250 Bedded TB Hospital, Shyamoli, Dhaka (“we”, “us”, “the hospital”) values your trust and is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and safeguard your information when you use the TB Hospital – Patient Portal mobile app (“App”), which connects to the hospital’s management system. By using the App, you agree to this Policy. If you do not agree, please discontinue use.

Information We Collect

Information You Provide

• Mobile phone number — to sign you in with a one-time password (OTP) sent by SMS and to link the App to your hospital patient record.

Health Records You Access

• Through the App you can view records the hospital already holds about you: prescriptions, lab/test reports, appointments, and patient profile (name, age, gender, ward/room, patient & OPD IDs). The App only displays these; it does not ask you to enter new health data.

Device and Technical Data

• Device identifier, device model, operating system, platform, and app version — sent with each request to keep your session secure.

Notifications

• If you enable notifications, a push-notification token so we can alert you (e.g. when a report is ready).

Cookies and Tracking

• The App does not use cookies, advertising identifiers, analytics SDKs, or third-party trackers.

How We Use Your Information

• Account & Login — verify your identity and sign you in via OTP.
• Service Delivery — show your prescriptions, reports, appointments, and profile.
• Notifications — send alerts you have opted in to.
• Security & Fraud Prevention — protect your session and detect unauthorized access.
• Legal Compliance — comply with applicable laws and lawful requests.

We do not use your information for advertising, profiling, or selling.

How We Share Information

We do not sell or rent your personal information. We share it only:

• Service Providers — our technology/hosting provider (Poskeeper) that operates the hospital management backend on our behalf, and the SMS gateway that delivers your OTP.
• Legal Obligations — when required by law, regulation, or lawful government request, or to protect safety and rights.
• With Your Consent — when you explicitly authorize it.

Cookies and Tracking

The mobile App does not use cookies or tracking technologies and contains no advertising. (The hospital website may use limited functional cookies; see the website’s own notice.)

Data Retention and Security

• Retention — your hospital records are retained by the hospital under its medical-records and records-management policies. Login tokens remain on your device until you sign out or uninstall.
• Security — data is encrypted in transit (HTTPS/TLS); login tokens are stored in your device’s secure storage (iOS Keychain / Android Keystore); access to hospital systems is restricted.
• Deletion Requests — you may request deletion (see “Your Rights”).
• Limitations — no system can be guaranteed 100% secure.

Your Rights

Subject to applicable law, you may:

• Access — request a copy of your personal data.
• Correction — ask us to correct inaccurate information.
• Deletion — request deletion of your App account and associated data (some clinical records may be retained where the law requires).
• Withdraw Consent — turn off notifications any time in the App or device settings.

To exercise these rights, email ntbcp@hospi.dghs.gov.bd.

Children’s Privacy

The App is intended for registered patients. We do not knowingly create accounts for children under 13 without a parent or guardian; a minor patient’s account should be managed under a parent or guardian’s supervision. If you believe a child has provided data without consent, contact us and we will address it.

International Data Transfers

Your information is processed and stored in Bangladesh. If you access the App from outside Bangladesh, you consent to processing in Bangladesh, which may have different data-protection laws.

Third-Party Services

The App relies on certain third parties strictly to operate: the hospital management backend/hosting (Poskeeper), an SMS gateway (for OTP), and the mobile push services of Google (Android/FCM) and Apple (iOS/APNs) if you enable notifications. We are not responsible for the independent privacy practices of these providers; please review their policies.

Governing Law

This Policy is governed by the laws of the People’s Republic of Bangladesh.

Changes to This Policy

We may update this Policy from time to time. Changes take effect when posted here with a revised “Last updated” date; significant changes may be announced in the App.

Contact Us