Privacy Policy

Last updated: 30 September 2026

1. Who we are

GrowMD (“GrowMD”, “we”, “us”) is a service operated by 1 Up Digital LLP, a limited liability partnership registered in India, with its registered office at 111, S.A.S. Nagar Extension, Jalandhar, Punjab, India. We provide the GrowMD website at growmd.in and the GrowMD app at app.growmd.in (together, the “Service”).

This policy explains what information we collect, why, who we share it with and the choices you have. It applies to doctors, clinic staff and partners who use the Service, and to visitors of our website.

2. Information we collect

Information you give us

• Account details: your name, email address, password (stored only in scrambled, non-reversible form), and optionally a phone number.
• Clinic profile: clinic name, speciality, city and state, address, phone and WhatsApp numbers, opening hours, services, website address, languages, brand colours, logo and doctor photos you upload.
• Content: post topics, key points, text, captions, images and instructions you create or edit in the Service.
• Waitlist and contact forms: the details you enter, such as name, clinic, city and phone number.

Information from services you connect

When you choose to connect an account, we receive only what that service allows and what the Service needs:

• Facebook and Instagram (Meta): the Facebook Pages and Instagram professional accounts you choose to connect (their IDs, names and profile pictures), follower counts and basic post performance, and an access key (“token”) that lets GrowMD publish the posts you approve.
• Google Business Profile: the business locations you choose to connect (name, address and ID), the posts GrowMD publishes to them, and an access token that lets GrowMD publish the posts you approve.
• Google Sign-In: your name, email address and Google account ID, if you choose to sign in with Google.

Information collected automatically

• Usage and technical data: pages and features used, device and browser type, IP address and error logs, used to run, secure and improve the Service.
• Cookies: we use one essential cookie to keep you signed in. We do not use advertising or tracking cookies.

Information we do not want

GrowMD is a marketing tool, not a medical records system. Please do not enter patients' names, health records or other patient information into the Service. Our content rules are designed to avoid patient details in posts.

3. How we use information

• To provide the Service: plan your content calendar, write captions, create images, check posts against medical advertising guidelines, and publish or schedule the posts you approve to the accounts you connect.
• To show you results, such as follower counts and post status.
• To run your account: sign-in, security, support, billing and important service messages.
• To keep the Service safe, prevent misuse and meet legal obligations.
• To improve the Service, using aggregated or de-identified information.

We never publish anything to your connected accounts unless you (or someone you have authorised in your clinic) have approved it, or you have switched on automatic publishing.

4. Artificial intelligence

To write text and create images, we send the relevant parts of your request (for example your topic, key points, clinic name, speciality and city) to our AI providers, Anthropic (text) and OpenAI (images). They process this information on our behalf to return a result. Under their API terms, these providers do not use the information we send to train their models. AI-generated content can contain mistakes, so every post is shown to you for review before it can be published.

5. How we share information

We do not sell your information and do not share it for advertising. We share it only as follows:

• With the platforms you connect (Meta, Google), to publish the posts you approve.
• With service providers who help us run the Service, under contracts that limit their use of the information: Cloudflare (hosting, storage and email delivery), Anthropic and OpenAI (AI text and images), Google (sign-in) and Razorpay (payments; we do not store your card or UPI details).
• Within your clinic account: people you invite (such as clinic staff) and, if your clinic uses our agency service, the 1 Up Digital team assigned to your clinic.
• With our referral partners: if you joined through a partner's referral, that partner can see your clinic name, subscription status and the number of posts published each month, so their commission can be calculated. They cannot see your content or connected accounts.
• When required by law, or to protect the rights and safety of our users, the public or GrowMD.
• If the business changes hands: if GrowMD is sold or merged, your information may be transferred to the new owner, who will be bound by this policy.

6. Google user data

GrowMD's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Business Profile data only to publish and show the posts you create in GrowMD. We do not use it for advertising, do not sell it, and do not let people read it except with your permission, for security, or where the law requires.

7. Facebook and Instagram data

We use data from Meta only to connect your accounts, publish the posts you approve and show you how they perform, in line with the Meta Platform Terms. You can remove GrowMD's access at any time from your Facebook settings (Settings & privacy → Settings → Business integrations) or by disconnecting the account in GrowMD. See how to delete your data.

8. Where information is stored and how long we keep it

Our service providers operate worldwide, so your information may be stored or processed outside India, with safeguards consistent with Indian law.

• Account and clinic information: for as long as your account is active.
• Access tokens for connected accounts: until you disconnect the account or delete your GrowMD account; then deleted immediately.
• After you delete your account, we delete your information within 30 days, except records we must keep by law (such as invoices and tax records, kept for the period Indian tax law requires).

9. How we protect information

All connections are encrypted (HTTPS). Access tokens for connected accounts are encrypted when stored and are never shown in the app. Passwords are stored in scrambled form. Each clinic's data is kept separate from every other clinic's. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a personal data breach as required by law.

10. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• correct or update your information (most of it you can change yourself in the app);
• withdraw your consent and ask us to delete your information;
• nominate someone to exercise these rights for you in case of death or incapacity;
• raise a complaint with our Grievance Officer and, if unresolved, with the Data Protection Board of India.

To use these rights, email support@growmd.in from the email address on your account.

11. Children

The Service is for doctors, clinics and their staff. It is not meant for anyone under 18, and we do not knowingly collect information from children.

12. Changes to this policy

We may update this policy as the Service changes. We will post the new version here with a new date and, for important changes, tell you by email or in the app.

13. Contact and Grievance Officer