Privacy Policy for CHO Saathi

Last Updated: 10 December 2025

This Privacy Policy explains how CHO Saathi (“the App”, “we”, “our”, “us”) collects, uses, stores, and protects personal information. The application is developed to support Community Health Officers (CHOs) under the National Health Mission, Odisha, in delivering standardized primary healthcare services using ICMR Clinical Workflows.

1. Information We Collect

We collect information necessary for secure login, patient registration, and healthcare service delivery.

1.1 CHO Login Information

• User ID / Employee ID
• Password (securely encrypted)
• Facility details
• Device and session details for security

1.2 Patient Registration Information

The App allows patient registration using ABHA ID or manual entry.

a. ABHA ID-based Registration

• ABHA Number
• Demographic data fetched via ABDM (as permitted)

b. Basic Demographic Registration

• Name
• Age / Date of Birth
• Gender
• Mobile Number

1.3 Technical Information

• Device model & OS version
• Crash logs & performance data
• Network and system activity

2. How We Use the Information

• Authenticate CHO login
• Create and manage patient records
• Link patients with ABHA ecosystem (if used)
• Enable healthcare workflows and follow-up
• Improve app performance and security

3. Data Storage and Security

We use industry-standard security methods:

• Encrypted data transmission (HTTPS/SSL)
• Secure authentication protocols
• Encrypted storage of sensitive data
• Role-based access controls

Data is stored on secure, government-approved servers and handled as per national health data management guidelines.

4. Sharing of Information

Information may be shared only under the following conditions:

• Government Health Systems: NHM Odisha, ABDM/ABHA ecosystem, or approved systems.
• Technical Providers: For hosting, analytics, and crash reporting (under strict confidentiality).
• Legal Requirements: Court orders or regulatory mandates.

We never sell or share data for marketing or commercial use.

5. Permissions Used

• Internet access
• Storage (for temporary offline usage)
• Camera (only if ABHA QR code scanning is used)
• SMS read/receive (only for ABHA OTP verification)

6. Data Retention

CHO login data lasts only for the active session. Patient records are retained as per NHM/state health guidelines. ABHA-related records follow ABDM data retention norms.

7. Children's Privacy

The App is meant for trained healthcare workers and not children. No child data is collected unless entered by CHOs as part of healthcare duties.

8. User Rights

Users may request access, correction, or deletion of their login information, subject to NHM policy. Patient data rights follow ABDM & government regulations.

9. Third-Party Services

The App may use:

• Google Play Services
• Firebase Analytics / Crashlytics
• ABDM/ABHA APIs
• Government health platforms

10. Changes to This Policy

We may update this Privacy Policy periodically. Continued use of the App implies acceptance of the updated terms.

11. Contact Us

Developer/Owner: NHM Odisha
Email:nhmodisha@gmail.com
Phone:+91 9439994823