Privacy Policy — ICMS World

Effective date: 18 May 2026 · Last updated: 18 May 2026

This Privacy Policy explains how ICMS World (“we”, “us”, “our”) collects, uses, shares, and protects information when you use the ICMS World mobile application (the “App”, available on Android and iOS) and the website icmsworld.in (the “Website”). Together these form the ICMS World service (the “Service”).

ICMS World is a directory of verified medical professionals. Doctors create a profile in the App; our administrators review and verify it; once approved, the profile is published on the public Website.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who this policy applies to

• Doctors / medical professionals who register, create a profile, and have it published in the directory.
• Visitors of the public Website who browse verified profiles (no account required).

2. Information we collect

2.1 Information you provide

Account information (at sign-up):

• Full name
• Email address
• Password (stored only in a securely hashed form — we never store it in plain text)

Professional profile information (entered by the doctor):

• Profile photograph
• Medical qualifications, degrees, and registration/credential details
• Specializations and super-specializations
• Hospital / clinic affiliation(s)
• Contact address and city
• Optionally, a hospital/clinic phone number that the doctor chooses to make public
• Supporting documents uploaded for verification

2.2 Information collected automatically

• Device & push token: a Firebase Cloud Messaging (FCM) token and a platform label (Android / iOS), used solely to deliver push notifications.
• Technical/log data: IP address, app version, and basic diagnostic information generated when the App communicates with our servers.

We do not collect health records of patients, and the App is not a clinical, diagnostic, or treatment tool.

3. How we use information

We use the information to:

• Create and manage your account and authenticate you (via secure JWT tokens).
• Allow you to build, edit, and submit your professional profile.
• Enable our administrators to review and verify profiles before publication.
• Publish verified profiles in the public directory (see Section 4).
• Power directory search so visitors can find verified doctors.
• Send push notifications (e.g. profile approval status, account updates).
• Maintain security, prevent fraud or abuse, and comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

4. Public visibility of doctor profiles — please read carefully

ICMS World is a public directory. Once your profile is approved by an administrator, the following information becomes publicly visible on icmsworld.in and may be indexed by search engines:

• Your name, profile photo, qualifications, specializations, and hospital affiliation
• Your city
• A hospital/clinic phone number only if you chose to publish one

We apply a strict allow-list so that private contact details are never made public — your login email, primary personal phone number, internal account identifiers, and verification documents are not displayed on the Website or returned by any public interface.

By submitting your profile for approval, you consent to the publication of the public fields listed above. You can request changes or removal at any time (see Section 7).

5. How we share information

We share information only as described below:

• Service providers / infrastructure. We use trusted third parties to operate the Service:
  • Google Firebase Cloud Messaging — to deliver push notifications. Google may process the FCM device token for this purpose.
  • Cloudflare R2 — secure object storage for profile photos and uploaded documents.
  • Hosting / database infrastructure — to run our backend API and database.
  These providers process data only on our instructions and only to the extent needed to provide their service.
• Public directory. The public profile fields in Section 4 are shown to anyone visiting the Website.
• Legal reasons. We may disclose information if required by law, regulation, legal process, or to protect the rights, safety, or property of ICMS World, our users, or the public.

We do not sell or rent personal information to anyone.

6. Data retention

We retain your account and profile information for as long as your account is active. If you delete your account, we delete or anonymise your personal information within a reasonable period, except where we are required to retain certain records to comply with legal obligations or to resolve disputes. Public profile content is removed from the Website when an account is deleted or a profile is unpublished.

7. Your rights and choices

• Access & correction. You can view and edit your profile information at any time within the App.
• Account deletion. You can permanently delete your account directly in the App (Settings → account deletion). Deleting your account removes your profile from the public directory.
• Push notifications. You can disable push notifications in your device settings at any time.
• Requests. For any privacy request you cannot complete in the App, contact us using the details in Section 11.

Depending on your jurisdiction, you may have additional rights (such as the right to object to or restrict processing, or to data portability). We honour applicable rights under the laws that apply to you.

8. Security

We protect your information using industry-standard measures, including encrypted transport (HTTPS/TLS), hashed password storage, secure token-based authentication, and on-device secure storage of authentication tokens. No method of transmission or storage is completely secure, but we work to protect your information and review our practices regularly.

9. Children’s privacy

The Service is intended for licensed medical professionals and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

10. International users

ICMS World is operated from India. If you access the Service from outside India, your information may be processed on servers located in India or in regions where our service providers operate. By using the Service you consent to this processing.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the App. Continued use of the Service after an update means you accept the revised policy.

12. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

ICMS World
Email: privacy@icmsworld.in
Website: https://icmsworld.in

This policy covers the ICMS World mobile application on the Apple App Store and Google Play, and the icmsworld.in website.