Privacy Policy

Who we are

This policy covers the Shasthya website (shasthya.com) and the Shasthya Android app ("Shasthya: Medicine & Doctors", com.plycoder.shasthya). Shasthya is run by plycoder, an independent developer in Dhaka, Bangladesh. Contact: plycoder@gmail.com

Using Shasthya without an account

You can search medicines, doctors, pharmacies, hospitals and conditions, and use Which doctor, DAR verify and the interaction checker, without an account. We do not ask who you are for these. What you type is sent to our server only to return results and is not tied to you.

What we collect

• Account: name, email address, an optional mobile number, and your password (stored only as a secure hash).
• Saved items and price alerts: the medicines, doctors and conditions you save, and medicines you ask us to watch for price changes.
• Prescription Analyzer (signed in): the medicine names, strengths and doses you enter are used to calculate the result and are not stored. If you scan a prescription photo, the photo is sent securely to the text-recognition service we use (bunon.ai) only to read the medicine names. Shasthya does not store the photo.
• Health records you choose to keep (website): patient profiles for you or family members, allergies, medicines, readings, appointments and medical documents you upload. Text in uploaded documents is read on our own server; documents are kept in private storage and shared only through links or appointments you create.
• Medicine reservations: when you ask a pharmacy to keep a medicine for you, that pharmacy sees your name and the request.
• Pharmacy and doctor accounts: business details, stock, sales, purchases and profile information you enter in the portal.
• Corrections you report: the correction text and any contact details you choose to add.
• Server logs: IP address, device or browser type and the pages or API calls requested, used for security, abuse prevention and fixing errors.

Stored on your phone (app)

The app keeps your language choice, your recent searches and the account you last signed in with on your phone. Your sign-in key is kept in Android's encrypted storage. Signing out or uninstalling removes them.

What we do not do

• We do not sell or rent your data.
• We show no ads, and the app contains no advertising, analytics or tracking SDKs.
• We do not use your health information for marketing.
• The website uses only a session cookie to keep you signed in and remember your language; no advertising or tracking cookies.

Who we share data with

• Our hosting provider, which runs the servers that store the data.
• bunon.ai, only for reading prescription photos you scan.
• A pharmacy, only for a reservation you send it; a doctor or person, only through a share link or appointment you create.
• Authorities, only when Bangladeshi law requires it.

Security

All traffic uses HTTPS. Passwords are hashed, medical documents are kept in private storage that is not publicly reachable, and access to the servers is restricted.

How long we keep data

Account data and everything linked to it is kept until you delete your account, then deleted at once. Server logs are deleted automatically after 14 days.

Your choices and deleting your account

You can remove saved items and price alerts at any time. To delete your account and its data, use Account → Delete my account in the app, or shasthya.com/account/delete. You can also email us to see, correct or delete your data.

Children

Shasthya is meant for adults. Children under 13 should not create an account; parents can keep health records for their children in their own account.

Not medical advice

Shasthya gives general information from public records (DGDA, BMDC, DGHS). It does not diagnose or prescribe. Always follow your doctor or pharmacist.

Changes to this policy

If we change how we handle data, we will update this page and the date above, and tell you in the app for important changes.