Health Bear Patient Application

Terms & Conditions and Privacy Policy

Effective Date: 17 June 2026
Last Updated: 17 June 2026
Operated by: Health Bear Children's Clinic

Part A - Terms and Conditions

1. Acceptance of These Terms

These Terms and Conditions ("Terms") govern your access to and use of the Health Bear mobile application and related services (collectively, the "App") operated by Health Bear Children's Clinic ("we", "us", "our"). By downloading, registering for, or using the App, you confirm that you have read, understood, and agree to be bound by these Terms and by our Privacy Policy (Part B). If you do not agree, do not use the App.

2. Definitions

"User", "you" - any individual who registers for or uses the App, whether a patient or an authorised guardian acting on a patient's behalf.
"Provider" / "Clinic" - the healthcare clinic, hospital, or practitioner whose services are made available through the App.
"Content" - all text, data, records, prescriptions, bills, and other information made available through the App.
"Payment Gateway" - Razorpay, the third-party payment processor used to collect payments within the App.

3. Eligibility and Accounts

You must be at least 18 years old to create an account. A parent or legal guardian may use the App on behalf of a minor or dependant and is responsible for all activity on that account.
Registration and sign-in use your mobile number and a one-time password (OTP) delivered by SMS. You are responsible for keeping access to your registered mobile number and device secure.
You agree to provide accurate, current, and complete information and to keep it updated. You are responsible for all activity that occurs under your account.
We may apply reasonable rate limits and anti-abuse controls to OTP requests and may decline to send further codes where abuse or fraud is suspected.

4. Medical Disclaimer

IMPORTANT - The App is a tool to help you book appointments, view records, pay bills, and receive medication reminders. It does NOT provide medical advice, diagnosis, or treatment, and it is NOT a medical device. Content in the App does not replace consultation with a qualified healthcare professional.

Always seek the advice of your physician or other qualified provider with any questions about a medical condition. Never disregard professional medical advice or delay seeking it because of something in the App.
In a medical emergency, do not use the App. Call your local emergency number or go to the nearest hospital immediately.
Reminders and notifications are provided for convenience only and may be delayed or fail to deliver due to device, operating-system, network, or battery-optimisation settings outside our control. Do not rely on the App as your sole means of taking medication or attending appointments.

5. Licence to Use the App

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable licence to install and use the App for your personal, non-commercial use. You must not copy, modify, reverse engineer, decompile, attempt to extract source code from, distribute, or create derivative works of the App, except to the extent this restriction is prohibited by law.

6. Appointments and Bookings

The App lets you view available appointment slots and book a slot with a Provider. Slot availability is shown in good faith but may change; a slot is only confirmed after the booking and payment process completes successfully.
To prevent double-booking, a selected slot may be held for a short period while you complete payment. If payment is not completed in time, the hold is released and the slot becomes available to others.
The Provider, not us, is responsible for the medical services delivered during an appointment. We are not liable for the availability, conduct, timeliness, or quality of care provided by any Provider.

7. Payments, Fees, and Refunds

Consultation fees and bill amounts are set by the Provider and displayed in Indian Rupees (INR) before you pay.
Payments are processed securely by our Payment Gateway, Razorpay, and may be made via UPI, debit/credit card, net banking, or supported wallets. We do not collect or store your full card number, CVV, or banking credentials; these are handled by the Payment Gateway under its own terms and PCI-DSS obligations.
For pre-paid appointments, the appointment and an associated paid bill are created only after your payment is verified by our servers.
If a slot is taken by another patient during your payment, or if a booking cannot be completed after a successful charge, the amount is refunded in full to the original payment method.
Eligible refunds (for example, a cancellation made in accordance with the Provider's policy) are initiated to the original payment method and typically reflect within 5-7 business days, subject to your bank or payment provider's timelines. Specific refund eligibility is governed by the Provider's cancellation policy.
You agree to pay all charges incurred under your account at the prices in effect when the charge is incurred.

8. Cancellations and Rescheduling

You may cancel or reschedule an appointment through the App where the option is available, subject to the Provider's cancellation and rescheduling policy. Refunds on cancellation, where applicable, are governed by that policy and Section 7.

9. Medication Reminders and Notifications

The App can schedule local alarms and push notifications to remind you to take medication or attend follow-ups, based on information entered by you or your Provider.
Notification and alarm delivery depends on your device. Battery savers, "do not disturb", force-stopping the App, revoking permissions, or restarting the device may delay or prevent delivery. You are responsible for granting the permissions the App requests for reminders to function.

10. Acceptable Use

You agree not to:

use the App for any unlawful, fraudulent, or unauthorised purpose;
attempt to gain unauthorised access to the App, other users' accounts, or our systems;
interfere with, disrupt, or place an unreasonable load on the App or its infrastructure;
upload content that is unlawful, infringing, or that you do not have the right to share; or
circumvent, disable, or tamper with any security, authentication, or anti-abuse feature.

11. Intellectual Property

The App, including its software, design, text, graphics, and logos, is owned by Health Bear Children's Clinic or its licensors and is protected by intellectual-property laws. Except for the limited licence in Section 5, no rights are granted to you. Your medical records and personal data remain yours and are handled as described in the Privacy Policy.

12. Third-Party Services

The App relies on third-party services, including Google Firebase (authentication, database, messaging, app-integrity) and Razorpay (payments). Your use of those services through the App is also subject to their respective terms and privacy policies. We are not responsible for third-party services we do not control.

13. Disclaimers

The App is provided on an "as is" and "as available" basis without warranties of any kind, whether express or implied, including fitness for a particular purpose, accuracy, or uninterrupted or error-free operation, to the maximum extent permitted by law. We do not warrant that the App will always be available, secure, or free from errors, or that notifications and reminders will always be delivered.

14. Limitation of Liability

To the maximum extent permitted by law, Health Bear Children's Clinic and its officers, employees, and partners will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, profits, or goodwill, arising out of or relating to your use of (or inability to use) the App, missed or delayed reminders, or the acts or omissions of any Provider or Payment Gateway. Nothing in these Terms excludes liability that cannot be excluded under applicable law.

15. Indemnification

You agree to indemnify and hold harmless Health Bear Children's Clinic from any claims, damages, liabilities, and expenses arising out of your misuse of the App or your breach of these Terms.

16. Suspension and Termination

We may suspend or terminate your access to the App at any time if you breach these Terms, if required by law, or to protect the App or other users. You may stop using the App and request deletion of your account at any time (see the Privacy Policy). On termination, your right to use the App ends, and we will handle your data as described in the Privacy Policy.

17. Changes to These Terms

We may update these Terms from time to time. Material changes will be notified through the App or by other reasonable means. Your continued use of the App after changes take effect constitutes acceptance of the updated Terms.

18. Governing Law and Dispute Resolution

These Terms are governed by the laws of India. Subject to applicable law, the courts of Bengaluru, Karnataka will have exclusive jurisdiction over any dispute arising out of or relating to these Terms or the App.

19. Contact Us

Questions about these Terms can be sent to support@wormhole.co.in or +91 9008363988, Health Bear Children's Clinic, Shri Diya Viola Block-C, taluk, Sarjapur - Marathahalli Rd, opposite HP petrolbunk, opposite Hpnpetrol bunk, anekal, Bengaluru, Karnataka 562125.

Part B - Privacy Policy

This Privacy Policy explains how Health Bear Children's Clinic ("we", "us", "our") collects, uses, shares, stores, and protects your personal data when you use the Health Bear patient app. We act as the data fiduciary for the personal data processed through the App. Please read it together with the Terms in Part A.

1. Scope

This Policy applies to personal data we process through the App. It does not apply to data you provide directly to a Provider outside the App, or to third-party services governed by their own privacy policies.

2. Information We Collect

2.1 Information you provide

Identity and contact data: your name, mobile number, and (if you provide it) email address.
Profile data: details you add to your patient profile, such as date of birth, gender, and emergency-contact information.
Health information: appointment details, prescriptions, diagnoses, bills, and medication-reminder schedules associated with your care. This is sensitive personal data and is treated with additional care.
Symptoms or notes: information you enter when booking an appointment.

2.2 Information collected automatically

Device and technical data: device model, operating-system version, app version, language, and similar diagnostic information.
Push-notification token: a Firebase Cloud Messaging (FCM) token used to deliver reminders and notifications to your device.
App-integrity signals: information used by Google Play Integrity / Firebase App Check to confirm that requests come from a genuine, untampered instance of the App.
Network status: whether your device is online, to support offline-first behaviour and reliable syncing. We do not store your browsing activity outside the App.

2.3 Payment information

When you make a payment, it is processed by Razorpay. We receive limited transaction metadata (such as a payment or order identifier, amount, status, and receipt number) to confirm and record your payment. We do NOT collect or store your full card number, CVV, UPI PIN, or banking credentials - those are handled directly by Razorpay.

3. How We Use Your Information

We use your personal data to:

create and manage your account and authenticate you via mobile-number OTP;
enable appointment booking, rescheduling, and cancellation with your Provider;
display your prescriptions, bills, and medical records, and keep them synced and available offline on your device;
process payments and refunds through the Payment Gateway and maintain transaction records;
schedule and deliver medication reminders, appointment alerts, and other notifications you have enabled;
operate, secure, troubleshoot, and improve the App, and prevent fraud and abuse; and
comply with legal, regulatory, and record-keeping obligations.

4. Legal Basis and Consent

We process your personal data based on your consent (which you provide when you register and use relevant features), to perform our services to you, and to comply with legal obligations, consistent with the Digital Personal Data Protection Act, 2023 and other applicable Indian law. You may withdraw consent at any time as described in Section 9; withdrawal does not affect processing already carried out and may limit your ability to use certain features.

5. How We Share Your Information

We do not sell your personal data. We share it only as follows:

With your Provider / Clinic: to deliver care, manage appointments, and process billing.
With service providers: Google Firebase (authentication, database, cloud functions, messaging, storage, and app-integrity) hosts and powers core App functions; Razorpay processes payments. These providers process data on our behalf or as independent controllers under their own policies.
For legal reasons: where required by law, regulation, legal process, or to protect the rights, safety, and security of users, the public, or our organisation.
In a business transfer: in connection with a merger, acquisition, or reorganisation, subject to this Policy.

6. Third-Party Services

The App uses the following key third parties. Please review their privacy policies:

Google Firebase / Google LLC - https://firebase.google.com/support/privacy and https://policies.google.com/privacy
Razorpay - https://razorpay.com/privacy/

7. Data Security

Data in transit is protected using encrypted (HTTPS/TLS) connections.
Sensitive data cached on your device is stored in encrypted local storage (AES-256), and authentication tokens are kept in the device's secure keystore/keychain.
We use app-integrity verification (Play Integrity / App Check) to help block tampered or fraudulent requests, and we apply anti-abuse limits on authentication.
No method of transmission or storage is completely secure; while we work to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain personal data for as long as your account is active and as needed to provide the App, and thereafter as required to comply with legal, tax, accounting, and medical-record-keeping obligations or to resolve disputes. Some data cached on your device is cleared when you log out or uninstall the App. When data is no longer required, we delete or anonymise it.

9. Your Rights

Subject to applicable law, you may:

access the personal data we hold about you and request a summary of how it is processed;
request correction or updating of inaccurate or incomplete data (much of which you can edit in your profile);
request erasure of your personal data and deletion of your account;
withdraw consent for processing or for notifications; and
nominate another individual to exercise your rights in the event of death or incapacity, as provided under applicable law.

To exercise these rights, contact us using the details in Section 13. We may need to verify your identity before acting on a request.

10. Children's and Dependants' Data

The App is intended for users aged 18 and over. Where a parent or legal guardian uses the App on behalf of a minor or dependant, the guardian is responsible for that data and confirms they have authority to provide it. We process a child's data only with verifiable consent of a parent or guardian, consistent with applicable law.

11. Permissions We Request

Depending on your device, the App may request permissions to function correctly, including: notifications and alarms/exact-alarm scheduling (to deliver reminders even when the App is closed), and network access. You can manage permissions in your device settings; disabling them may affect reminders and other features.

12. International Data Transfers

Some of our service providers (such as Google) may process data on infrastructure located outside India. Where data is transferred across borders, we rely on those providers' safeguards and process such transfers consistent with applicable law.

13. Grievance Officer and Contact

If you have questions, concerns, or complaints about your personal data or this Policy, contact our Grievance Officer:

Name: Dr. Deeraj Kanekanti
Email: support@wormhole.co.in
Address: Health Bear Children's Clinic, Shri Diya Viola Block-C, taluk, Sarjapur - Marathahalli Rd, opposite HP petrolbunk, opposite Hpnpetrol bunk, anekal, Bengaluru, Karnataka 562125
Phone: +91 9008363988

We will acknowledge and address grievances within the timelines required by applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the latest version, and material changes will be notified through the App or by other reasonable means. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.