About this policy
Click2Save (“we”, “us”) is operated by BE THE LIGHTHOUSE AI LAB LLP, 552/118 Chander Nagar, Alambagh, Lucknow 226005, India. This policy explains what personal data we collect when you use click2save.now and the Click2Save web app, why we collect it, how we protect it, and the choices you have.
We follow India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them. By using Click2Save you agree to this policy. If you do not agree, please do not use the service.
What we collect
Information you give us
- Mobile number or email address, whichever you use to sign up. We use it to create your account, sign you in (a mobile number with a one-time password) and contact you about your account or a support request.
- Bills you upload: photos, scans or PDFs of hospital, medical or pharmacy bills, including bills forwarded from WhatsApp.
- Messages you send to Support.
Information inside your bills
A bill can contain the patient’s name, age, gender, hospital and doctor names, admission and discharge dates, treatment or diagnosis details, medicines, tests and amounts. This can reveal health information, so we treat everything in an uploaded bill as sensitive and use it only to produce your report.
Technical information
Device type, browser, IP address, approximate location (city or state level, from IP), usage events and error logs. We use these to keep the service secure and fix bugs.
What we do not collect
We do not ask for Aadhaar, PAN, bank or card details, or insurance passwords. Please crop or mask them if they appear on a bill. Click2Save is free, so we never need payment details.
Why we use your data
- To read your bill (OCR and vision models), extract line items and check for duplicates, pricing inconsistencies, unitemised charges and mismatches with reference prices such as NPPA/DPCO ceiling prices, MRP and market benchmarks.
- To create your report: possible overcharges, questions worth asking, and your action plan.
- To sign you in and let you see your past reports.
- To answer support requests and grievances.
- To keep the service secure, prevent abuse and meet legal obligations.
We do not sell your data and we do not use your bills for advertising.
Security and retention
- Your data is encrypted with AES-256 and stored on India-hosted servers. It is encrypted in transit (HTTPS) and protected by access controls and logging.
- No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
- Bill files (images and PDFs) are kept for 90 days after analysis, then deleted.
- Reports and account data are kept until you delete them, or until your account is inactive for 24 months.
- Logs are kept for up to 12 months, or longer if the law requires.
Your rights
Under the DPDP Act you can, at any time:
- Access a summary of the personal data we hold and how it is used.
- Correct inaccurate or outdated data.
- Delete your bills, reports and account. Use Profile → Account → Data & Privacy → Delete All My Data in the app, or write to us. We complete deletion within 30 days, except where the law requires us to keep something.
- Withdraw consent. Earlier processing stays valid, and some features may stop working.
- Nominate another person to exercise your rights if you die or become unable to.
- Complain to our Grievance Officer (below).
Write to support@click2save.now from your registered mobile number or email so we can confirm it is you.
Bills of other people
You may upload a family member’s bill, for example a parent’s, only if you are the patient or are authorised by the patient or family to handle that bill. By uploading, you confirm you have the right to share it with us.
Children
Click2Save is for adults (18+). A bill for a child patient should be uploaded by a parent or guardian. We do not knowingly create accounts for children, and we do not track or target them. If you think a child has signed up, tell us and we will delete the data.
Grievance Officer and contact
We acknowledge complaints within 48 hours and aim to resolve them within 15 days. If you are not satisfied, you can approach the Data Protection Board of India as provided under the DPDP Act.
Changes to this policy
If we make a significant change, we will tell you in the app or by SMS before it applies. The “Last updated” date at the top always shows the current version.