1. Overview
This policy explains how HealthLitBD ("HealthLitBD", "we") handles information when you use healthlitbd.com and our apps. Health information is sensitive, and we treat it that way.
2. What we collect
- Account details — name, phone number, email, gender, district or address, and a password or your Google sign-in.
- Family members you add — their name, age or date of birth, and relationship to you.
- Health information you or your doctor add — prescriptions, reports and files you upload, medicines and reminders, and appointment history.
- Doctors and hospitals — professional details, registration information and documents for verification, chambers, schedules and fees.
- Payments — the plan you bought, amount, invoice and bKash transaction ID. bKash handles your PIN and account; we never see or store your PIN.
- Location — only when you allow it, to show nearby doctors, hospitals, blood donors or ambulances.
- Usage — basic technical information such as device type, pages used and error logs, to keep the service working and secure.
3. How we use it
- To run the service: bookings, live queues, prescriptions, reminders, records and payments.
- To send you what you need: booking updates, reminders, receipts and important account notices.
- To keep people safe: verifying doctors, preventing fraud and fake accounts, and protecting your account.
- To improve HealthLitBD, using combined statistics that don't identify you (for example, how many people searched a specialty in a district).
We don't use your health information for advertising.
5. What is public
Doctor and hospital profiles, reviews (the reviewer's name is shortened unless they choose to show it), success stories you choose to publish, and blood requests you post are visible to others. Patient records, prescriptions and contact details are never public.
6. How we protect it
- All traffic uses encrypted connections (HTTPS).
- Data is stored with established cloud providers that encrypt it at rest.
- Passwords are stored as secure hashes, never in plain text.
- Access by our team is limited to what's needed to run and support the service.
No system is perfectly secure. If a breach affects your information, we'll tell you and explain what we're doing about it.
7. How long we keep it
We keep your information while your account is open. You can delete your account yourself from Profile → Delete my account: right away, or after 30 days (sign in with Google before then to change your mind). Deleting removes your personal and health information, files and family members; records that also belong to a doctor or hospital, such as past appointments and prescriptions they wrote, stay with them under "Deleted user", without your name or contact details. Payment and invoice records are kept for as long as the law requires for accounting. Backups are overwritten over time.
8. Your choices and rights
- See and update most of your information in your dashboard.
- Remove a file you shared with a doctor, or delete files you uploaded.
- Delete your account yourself from Profile → Delete my account — now, or after 30 days.
- Ask us for a copy of your data, or to correct it.
- Turn notifications and reminder emails on or off in your settings.
For a copy of your data, email privacy@healthlitbd.com from your registered email address. We'll reply within 30 days.
9. Children
Accounts are for adults. Children's information is added and managed by a parent or guardian through their own account as a family member.
10. Cookies and browser storage
We use your browser's storage to keep you signed in and remember settings such as your selected filters. We don't use advertising or tracking cookies.
11. Changes to this policy
If we change how we handle your information, we'll update this page and its date. For important changes we'll tell you by notification or email first.
12. Contact
Privacy questions or requests: privacy@healthlitbd.com · Dhaka, Bangladesh. You can also use our contact form.
Frequently asked questions
Short answers to what people ask us most.
Do you sell my data?
No. We never sell personal or health information, and we don't show third-party ads based on your health.
Who can see my health records?
Only you, and the doctor you share them with for an appointment. Our team doesn't look at your records unless you ask us to help with a problem.
Can I delete my account or get a copy of my data?
Yes. Delete your account yourself from Profile → Delete my account — right away, or after 30 days (sign in with Google before then to keep it). For a copy of your data, email privacy@healthlitbd.com from your registered email. Payment records are kept as the law requires, without your contact details.
Do you use cookies?
We use your browser's storage to keep you signed in and remember your settings. We don't use advertising cookies.
Where is my data stored?
With established cloud providers (database, file storage and email). They process data only on our instructions.
Still have a question?
We read every message and reply within one working day.
