Effective date: September 14, 2026
1. Who this policy applies to
This policy applies to Careko and the Careko websites, dashboard, applications and related services (collectively, the “Services”). Careko is currently offered as a prototype and test deployment. In this policy, “Careko,” “we,” “us” and “our” refer to the Careko product team.
When a hospital or other organization uses Careko to manage patient information, that organization generally decides why the information is collected and how it is used. In that situation, the organization remains responsible for its notices, permissions, consents and legal obligations, while Careko processes information to provide the Services.
2. Information we collect
Depending on how you use the Services, we may collect:
- Account and authentication information: name, email address, profile image and account identifiers. If you sign in with Google, we receive the basic profile information that Google makes available through the authorization you approve.
- Organization information: hospital or clinic name, team membership, role, facility details and settings.
- Patient and care information: information entered by an authorized hospital user, such as contact details, demographics, appointments, encounters, tasks and care records.
- ABDM information: ABHA identifiers, verification status and profile information returned by ABDM after the patient or authorized user completes the applicable verification and consent flow.
- Technical information: browser and device details, IP address, approximate timestamps, request identifiers, error logs and security events.
- Communications: information you send when requesting support, a demo or information about Careko.
3. How we use information
We use information to provide, secure and improve the Services, including to:
- create and authenticate accounts and maintain organization access;
- provide hospital workflows, patient coordination and ABDM-related features requested by an organization;
- send service, security and support communications;
- diagnose errors, prevent misuse and maintain audit trails;
- measure and improve reliability and product experience; and
- comply with legal obligations and enforce our agreements.
Google account data is used for authentication and account functionality. We do not sell Google user data or use it for advertising.
4. When information is shared
We may share information only as needed to operate the Services:
- with hosting, database, authentication, monitoring and infrastructure providers that process information on our behalf;
- with ABDM or another integration provider when an authorized user initiates a supported workflow and the required patient consent or authorization is present;
- with the organization and its authorized users who control the relevant Careko workspace;
- when required by law, a valid legal process or to protect people, systems and rights; or
- as part of a restructuring, acquisition or transfer of the Services, subject to appropriate confidentiality protections.
We do not sell personal information. We do not use patient or health information for advertising.
5. ABDM and patient information
ABDM features are intended to be used only by authorized healthcare organizations and only for legitimate care and operational purposes. A hospital is responsible for obtaining the notices, consent and permissions required before using a patient’s information or initiating an ABDM transaction.
Careko does not independently decide a patient’s treatment, provide emergency services or replace a hospital’s clinical, privacy or security controls. ABDM data remains subject to applicable ABDM terms, policies and technical controls.
6. Retention, security and deletion
We retain information for as long as needed to provide the Services, maintain security and audit records, resolve disputes and meet legal obligations. Organizations may request access, correction or deletion of workspace information through their administrator or by contacting us.
We use reasonable administrative, technical and organizational safeguards, including access controls, encrypted connections and audit logging. No internet service can guarantee absolute security, so users must protect their credentials and report suspected unauthorized access promptly.
7. Cookies and similar technologies
Careko may use essential cookies or similar technologies to maintain sign-in sessions, protect accounts and remember basic preferences. We may use limited technical analytics to understand reliability and usage. We do not use patient information for advertising cookies.
8. Your choices and rights
You may choose not to provide optional information, but some Services will not work without required account or organization information. You may request access, correction or deletion of information by contacting us. If you use Careko through a hospital, please contact that hospital first for requests about your patient record.
9. Children and third-party services
The Services are intended for healthcare organizations and their authorized users, not for independent use by children. The Services may link to or integrate with third-party services. Their privacy practices are governed by their own policies, including Google and ABDM policies.
10. Changes and contact
We may update this policy as the Services change. We will post the updated version on this page and revise the effective date. Questions or privacy requests can be sent to hello@careko.in.