CareNexa

Privacy Policy

Last updated: 19 October 2026.

Who we are

This policy covers the CareNexa Android apps provided to hospitals and clinics, any admin portal used to operate them, and this website (together, "CareNexa"). CareNexa is run by Nitesh Setti. Hospitals and clinics ("Tenants") use CareNexa to manage patients, visits, billing, staff and related operations. Each Tenant decides what to record about patients and staff and is responsible for that data. CareNexa processes that data on the Tenant's behalf to provide the service.

Data we collect

  • Tenant accounts: administrator and staff names, work email, mobile number, hospital name, branding and configuration.
  • Patient records entered by the Tenant: demographics, visit history, prescriptions, lab and pharmacy data, billing and documents the Tenant chooses to store.
  • Staff and HR data: employee profiles, attendance, leave, payroll and performance records when those modules are enabled.
  • Usage and security: sign-in events, role assignments and logs needed to operate and secure the service.
  • Subscription details: modules enabled and commercial terms agreed with the Tenant.

How we use data

To provide HMS features the Tenant enables; to authenticate users and enforce roles; to generate bills and reports the Tenant requests; to support Tenants; and to improve reliability and security.

What we don't do

We do not sell or rent personal or health data, and we do not show ads in the product.

Sharing

Each Tenant's data is kept separate and is visible only to authorised users of that Tenant and to CareNexa administrators who need it to provide support. We use service providers for hosting and infrastructure under contract. We disclose data if required by law.

Security

Data is sent over encrypted connections. Access is controlled by roles and permissions configured by the Tenant.

Retention and deletion

We keep data while the Tenant's account is active. Tenants may have legal duties to retain medical and financial records. You can ask us to delete your user account or Tenant data subject to law; see Delete your account. We act on verified requests within 30 days where possible.

Your rights

Under the Digital Personal Data Protection Act, 2023, you may access, correct or delete your personal data, withdraw consent or raise a grievance, subject to law. Patients should contact their hospital for clinical records. Contact / Grievance Officer: Nitesh Setti, contact@carenexa.in.

Children

CareNexa is meant for healthcare organisations and authorised staff, not for direct use by children.

Changes

We will post updates on this page and change the date above.