Mukti Health Ltd determines how Mukti account and platform data is processed. Healthcare providers remain responsible for clinical records they create and may also act as independent data controllers under Bangladesh law.

Depending on your role and service, this includes identity and contact details, Mukti Health ID, credentials, health and prescription data, bookings and orders, cash records, support messages, device and security logs, and rider or ambulance location while a rider is online for a shift or a job is active. It also includes consultation call records: who took part, when the call rang, was answered and ended, and how long it lasted, never the call's audio or video. The app asks for camera and microphone access only when you check them before a consultation or answer a call. You can refuse, take the call with audio only, or turn the camera off at any time; without a camera the call is audio only. It also includes the family members you add (name, date of birth, gender, how they are related to you and, for anyone 18 or over, when you confirmed you have their permission); medication schedules you save or create from a doctor's prescription, and the doses you mark as taken or skipped; and the values in your published lab results (the value, unit, the laboratory's reference range and its interpretation). For a patient account, an NID, birth registration or passport number is optional at sign-up and needed before a doctor consultation. Your address is kept in parts (house, road, area, city or upazila, district), and Mukti staff who manage the service may group patients by division, district and area to plan where services are offered. Sections 13 to 27 describe the further data that particular features use, only when you use them.

We process data to create and secure accounts, provide requested services, coordinate care, meet contracts, protect vital interests in emergencies, prevent fraud, keep legally required records, and meet regulatory duties. We also use security and access logs as section 10 describes. Where consent is the basis, it must be specific, clear and withdrawable.

Health, live location and related service data receive stricter access controls. Staff and providers may access only what their authorised role and current care or operational relationship requires. Access and sensitive changes are logged. Lab results: the app marks a value as within or outside the normal range, or asks you to contact your doctor, only from the laboratory's own reference range and interpretation, and says which laboratory or hospital the range comes from. These marks are not a diagnosis. When an ambulance booked through Mukti is on its way to a hospital, that hospital's emergency and nursing team can see the allergies, conditions, current medicines and blood group recorded in your Mukti record, or your child's or family member's, so they can prepare. They can see it only until you are admitted or the trip ends. We do this to protect your vital interests; every view is logged and Mukti reviews these logs. Choosing Private for an appointment reduces what a notification shows; it does not change who can see the appointment or your records. Pregnancy information is sensitive health data, and only you can see your pregnancy tracker (section 16).

Mukti shares data with the processors below and with no one else for these purposes. Supabase stores your account, health and order records. Vercel hosts and serves the app and sees request metadata including your IP address. KhudeBarta sends SMS and receives the phone number (yours, or a family member's you saved for SMS updates) and the message text. Resend sends email and receives your email address and message text. OneSignal delivers push notifications on iOS and Android and receives a device push token, a device identifier and the notification text; it does not receive your health records. While an ambulance or a medicine delivery you booked is on its way, OneSignal and the phone maker's push service (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android) also receive a token for that trip's lock-screen update and the words it shows (section 25), never your health information. After you have used Mukti a few times (for example, a medicine order delivered or a consultation completed), the app may ask Apple's App Store or Google Play to show their standard rating prompt, at most once every 120 days. We count those uses on your device only and send nothing to Mukti. Whether the prompt appears, and any rating or review you give, is handled by Apple or Google under their own terms. Google Maps Platform receives your location when you open a map, track an ambulance, or use address auto-complete, and is used to draw maps and turn coordinates into a street address. OpenStreetMap (Nominatim) receives your coordinates when Google Maps is unavailable and is used only to turn them into a street address. ipapi.co and ipwho.is receive your IP address only when you have not granted location permission, to estimate your city so that nearby services can be listed; this is approximate and is never stored as your location. Anthropic receives what is described in the Mukti AI section below: your Mukti AI messages and the images you choose, including prescription photographs, which Claude, its AI service, uses to reply and to read prescriptions. Anthropic also reads an old paper report or prescription you photograph (section 19), drafts your doctor's note and prescription from the consultation text when your doctor uses the AI scribe with your agreement (section 6), and may translate your doctor's written advice into Bangla (section 22). For the scribe and the translation it receives only the text, never your name, phone number or Mukti ID. LiveKit carries consultation calls between you and your doctor: it receives the call audio and, when a camera is on, its video, only while the call lasts. Calls are not recorded or kept. If your doctor uses the AI scribe during a video call, they ask you first; the call's sound is then turned into text as described in section 6 and is not kept. Doctor dictation may send consented audio to OpenAI for transcription. OpenAI also turns the AI scribe's recording into text (section 6), and turns a few seconds of your voice into text for voice search when your phone cannot do it itself and you agreed (section 19). Each processor is bound by its service terms and data-processing terms to confidentiality, security measures and processing limited to Mukti’s instructions, and Mukti does not use a processor that does not provide protections equivalent to those described in this notice. Some of these providers process data outside Bangladesh; cross-border processing is assessed and protected as required by Bangladesh law.

The doctor must tell the people present before recording. Mukti sends the temporary recording to the transcription service, does not store the audio, and records only non-clinical operational audit metadata. Transcript text is placed into an editable draft and becomes part of the medical record only when the doctor saves the consultation. Your doctor's AI scribe: if your doctor uses the AI scribe, they first ask whether you agree. With your agreement, the consultation is recorded on the doctor's computer and turned into text by OpenAI. The audio is not kept. The text is then sent to Anthropic (Claude) to draft the doctor's note and prescription. We send Anthropic only the text of what was said. We do not send your name, phone number or Mukti ID with it. Mukti does not store the recording, the text or the draft. The draft stays on the doctor's screen. Your doctor checks and corrects every line, and nothing goes into your record until they sign. The AI writes only what was said and never adds a medicine dose. The scribe can record the whole visit: in the room, or on a video consultation the call's sound (yours and the doctor's), in parts of a few minutes that are turned into text while the visit goes on. From the same text it lists the next steps the doctor said (a test, a referral, a follow-up date or days of rest) and may draft a referral letter or the doctor's statement on a medical certificate. Nothing is ordered, sent or issued until the doctor does it. A doctor may also tell the scribe how they like their notes written; that holds only the doctor's own words, never yours. We keep a record that the scribe was used: when, by which doctor, for which appointment, and how many lines it suggested. That record never contains what was said. You can say no. Your care is the same either way.

Marketing is opt-in. Campaigns are sent only to addresses with an active consent record. Every message includes an unsubscribe link, and withdrawal stops queued marketing messages. Necessary care, security and transaction messages are unaffected.

We retain data only for the service, safety, dispute and legal periods that apply. Account deletion does not erase records that healthcare, tax, fraud-prevention or other law requires us or a provider to keep. Such records are restricted and retained with an audit trail. The record of a family handover (which records moved, when and between which accounts) is kept with that audit trail. Consultation call records are kept with the appointment they belong to, under the same rules. Sections 13 to 27 say how long each feature's records are kept. Anything not mentioned there is kept with the booking, order or health record it belongs to, under this section.

Medication reminders are off until you turn them on in the app, and you can turn them off at any time. When they are on, we use the medication schedules you saved and the doses you mark to send a reminder at each dose time, as a push notification or in the app, and to show you how many doses you took. A doctor who can see your records may see the same schedules and dose history as part of your health record. Reminders repeat your own schedule or your doctor's prescription; they are not medical advice. A schedule created from a prescription uses only what your doctor wrote; where the times cannot be read exactly, you choose them. Schedules and dose logs are kept with your health record under section 8; stopping a medicine stops its reminders. While you are on Diabetes & BP Care, and unless you turn them off in the plan, we remind you a few days before a monthly medicine from your doctor's prescription runs out, and every three months about HbA1c (diabetes), lipid profile and creatinine tests when we hold no result or booking for them from the last 90 days. These reminders repeat your doctor's prescription and a fixed schedule; they are not medical advice. Antenatal check-up reminders and child vaccination reminders are also off until you turn them on, for each pregnancy or child, and you can turn them off at any time. They follow the official schedule (the WHO antenatal contact weeks; the Bangladesh EPI visits from the child's date of birth) and are sent as a push notification or in the app between 9 am and 8 pm, respecting your quiet hours. The notification on your lock screen says only "Mukti update"; the details appear when you open the app. They are not medical advice either. Reminders on your phone: in the Mukti Health app, your medication reminders are also set on your phone itself, so they arrive even without internet. The notification shows only the dose time and how many medicines, never their names, and you can tap Taken to record that dose or Remind me in 15 min. While your phone sets them, Mukti does not send the same reminder again as a push notification; turning Medication reminders off, or signing out, removes them from the phone.

We use role-based access, row-level database controls, encryption in transit, protected secrets, audit logging, least-privilege service access and incident procedures. No system is risk-free; report suspected compromise immediately.

We keep security and access logs to protect the service and its users: sign-ins, the request logs that hosting keeps (which show the pages asked for and can show unusual automated activity), and the trail and access logs that record important actions and some records opened. If we reasonably believe the law or our Terms have been broken, we may use and keep the relevant logs as evidence and share what is necessary with our legal advisers, courts and authorities, as the law allows.

Subject to law and identity verification, you may request access, correction, completion, information about processing, consent withdrawal, objection or deletion where retention is no longer lawful. You may complain to the competent Bangladesh authority.

A parent or lawful guardian must manage a child or dependant profile. You may also keep a profile for an adult family member (a parent, spouse, brother or sister, or another relative) who does not have their own Mukti account, and only with their permission: when you add someone who is 18 or over, you confirm that you have their permission to manage their health information on Mukti, and we record when you confirmed it. You can book, order and keep records for the people you add; doctors, hospitals and pharmacies see a family member's information only for the care you book for them, as they do for yours. Someone with their own Mukti account manages their own records; we do not give anyone access to another person's account. When a child you added turns 18, you can hand their records over to them (Profile > Family > Handover). We email them a link that works for 14 days; sending a new link stops the old one. They create their own Mukti Health account with that email address, which we confirm with a code, and their date of birth must match the family profile. Their health records then move from your account to theirs: health and lab records, scans, prescriptions, clinical notes and documents, medication schedules, referrals, second opinions, text consults, pregnancy and vaccination records, and the record files you uploaded for them. After the handover you can no longer see these records, and they cannot see yours. Bookings, orders and ambulance trips you made for them stay in your account as your own history. We tell you when the handover is complete, and we keep a record of what moved, when and to which account, as part of our security logs (section 8). If a hospital registers your child (under 18) with you as parent or guardian, it can ask to add the child to your family in the Mukti Health app. Nothing is shared until you confirm, by reading back the code we text to your mobile or by tapping Confirm in your app. You then see your child's hospital appointments, test bookings and results until they turn 18 or you remove the link. Each step is recorded in your child's access history. Removing a family member removes their profile from your account; records a doctor, hospital or pharmacy created for their care are kept as the law requires (section 8). Deleting your account removes the family members you added, apart from such records. We limit dependant access to authorised family and care relationships and do not knowingly use a child’s health data for marketing. For a family member you look after, you may also save their own mobile number, the language for their text messages, and their home address. Care for my parents: if you turn on SMS updates for a family member, Mukti sends a short text to the Bangladeshi mobile number you saved for them when you book a doctor, an ambulance, medicines or a home sample collection for them, and when that booking reaches a step that matters to them (for example, the ambulance is on its way, or the order is delivered or cancelled). You may do this only after they have agreed to receive these texts, and you confirm that they did; we record when you confirmed it. The text gives your first name, the kind of service and its time or order reference; it never names an illness, a medicine, a test or a doctor. You can see a record of each text in your notifications. Turning SMS updates off, or changing the number, stops the texts until you confirm again. Their home address is used as the default pickup when you call an ambulance for them. We keep these details with the family member's profile and delete them when you remove the family member or clear them; records of texts already sent are kept with your notifications and the delivery log under section 8. A pregnancy tracker for a family member, and vaccination reminders for a child, can be kept only for someone you look after in Family.

If you join a waitlist for a doctor's full day, we keep which doctor, day and kind of visit you are waiting for, who it is for, your place in the queue and any time held for you, until you book, leave the list or the day passes. When a time is freed, we tell you by a notification and hold it for you for 15 minutes; it is not shown to other patients while it is held. If you mark an appointment as Private (offered for psychiatry, psychology and counselling), we record that choice with the appointment. Notifications to you about it (in the app, on your phone's lock screen, by SMS or by email) say only "Mukti appointment", and the app leaves it off the Home screen. Your doctor, their practice and Mukti still see the appointment as usual so they can provide your care. Only you can turn Private off. When you check in for an in-person appointment, by entering the reception code in the app or at the reception desk, you are given a token number for that day's queue. We record the time you checked in, your token number, when you were called and whether you were seen, so that the doctor and the reception team can call patients in order. The doctor's practice and, if you booked a doctor at a hospital, that hospital's reception and nursing team see your name and token number in the queue. Your token has its own private link that shows only the token number, how many people are ahead of you, the number being served, an estimated wait, and the doctor's and hospital's names. It does not show your name or any health information. Anyone you share the link with can see this, so share it only with people you trust. The link stops being useful at the end of the day. When it is your turn we send you an in-app notification. Queue tokens are kept and deleted with the appointment record. If you cancel a doctor's booking, the cancellation fee is added to your next booking, and you see it before you book. If the doctor cancels, there is no fee. Mukti's finance team can waive a fee.

Talk to a doctor now. When you ask for a doctor now, we record who the call is for (you, a child or someone else), the age you give, your answers to the two emergency questions, the note you write (up to 300 characters) and, for a request made during an ambulance trip, which booking it belongs to. While we look for a doctor, these details, but not your name, phone number or records, are shown to the doctors who are available at that moment. The first doctor to accept gets a video appointment with you, and from then on only that doctor sees the request. If no doctor accepts in time, or you cancel, the request ends there. The request is kept with your appointment records, in the same way and for the same time as an appointment.

Second-opinion requests and text consults you send to a doctor include your question or the symptoms you describe, the reports and photos you attach, who the request is for (you or a family member), the doctor's written review or answer, and any prescription the doctor signs for it. The files you attach are kept in private storage. Only you and the doctor you sent them to can open them, through a link that works for two minutes, and every opening is recorded. When you write to a doctor by text, the app checks your words for signs of an emergency, on your phone and on Mukti's server, using a fixed list of words. If it finds one, it asks you to call 999 or book an ambulance before anything is sent; if you still send it, the doctor sees that it may be urgent. This check is not a diagnosis. A doctor who answers a text consult can write a prescription only for that consult, only while it is open and for 7 days after the answer, and only if you have allowed them to see your records, as for any consultation. Second-opinion requests, text consults and their files are kept with your health record. Deleting your account deletes the files you attached and your requests, apart from any prescription a doctor signed, which is kept as the law requires. When you book a home nursing or physiotherapy visit, we process who the visit is for (you or a family member you added), the address and map point where the staff should come, the phone number they should call, the time you prefer, any notes you write, the price and the visit's progress (accepted, the name of the staff member sent, on the way, completed, or declined with the hospital's reason). A home visit request is shared only with the hospital or clinic you chose. Its staff see the address, phone number and notes so they can make the visit; other hospitals, doctors and pharmacies do not. Mukti does not provide the care itself. Home visit requests are kept with your bookings under the same rules.

Medicine receipts show the batch number and expiry date of the stock your medicine came from, and the pharmacy's DGDA drug licence number once Mukti has verified it, so you can check what you received. For a prescription order, we record which registered pharmacist at the pharmacy approved it. Prescription photos or PDFs you attach to a medicine order are kept in private storage for the pharmacy's pharmacist to check. If an order contains a medicine that must stay at 2–8 °C, the rider records the temperature of their cold box at pickup and at delivery. If a reading is out of range, the pharmacy and Mukti's safety team are told and may contact you about the medicine. You can cancel a home sample collection, or choose another day, in the app until the collector is on the way. Each change is kept in the booking's history so the lab team can act on it. A Mukti partner pharmacy can book a Mukti doctor or ambulance for you at your request, with your consent. We use your name and mobile number to do so and to text you the reference. If the number matches your Mukti account, the booking appears in your app.

If you join Diabetes & BP Care, we process which of diabetes and high blood pressure the plan is for, the doctor you choose for it, your reminder choices, the targets your doctor sets, and the blood sugar and blood pressure readings you record, so that we can tell you when a reading is outside your range and remind you about refills and lab checks (section 9). Each reading you record is compared with the targets your doctor set or, until they do, with published guideline ranges (American Diabetes Association Standards of Care 2025; European Society of Hypertension 2023; NHS). A reading outside the range is marked and you are told to talk to your doctor; this is not a diagnosis. A very high or very low reading tells you to call 999 or book an ambulance. The doctor you choose for the plan sees your name and that you joined the plan. They see your readings, and are alerted about readings outside your range, only while you share your records with them under Record access; you can stop sharing, change doctor or leave the plan at any time. Leaving stops the alerts and reminders; your readings stay in your health record. If you use the pregnancy tracker, we keep the due date or the first day of the last period you enter, the antenatal check-ups you record (the date and an optional note of where), whether you turned its reminders on, and, when you stop, the reason you chose (the baby is born, no longer pregnant, or added by mistake, which deletes it). You can keep a tracker for yourself or for a family member you look after, with their permission. Only you can see your tracker: it is not shared with doctors, hospitals, pharmacies or Mukti staff, and it is not used for marketing. The tracker's week-by-week guidance and the child vaccination schedule are fixed text taken from the World Health Organization's antenatal care recommendations and the Bangladesh EPI schedule, with the source shown; they are not a diagnosis and do not replace care from your doctor or health worker. If you turn on vaccination reminders for a child, we keep that choice and use the child's date of birth and the vaccine doses you recorded. A pregnancy tracker is kept with your health record until you delete your account; one you mark as added by mistake is deleted at once. Removing a family member deletes their tracker and vaccination reminders.

If the Mukti call centre or your ambulance crew sees the signs of a stroke, heart attack, major injury or a pregnancy emergency, they may send the hospital you are going to a pre-alert before you arrive. It says which of these four conditions they suspect, the ambulance's expected arrival time, and, for a suspected stroke, the time you were last seen well, with an optional short note. It does not include your name. It is what they observe, not a diagnosis. Only the hospital's emergency team (its owners, administrators, emergency and nursing staff) receives it. The hospital's screen may sound an arrival alarm, which shows the ambulance reference and the suspected condition, never your name. The pre-alert is kept with your ambulance booking for as long as the booking record is kept, and every change to it is recorded in our audit log. If the crew takes you to a hospital that uses Mukti, the crew may also share with that hospital's emergency team notes on your condition, the vital signs they measured and a photo such as an ECG, so the team is ready when you arrive. Only the emergency and nursing team of the hospital you are taken to can see it, while you are on your way and until you are admitted. The photo opens only through a link that works for two minutes. Each time they look at it is recorded, and you can ask us who saw it. The crew records what they saw and measured; Mukti does not interpret it or make a diagnosis. It becomes part of your clinical record and is kept like your other clinical files (lab reports, prescriptions), under section 8. We do all of this to protect your vital interests in an emergency.

When a doctor refers you to a hospital: if a doctor referred you through Mukti and you are then admitted to that hospital, the hospital's signed discharge summary and follow-up plan (diagnoses, treatment during the stay, procedures, medicines on discharge, follow-up plan, warning signs and where you went after discharge) are sent to that doctor's Mukti inbox when you are discharged, so they can continue your care. Nobody else receives it. It is recorded in the access log Mukti keeps for your record, which you can ask to see at support@mukti.health. A doctor whose access Mukti has blocked does not receive it. Your record in the national health record format: a doctor or hospital you have allowed to see your records can download them as a file in the international FHIR format, following Bangladesh's national health data standard (DGHS Bangladesh Core). They can do this only while your permission lasts. Each download is recorded in that access log. Records brought from elsewhere: a doctor or hospital you have allowed to see your records can upload a record file about you from another hospital, clinic or app. Mukti keeps it as a draft that nobody else sees. Only the details the clinician checks and accepts (allergies, conditions, medicines as written in the file, and dated results) are added to your Mukti record; the rest is discarded, and the draft is emptied once reviewed or deleted after 30 days if nobody reviews it. A file about someone else (a different NID or date of birth) is refused. Each upload, acceptance and discard is recorded in that access log. Mukti never works out a medicine dose from such a file.

Before a message in Mukti AI or support chat is sent, the app checks it on your phone for words that can mean an emergency, such as chest pain, stroke signs, heavy bleeding, trouble breathing, a seizure, poisoning, bleeding in pregnancy or thoughts of self-harm. If it finds one, it shows how to call 999 or an ambulance, and you can then carry on. Mukti records only that this happened, which kind of warning it was, the screen and the language, never what you wrote, and deletes that record after 180 days. Voice search: if your phone can turn speech into text itself, voice search uses that and nothing reaches Mukti. If it cannot, and only after you agree on that phone, a few seconds of your voice are sent through Mukti to OpenAI to turn them into text for the search box. Mukti does not keep the recording or the words, only that a clip was sent and when (for 90 days), to limit use. OpenAI does not use it to train its models and may keep it for up to 30 days for safety checks. Old paper reports: you can photograph an old paper report or prescription and ask Mukti AI to read it into text. The photo is sent to Anthropic (Claude), under your Mukti AI permission, to read it; Mukti does not keep the photo. Nothing is saved until you check and confirm the text. A saved record is marked "patient-uploaded, unverified" for every doctor who sees it.

If you review a doctor, we keep your star rating, your comment, whether you would recommend the doctor, the things you say went well (on time, listened, explained clearly), which completed visit the review belongs to, and any public reply the doctor writes. You can review a doctor only after a completed visit with them, booked for you or for a family member you look after. Your review is shown to other Mukti users without your name. The doctor sees your rating, comment, recommendation and tags, but not who wrote them, and may reply once in public; we tell you when they do. If someone reports your review, Mukti may hide it for everyone except you, and a hidden review is not counted in the doctor's rating. When you report a review, we keep your report and its reason so Mukti can act on it, and we record the decision. Reviews are kept until you delete them or your account; reports and moderation decisions are kept with the review. After a doctor visit, a medicine delivery, an ambulance trip or a home lab collection, the app may ask one question: how it went, from 1 to 5, with a few words to choose and an optional comment. This is Mukti's own question, never an app-store rating. A rating of 1 or 2 opens a support case, and a member of our team may contact you to put it right. The doctor, pharmacy, hospital, rider or driver never sees who rated them. After a consultation or a hospital stay, Mukti may send you one message asking whether you got your medicine and whether you have any new problems. Answering is optional. If you tell us about a problem, a member of our team will contact you; we do not give medical advice in these messages, and no AI reads your answer. In an emergency, call 999. Ratings and check-in answers are kept with the order, appointment or support case they belong to; a support case is kept as a complaint record (six years).

When you post a blood request, other Mukti members see the blood group, units, hospital and your first name, never your phone number. A member who can donate sends an offer; your number is shared with that member, and theirs with you, only when you accept the offer. Requests close after 72 hours. Mukti's safety team can hide or close a request that breaks the community rules, and keeps a record of that decision. Every patient has a referral code. If you join with a friend's code and complete your first paid service, you and your friend each get a credit off a medicine delivery, paid by Mukti. To stop misuse, Mukti compares the two accounts' phone numbers, NID or passport numbers, and a random code the app keeps on your phone (Mukti stores only a one-way fingerprint of it). If they match, the code is not accepted. Mukti keeps the referral, its outcome and any credit while your account is open. If your employer gives you a Mukti plan, your employer gives us your name and work contact details so we can add you, or you join with your employer's code. Covered services are priced at the plan's terms. Mukti tells your employer only how much the plan was used in total, never what you used it for or any health information. Plan membership is kept while the plan lasts, then with the plan's invoices. If you file an insurance claim, or Mukti records one for you, we keep the insurer, policy number, amounts and the claim's progress, and tell you in the app each time its status changes. Insurance claims and plan invoices are kept as financial records.

How to take your medicines, in Bangla: when a doctor signs a prescription for you or your child, we send you a message in Bangla in the app. It says how to take each medicine and gives the doctor's advice. It is made from the signed prescription only. The medicine lines are translated by Mukti without AI. Your doctor's free-text advice may be translated by Anthropic (Claude), and the doctor can check the translation before signing. We send Anthropic only the advice text. We do not send your name or contact details with it. We use a translation only if every number in it matches the prescription. If one does not match, the message tells you the advice is in your prescription. We keep the message with your prescription, the same as your other health records. The signed prescription is the final instruction.

Your visit summary, in Bangla: after a visit your doctor may send you a short summary of it in plain Bangla: what the doctor found, what to do next, your medicines as on the signed prescription, your follow-up date and the warning signs the doctor told you about. You open it from that visit's Notes / Rx page, and you get a notification when it arrives. If your doctor asks the AI to draft it, they ask you first; only four parts of the doctor's own note of the visit (your main complaint, the doctor's impression, the plan and the follow-up instructions) are then sent to Anthropic (Claude), without your name, phone number or Mukti ID. Your prescription is never sent: Mukti adds the medicines from it without AI. The AI writes only what the note says, and your doctor reads and corrects it before sending. You (or, for a child, the parent or guardian) and the doctor who sent it can read it. We keep the summary with your visit, like your prescription, and a record that it was drafted or sent, never the words in that record. You can say no; your doctor can still write it themselves.

When you have a test or scan at a hospital or diagnostic centre that uses Mukti, its machines may send the result to your Mukti record through the Mukti Bridge, which runs in the Mukti Hospital app on one of the facility's own computers, or the facility's own hospital or laboratory system may send it to Mukti directly over a secure connection that uses keys the facility manages. Mukti receives the report, the measured values (for example your blood count), a PDF of the report, details about the scan (the type of scan, the date, how many images, which machine), and for scans up to three "key images" the facility chooses. The facility is responsible for the result; Mukti stores it and shows it to you, to the doctor who ordered it, and to doctors and facilities you have allowed to see your records. Where images are kept: the full set of images from a scan stays with the hospital or diagnostic centre, on its own Mukti Bridge computer or image archive in Bangladesh. Mukti's cloud keeps only the report, the values, the PDF, the scan details and up to three key images per scan, in private storage that opens only through short-lived links (two minutes) that are recorded each time they are used. To get the full scan, ask the facility for a copy. Matching a result to you: a result is added to your record only when it carries the order number the facility gave your test, or exactly one Mukti ID that belongs to you and the facility is already caring for you (an open visit, an order, or your permission to see your records). Mukti never attaches a result because a name or date of birth looks similar. Anything else waits for the facility's staff, who search only by Mukti ID, NID, mobile number or the facility's own patient number; every match they make is recorded and can be undone before you see the result. When staff match a result, Mukti remembers the facility's own patient number for you so its staff can find you by it next time; it is never used to attach a result on its own. A result a facility's own system sends directly follows the same rules: the same matching, the same holds and the same PDF. A test message a facility sends while setting up a machine or a system is never added to anyone's record; Mukti keeps only that the test arrived, its test codes and counts, for 30 days. When results are released to you: you see a result when it is final. Preliminary results are never shown to you. A result with a critical value is shown after the facility records that a doctor has been told, and the doctor who ordered the test is alerted at once. Some sensitive tests (such as HIV, genetic tests and biopsies) are released by a doctor first, and a facility may choose to hold other tests for a doctor or for a few hours; it cannot release anything sooner than this. When a hospital or lab that uses Mukti tests your sample, each tube gets a label with a barcode, your name and the last four characters of your Mukti ID, so it cannot be mixed up. If the lab's analyser is connected two-way, it reads the tube's barcode and the hospital's Mukti Bridge tells it which tests were ordered, together with your name, Mukti ID, date of birth and sex, as the hospital's own lab system would. This stays on the hospital's own network. Mukti records where each tube is (collected, received in the lab, on the machine, resulted) and, if a tube is rejected, why (for example a clotted or haemolysed sample), so the lab can collect again. A hospital may choose to release a lab result from its analyser automatically when every value passes the lab's own checks (reference and critical limits, a comparison with your previous result, the analyser's warnings, sample comments and the day's quality control). Anything that does not pass is checked by a person before you see it, and critical results still wait until a doctor has been told. These checks are made by fixed rules the lab sets, not by artificial intelligence, and every decision is recorded. The doctors treating you can see how a result was approved; this does not change what you see. Every result comes with a PDF: the facility's own, or one Mukti prepares with your name, Mukti ID and the facility's report. The QR slip: at registration or when a test is ordered, the facility may print a slip with your name, your Mukti ID and the test's order number, each also as a QR code, so its machines record the result against the right person. The slip holds no test results. These results, values, PDFs and key images are kept with your health record, like other lab reports. A result that cannot be matched keeps the machine's patient details only until the facility matches or dismisses it, and then as part of the audit trail.

Registered at a front desk: a hospital that uses Mukti may register you at its front desk. It then makes a Mukti account for you with your name, sex, date of birth or age, mobile number, address, an emergency contact and, if you give it, your NID or birth registration number, and gives you a Mukti ID by SMS. A child is registered with a parent or guardian. No one can sign in to this account until you take it over in the Mukti Health app: you confirm your mobile with an SMS code and give your date of birth (after five wrong answers in a day, taking over is paused for that number), then choose a password and may add an email address. From then on you sign in with your mobile number like any Mukti account, and you can delete the account in the app. A hospital front desk can find a Mukti account only by the full mobile number, NID or Mukti ID you give it. If you have not been to that hospital before, the desk sees only that an account exists and the last three digits of its mobile. It sees your details and links your visit only after you read back a code we send by SMS to your mobile. Every search a desk makes is recorded. The hospital that registers you can see and add to the records it keeps for you through Mukti, so it can treat you before you use the app. When you take the account over, you will see that hospital under Who can see my records, and you can shorten or end its access there at any time. Other hospitals and doctors see your records only when you allow it. If the hospital registered you twice, it can join the two records with a second staff member's approval; only that hospital's own visits, bills and orders move to the record you keep, permissions you gave are never moved, and the extra Mukti ID is retired. Hospitals may also record your visitors' names and mobile numbers, your test bookings, and birth and death register entries, for their own records. Seeing a doctor at a hospital: the doctor writes your consultation, tests and prescription in Mukti with their own Mukti doctor account, exactly as in a Mukti consultation: your prescription appears in the app with instructions in Bangla, and any pharmacy can check it. The hospital may record your blood pressure, pulse, temperature, oxygen level, weight and height before you see the doctor. The hospital's own doctors see your earlier records only through the access you gave that hospital, or when you allow the doctor yourself; doctors of other hospitals do not. If you are admitted, the hospital may convene a medical board of its doctors; their decision and signatures are kept in your hospital record. On the ward: if you are admitted to a hospital that uses Mukti, its nurses and doctors keep your ward record in Mukti: the medicines you are given (checked by scanning your wristband and the medicine), your observations and early-warning score, assessments of your risk of falls, pressure sores, blood clots and poor nutrition, your care plan, fluids, drips, wounds and the handover between shifts. Only that hospital's staff caring for you can see it. Your observations are added to your Mukti record only if you have allowed that hospital to see your record. If you tell a hospital's nurse or doctor about an allergy while you are admitted, they can add it to your Mukti record (only if you have allowed that hospital to see your record), so that every doctor, hospital and pharmacy checking your medicines on Mukti sees it. If you have an operation, the theatre team records the booking and the World Health Organization surgical safety checklist (for example allergies and the instrument count) in Mukti; only the hospital's theatre, nursing and billing staff see it, and nothing about it is sent to your phone. Hospital bills: the hospital makes your bill in Mukti. The bill lists what was done for you (consultation, tests, bed-days, medicines, operations and packages), any discount and why, and what you and any company or insurer paid. If you pay at the counter by card, bKash or Nagad, the cashier types in the terminal reference or transaction ID so the receipt can be checked; Mukti does not take the payment and never sees your card or wallet number. If a company or insurer pays part of your bill, the hospital checks that you are their member (using the member list they gave the hospital, or your Mukti employer plan) and shares the bill with them. If the hospital sends an insurance claim to Mukti, Mukti's finance team handles it as described in section 21. If your hospital sends you a payment link, it opens a Mukti page that shows only the hospital, the bill number and the amount due. You pay on the payment company's own secure page (the hospital's own account with, for example, SSLCommerz, bKash, aamarPay or ShurjoPay); the money goes straight to the hospital. Mukti never sees your card number, PIN or one-time code; for the payment page, Mukti passes the payment company the name and phone number the hospital has on your bill, and keeps the payment's reference numbers, amount, time and result with your bill. You can see your bills and receipts, and download them as PDFs, in the app. The hospital keeps your bill as a financial record, for at least five years; only its billing staff and you can see it, and Mukti's finance team sees totals only. Messages from the hospital: when a hospital that uses Mukti treats you, we tell you when your bill is final, when a deposit, refund or payment link is recorded, when your discharge summary, prescription or test result is ready, when a test booking changes and when a referral is answered. If you use the app, this comes as an app notification; if not, as one SMS to your own mobile. These messages never contain a diagnosis, result or medicine. Medicines given at discharge become a Mukti e-prescription in your Records that you can order from a Mukti pharmacy. A hospital doctor may refer you to a Mukti doctor or hospital; they receive the referral note and see your records only if you allow them. The hospital also sends your discharge summary to the doctors you have already given access to your records; each send appears in your access history.

In the app, from hospitals that use Mukti: Hospital bills shows, for each of your hospital bills, what your company or insurer covers, why you pay the rest (for example items they do not pay or a room above your entitlement), the hospital's pre-approval and claim with the payer and their amounts, and what you still owe; it takes no payment, and the hospital's tax invoice is there as a PDF when the hospital charges VAT. If you are the confirmed guardian of a child under 18 at that hospital, you see the same for the child's bills. Every lab report has "Is this report real?", which opens the public check on mukti.health with the report's own check code, the same check the QR code on the printed report opens. A scan report shows the radiologist's written report and the key images they chose, signed for you for two minutes each; the full scan stays at the hospital. NICU summary: if your baby is in a hospital's newborn intensive care unit and the hospital has turned this on, you see, as the baby's confirmed guardian, a daily summary: the baby's weight, the feeds given against the doctor's feeding plan, the days in the unit and the cot-day charges on the bill, and nothing else of the record. Follow-up after a hospital stay: when your signed discharge summary gives a follow-up date or names a doctor, the app shows it, reminds you three days before and on the day (as for other follow-up reminders, section 27), and lets you book the doctor or ask the hospital to book the visit; the hospital then sees your name, mobile number, the follow-up and the day you asked for. Each time a guardian views a child's bills, NICU summary or follow-up, it is recorded. The discharge summary PDF follows the hospital's own printed layout when the hospital has set one.

Live tracking on your phone: while an ambulance or a medicine delivery you booked is on its way, the Home screen shows a live tracking card, and your phone can show the same progress outside the app: on iPhone as a Live Activity on the lock screen (and, on iPhones that have it, the Dynamic Island), and on Android as an ongoing progress notification. It shows only the kind of service, its stage, the expected arrival time and the vehicle's registration number or the rider's first name. It never shows your name, address, condition, medicine or test, and it never shows advertising. Anyone who can see your phone's screen can see it. You can turn it off for Mukti Health in your phone's settings (iPhone: Settings > Mukti Health > Live Activities; Android: the app's notification settings) and still follow the trip in the app. It ends when the trip ends, and the phone removes it soon after. To update it while the app is closed, Mukti sends each update through OneSignal and Apple's or Google's push service with a token that belongs to that one trip; the token is used for nothing else. Sharing a trip: you can share a link that lets someone follow your ambulance or your medicine delivery live. Anyone with the link can open it in a web browser without a Mukti account and see the trip's stage, where the vehicle is on a map, the expected arrival time and the vehicle's registration number (for a delivery, the rider's first name and the delivery area). For an ambulance it shows the hospital it is going to only if you choose to include it. It never shows your name, phone number, condition or medicine. The link stops working when the trip ends, when you tap Stop sharing, or 12 hours after you shared it, whichever comes first. Anyone the person you send it to forwards it to can see the same, so share it only with people you trust. Mukti records when a link was made and stopped; to stop misuse it limits how often a link can be opened and keeps only a scrambled form of the opening device's network address for a short time. Mukti does not learn who opened it. Handover code: for a medicine delivery, the app shows you a short code. Give it to the rider only when the order is in your hands; the rider enters it to complete the delivery. The rider never sees the code before you give it. Mukti records with the order when the code was entered and by which rider, and any wrong attempts, which are limited. Two deliveries on one trip: a medicine rider may carry one other nearby order on the same trip. The app then tells you that your rider has one other delivery and whether yours is the current stop; you never see the other person's name, address or order, and they never see yours.

Reports offline: the app keeps a copy of your reports on your phone so you can open them without a connection. The copy is encrypted, only the Mukti Health app can open it, and it is deleted when you sign out. It is not sent anywhere and it is not part of Mukti's records; Mukti's own copy is unchanged. Anyone who can unlock your phone and open the app while you are signed in can see it, so keep your phone locked. Lab trends: the app can draw a chart of one test's values over time from your published results, with the laboratory's own range. It uses only data already in your record and collects nothing new. A chart is not a diagnosis or medical advice; talk to your doctor about what it means. Add to calendar: when you tap Add to calendar, the app adds that appointment or booking to your phone's calendar with its title, time and place. On iPhone the phone's own new-event screen opens for you to save the event, and the app asks for no calendar permission; on Android your calendar app opens for you to save the event; in a web browser you download the event as a calendar file. Mukti does not read your calendar and receives nothing from it. The event is then yours, in your calendar, and Mukti cannot change or delete it. Apple Health and Health Connect: if you connect Apple Health (iPhone) or Health Connect (Android), the app reads only the kinds of reading you choose in the app, and only the ones you allow in your phone's own permission screen. They can be: heart rate (an average for each hour), resting heart rate, walking heart rate, heart rate variability, blood oxygen, breathing rate, body temperature, cardio fitness (VO2 max), blood pressure and blood glucose; daily totals of steps, walking and running distance, active energy, exercise minutes and flights climbed; how long you slept each night; and weight, height, BMI, body fat, lean body mass and waist size. Some of these are not offered on Android. It never writes to Apple Health or Health Connect and reads nothing else: no clinical records, reproductive or sexual health, mood or mental health, medicines, heart recordings (ECG), sound levels, mindfulness or nutrition. The readings you import are saved in your Mukti health record, marked as coming from Apple Health or Health Connect, and shown to you and to the Mukti doctors you allow to see your records, only while that permission lasts (for example the doctor of your Diabetes & BP Care plan, section 16). They are used only to provide this feature and your care. They are never used for advertising or marketing, never sold, never used to train AI, and never shared with anyone else, and Mukti does not store them in iCloud. You can disconnect in the app and turn off access in your phone's settings at any time; readings already imported stay in your record until you delete them (choosing to stop importing a kind of reading deletes that kind) or your account. Readings in the background: once you connect Apple Health or Health Connect, new readings of the kinds you chose come in about once a day even when the app is closed (on Android only after you allow Health Connect's background access), and the app also brings in what is new when you open it. Your phone sends them with a key that belongs to that phone. The key can only send those readings and record a dose you mark as taken on a reminder; it reads nothing, Mukti keeps only a scrambled form of it, and it ends when you sign out. App lock: if you turn it on in Settings, the app asks for your phone's Face ID, fingerprint or passcode when you come back to it after a few minutes. The check happens on your phone and Mukti never receives it, and the app never locks during an emergency or a live ambulance trip. Face ID login: if you turn it on, your login (your email or mobile number and your password) is kept only on your phone, locked by Face ID, Touch ID, your fingerprint or your phone's passcode, and is used only to sign you in to Mukti the way typing it would. Mukti never receives your face, fingerprint or passcode; the phone only answers yes or no. Turn it off in Settings, or choose Remove when you sign out, and it is deleted from the phone; it is also deleted when you delete your account. Scanning a paper: the phone's own document scanner (Apple's on iPhone; Google's on Android, through Google Play services) finds the page's edges and sharpens it on your phone, and the scan is then used exactly like a photo you take. Home-screen widget: if you add it, it shows today's medicines and your next appointment from a copy the app keeps on your phone. Anyone who can see your unlocked home screen can see it; it never appears on the lock screen, and the copy is deleted when you sign out.

Follow-up reminders: when your doctor sets a follow-up date for your visit, the app reminds you to book it three days before and on the day (between 9 am and 8 pm), with a notification and a page in the app that shows the doctor and the date with a Book button. We use only the follow-up date and the doctor's name, never the doctor's notes. The notification on your lock screen does not name a doctor, a condition or a medicine. It repeats your doctor's plan; it is not medical advice. You can turn these reminders off on that page. Monthly refills: if you turn on a monthly refill for a medicine your doctor prescribed, each month the app prepares the next order with that medicine and a month's quantity taken from your doctor's prescription (the dose and the number of days), never more than the prescription has left. Nothing is sent to any pharmacy until you check the order and place it yourself, choosing the delivery address at checkout; if you do not, it expires after ten days and nothing happens. A refill stops, and we tell you why, when the prescription expires (six months after it was signed, or its e-prescription expiry), when your doctor cancels or replaces it, or when its whole course has been ordered. You can turn a refill off at any time; a prepared order you had not placed is deleted. Refills are deleted with your account. Lower prices: the app may tell you that the same medicine (the same ingredient, strength and form) is sold under another brand at a lower price in Mukti's medicine catalogue. This is information only. The app never changes your medicine: only you can choose another brand, and you should ask your doctor or pharmacist first. Reporting a Mukti AI answer: if you report an answer from Mukti AI, we keep that answer, the question you asked just before it, the reason you chose, any note you add and which AI provider answered, linked to your account, so that the Mukti team can review it and improve Mukti AI. Your report is not sent to the AI provider and does not change your chat. Staff who review reports do not see your name. A report is deleted 180 days after the team has reviewed it, or when you delete your account.

Material privacy changes receive a new version and, where required, fresh acceptance. The current notice remains available in the app.