UTIVAC is a vaccine ordering application intended exclusively for authorised clinics and healthcare providers. This policy explains how we collect, use, and protect information in connection with your use of the app.
1. Who We Are
UTIVAC is developed and operated by Medikabazaar, a healthcare commerce platform based in India. For privacy-related queries, contact us at utivac.ho@gmail.com.
2. Information We Collect
We collect only the information necessary to provide the UTIVAC service to your clinic:
Account information: Mobile number used for OTP-based login.
Clinic profile: Clinic name, contact person name, GST number, and delivery address — entered by you during onboarding or profile setup.
Order and transaction data: Vaccine orders, scheme applications, payment records, and delivery status associated with your clinic account.
Usage and analytics data: Screen interactions and in-app events, collected via Mixpanel to improve app performance and usability.
Crash and diagnostic data: Error logs and performance metrics, collected via New Relic to monitor app stability.
Device information: Device type, OS version, and app version — collected automatically for diagnostic purposes.
We do not collect location, camera, microphone, or contacts data. We do not serve advertisements.
3. How We Use Your Information
To authenticate your clinic account via OTP and maintain your session securely.
To process vaccine orders, apply applicable schemes, and generate invoices.
To track and communicate order delivery status.
To maintain your payment ledger and calculate outstanding balances.
To monitor app stability and resolve crashes or errors.
To analyse usage patterns and improve the app experience.
To comply with applicable legal and regulatory obligations in India.
4. Data Sharing
We do not sell or rent your personal information. We may share data only in the following circumstances:
Service providers: New Relic (crash monitoring) and Mixpanel (analytics) receive anonymised or pseudonymised usage data. Both are bound by data processing agreements.
Logistics partners: Delivery address and order details are shared with logistics providers solely to fulfil your orders.
Group companies: Medikabazaar's parent, affiliates, or subsidiaries may access data for internal operational purposes, subject to equivalent privacy protections.
Legal obligations: We may disclose information when required by law, court order, or regulatory authority.
5. Data Security
All data transmitted between the UTIVAC app and our servers is encrypted in transit using TLS (HTTPS). Authentication tokens are stored in the device's secure hardware keystore (iOS Keychain / Android Keystore) and never in plain storage. We apply industry-standard security practices to protect data at rest and during processing.
6. Data Retention
We retain your account and transaction data for as long as your clinic account remains active, and for the period required to comply with Indian tax and financial record-keeping obligations (typically 7 years for GST records). Crash logs and analytics events are retained for a shorter operational period as determined by our service providers.
7. Your Rights
As a user, you have the right to:
Request access to the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated personal data (subject to legal retention requirements).
To exercise any of these rights, email us at utivac.ho@gmail.com. We will respond within 30 days.
8. Children's Privacy
UTIVAC is a professional application intended for adults operating registered healthcare clinics. We do not knowingly collect personal information from individuals under 18 years of age.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and notify users via in-app notification. Continued use of the app after changes constitutes acceptance of the revised policy.