Skip to content
Medyzen

Mobile App Privacy Policy

Last updated: August 23, 2026.

This policy covers the two Medyzen mobile applications published by Vedly Technology Private Limited:

  • Medyzen — the patient app, for ordering medicines and uploading prescriptions.
  • Medyzen Delivery Partner — the app used by riders who deliver those orders.

It is separate from our website privacy policy, which covers only Medyzen's marketing website.

The patient app

What we collect

  • Mobile number — required. It is your account identity and how we sign you in.
  • Name — required, so orders can be handed to the right person.
  • Delivery addresses — including the recipient's name and phone number, and where relevant the hospital, ward or room you want the delivery brought to.
  • Location — if you grant permission, your device location is used to find your address when adding one. Your pincode is sent to us to check whether we deliver to your area and to route your order to the right fulfilment centre. Granting precise location is optional; you can type your address instead.
  • Prescription images — photographs of prescriptions you capture or upload. These are health information. They are reviewed by a qualified pharmacist before your order is confirmed.
  • Order history — what you ordered, when, and the amount.
  • Searches — the medicine names you type into search, so we can return results.
  • Notification token — if you allow notifications, a device token so we can tell you when your prescription has been reviewed or your order is on its way.

We do not collect your contacts, calendar, microphone audio, browsing history outside the app, or advertising identifiers. The apps contain no advertising and no third-party analytics or tracking SDKs.

Payments

Online payments are processed by Razorpay. Your card, UPI or netbanking details are entered inside Razorpay's own secure screen and are never seen or stored by Medyzen — we receive only a payment reference confirming the payment succeeded. We pass your name, email and phone number to Razorpay so it can identify the transaction. Razorpay handles that data under its own privacy policy.

The Delivery Partner app

This app is only for riders onboarded by Medyzen. In addition to name and mobile number, it collects, for identity verification and payouts required by law:

  • Date of birth and residential address
  • Government identity documents — Aadhaar, PAN, driving licence and vehicle registration, including photographs of them
  • An emergency contact's name, phone number and relationship to you
  • Bank account or UPI details, used solely to pay delivery earnings
  • Location — used to navigate to a delivery address, and a single location point is recorded when an order is marked delivered, as proof of delivery. Deliveries can still be completed if location permission is declined.

Riders see the patient's delivery address and the amount to collect. Patient phone numbers are masked in the rider app.

Who we share data with

We do not sell your data, and we do not share it for advertising. We share it only with service providers who process it on our behalf:

  • Razorpay — payment processing (patient app).
  • Cloudflare R2 — secure file storage for prescription images and rider identity documents.
  • Expo push notification service — to deliver notifications to your device.
  • Google — your device's built-in location service converts coordinates to an address when you add one.

We may also disclose information where the law requires it — for example to a drug regulator, tax authority, or in response to a valid legal order.

How your data is protected

All communication between the apps and our servers uses encrypted HTTPS connections. Access to prescription images and identity documents is limited to staff who need it to fulfil your order or verify a rider. Sessions can be revoked, and signing out or deleting your account ends them immediately.

How long we keep it

Records of medicines supplied are retained under the Drugs and Cosmetics Rules, and invoices under Indian tax law, for the periods those laws require. Because a dispensing record must identify who the medicine was supplied to, each past order keeps the recipient name, contact number and delivery address recorded at the time of that order, even after the account itself is deleted. Prescription images are kept for the period required for pharmacy record-keeping and then deleted. Rider identity and payout records are retained as required by employment and financial reporting rules. Everything else is deleted when you delete your account.

Deleting your account

You can delete your account at any time from inside the app, or by emailing us. What is erased and what we are legally required to keep is set out in full on our account deletion page.

Children

These apps are not intended for children. Accounts are for adults ordering medicines, on their own behalf or for someone in their care.

Your rights

You can access and correct your profile and addresses inside the app, withdraw location or notification permissions in your device settings at any time, and delete your account. For anything else, contact us.

Contact

Vedly Technology Private Limited
Email: founders@medyzen.in
Phone: +91 9910564550