
Name, mobile number, email if you add one, and your language preference.
Addresses and location
Saved delivery addresses, landmarks and instructions. Your device location, only while you use location features and only with your permission.
Orders
Medicines you order, prices, fees, the pharmacy that fulfilled it, delivery status and invoices.
Health information
Prescriptions you upload, e-prescriptions from consultations, consultation notes, and records you add to the health vault. This is sensitive personal data.
Payments
Payment status and a reference from our payment partner. We never see or store your card number, CVV or UPI PIN.
Support
Messages, calls and photos you share with us, for example when reporting a wrong or damaged item.

03How we use your data

  • To send your order to licensed pharmacies near you and let the first one that accepts fulfil it.
  • To let the accepting pharmacy's pharmacist verify your prescription before anything is packed.
  • To arrange your doctor consultation and attach the e-prescription to your order.
  • To get your order delivered and show you live tracking.
  • To tell you when we launch in your area, if you joined the waitlist.
  • To send order updates, pill and refill reminders you set up, and support replies.
  • To process payments and refunds, prevent fraud and misuse, and meet legal obligations.
  • To understand how the website and app are used so we can improve them.

04Who we share it with

We do not sell your personal data. We share it only as described here, and only what each party needs.

Partner pharmacies
Nearby pharmacies see the items and your general area so they can decide whether to accept. Your name, full address, phone number and prescription are shared only with the pharmacy that accepts your order.
Registered doctors
The doctor you consult sees what you share for the consultation, including earlier prescriptions you choose to attach.
Delivery partners
The rider gets your name, delivery address, instructions and a way to contact you for that delivery.
Service providers
Companies that host and run our systems on our behalf: cloud hosting and databases (Vercel, Supabase), analytics (Google Analytics), SMS and messaging, and licensed payment partners. They may use the data only to provide their service to us.
Authorities
Government or regulatory bodies when the law requires it, for example a valid request from a drug control authority or law enforcement.

05Prescriptions and health information

We treat prescriptions, consultation records and health records as sensitive personal data under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

  • They are used only to dispense medicines, provide consultations and keep your own records.
  • Inside InstaMG, access is limited to the people who need it to handle your order or a support request.
  • Pharmacies may be required by drug laws to keep a record of prescriptions they dispense against. That record is the pharmacy's responsibility.
  • We never use your health information for advertising.

06Cookies and analytics

Our website uses Google Analytics, which sets cookies to count visits and see which pages are useful. It tells us, for example, how many people joined the waitlist. It does not tell us who you are.

You can block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on. The website still works if you do.

07Storage and security

  • Data travels over encrypted connections (HTTPS).
  • Our databases restrict access by role, so customers, pharmacies and riders can only see what applies to them.
  • Our cloud providers may store data on servers outside India, including in Singapore. Where we transfer data abroad we do so as Indian law permits.

No system is completely secure. If a breach affects your data, we will inform you and the authorities as the law requires.

08How long we keep it

Waitlist
Until 12 months after we launch in your area, or earlier if you ask us to delete it.
Account and addresses
While your account is active. If you delete your account, we remove them within 30 days, except what we must keep by law.
Orders and invoices
As long as tax, accounting and drug laws require.
Analytics
Google Analytics keeps usage data for at most 14 months.

09Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

  • Ask for a summary of the personal data we hold about you and who we have shared it with.
  • Ask us to correct, complete or update it.
  • Ask us to erase it, unless we must keep it by law.
  • Withdraw consent you gave earlier. This does not affect what we did before you withdrew it.
  • Nominate someone to exercise these rights for you if you are unable to.
  • Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Email support@instamg.in from the number or email linked to your account, or message us on WhatsApp. We reply within 30 days.

10Children

You must be 18 or older to create an account. A parent or guardian can order medicines or book a consultation for a child. We do not knowingly collect a child's personal data without a parent's or guardian's consent.

11Changes to this policy

If we change this policy, we will update the date at the top. If a change affects how we use data you have already given us, we will tell you in the app or by SMS before it takes effect.

12Contact and grievance officer

Company
InstaMG Healthcare Private Limited
Delhi, India
How complaints are handled and how long each step takes is set out in our grievance redressal policy.
Questions about this policy?
Write to us and a person from our team will reply. For complaints, see grievance redressal.