Mukti Health · Bangladesh · Pharmacy Portal
Privacy Notice
1. Who controls your data
Mukti Health Ltd determines how Mukti account and platform data is processed. Healthcare providers remain responsible for clinical records they create and may also act as independent data controllers under Bangladesh law.
2. Data we process
Depending on your role and service, this includes identity and contact details, Mukti Health ID, credentials, health and prescription data, bookings and orders, cash records, support messages, device and security logs, and rider or ambulance location while a rider is online for a shift or a job is active. It also includes consultation call records: who took part, when the call rang, was answered and ended, and how long it lasted, never the call's audio or video. The portal asks for camera and microphone access only when a doctor starts or joins a consultation call.
3. Why and legal basis
We process data to create and secure accounts, provide requested services, coordinate care, meet contracts, protect vital interests in emergencies, prevent fraud, keep legally required records, and meet regulatory duties. Where consent is the basis, it must be specific, clear and withdrawable.
4. Health and other sensitive data
Health, live location and related service data receive stricter access controls. Staff and providers may access only what their authorised role and current care or operational relationship requires. Access and sensitive changes are logged.
5. Service providers and international processing
Mukti uses vetted infrastructure and communication processors, including Supabase, Vercel, KhudeBarta, Resend and LiveKit. Mukti AI and prescription reading in the Patient app send the messages and images a patient chooses, with their consent, to Anthropic (Claude). Consultation calls between a patient and a doctor are carried live by LiveKit, which receives the call audio and, when a camera is on, its video only while the call lasts; calls are not recorded. Doctor dictation may send consented audio to OpenAI for transcription. These providers process data under their service terms and security controls; cross-border processing is assessed and protected as required by Bangladesh law.
6. Doctor dictation
The doctor must tell the people present before recording. Mukti sends the temporary recording to the transcription service, does not store the audio, and records only non-clinical operational audit metadata. Transcript text is placed into an editable draft and becomes part of the medical record only when the doctor saves the consultation.
7. Marketing email
Marketing is opt-in. Campaigns are sent only to addresses with an active consent record. Every message includes an unsubscribe link, and withdrawal stops queued marketing messages. Necessary care, security and transaction messages are unaffected.
8. Retention
We retain data only for the service, safety, dispute and legal periods that apply. Account deletion does not erase records that healthcare, tax, fraud-prevention or other law requires us or a provider to keep. Such records are restricted and retained with an audit trail. Consultation call records are kept with the appointment they belong to, under the same rules.
9. Security
We use role-based access, row-level database controls, encryption in transit, protected secrets, audit logging, least-privilege service access and incident procedures. No system is risk-free; report suspected compromise immediately.
10. Your rights
Subject to law and identity verification, you may request access, correction, completion, information about processing, consent withdrawal, objection or deletion where retention is no longer lawful. You may complain to the competent Bangladesh authority.
11. Children and dependants
A parent or lawful guardian must manage a child or dependant profile. We limit dependant access to authorised family and care relationships and do not knowingly use a child’s health data for marketing.
12. Changes
Material privacy changes receive a new version and, where required, fresh acceptance. The current notice remains available in the app.
Privacy requests and support: support@mukti.health. We will verify identity before disclosing or changing protected records.
← Back to Mukti