Privacy policy
Last updated: 8 October 2026
This is a draft while Tottr is in its pilot. It will be finalised, with the name and address of the company that runs Tottr, before the apps are publicly available.
Tottr makes two apps: Tottr Pro, used by pediatric clinics and their staff, and Tottr, used by parents and guardians to see their children’s records from those clinics. This policy explains what information the apps handle, why, and the choices you have. It is written to meet India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules.
Who is responsible for your information
Your child’s health record belongs to the clinic you visit. The clinic decides what is recorded and why, and is responsible for it under the DPDP Act. Tottr stores and processes those records on the clinic’s behalf and only as the clinic instructs.
Tottr is directly responsible for the account information we need to run the apps, such as the phone numbers people sign in with.
What we handle
- About children: name, date of birth, sex, measurements, allergies, visit notes, diagnoses, prescriptions, vaccines, lab reports and appointments, as entered by the clinic or, for lab reports and appointments, by a parent.
- About parents and guardians: name, phone number, relationship to the child, preferred language and, where given, address.
- About clinic staff: name, phone number, role and, for doctors, medical registration number.
- Consultation recordings: only when the doctor uses the AI scribe and the parent agrees for that visit.
- Technical information: sign-in times and an audit log of who opened or changed each record.
How it is used
- To let the clinic care for your child: visit notes, prescriptions, vaccines, growth charts and appointments.
- To show parents their own children’s records and let them book visits.
- To send messages the clinic or you ask for, such as visit summaries and appointment details.
- To draft visit notes from a consultation recording, which the doctor reviews before saving.
- To keep the apps secure, investigate misuse and meet legal duties.
We do not sell personal information, show advertising, or use children’s information to track them or build profiles for marketing.
Consent and children
Children’s records are created by the clinic with the consent of a parent or lawful guardian. A parent signs in to the Tottr app with the phone number the clinic has on file for them, and sees only their own children. Consultation recordings need the parent’s agreement each time.
Where it is stored
Records, files and recordings are stored in India, on servers in Mumbai. The services that turn recordings into text and draft notes also run in India. Consultation recordings are deleted after 30 days.
Who can see it
- Staff of the clinic that holds the record, according to their role.
- The child’s parents or guardians, for what the doctor has saved for them — never internal notes.
- Service providers that host and run the apps for us, under contracts that limit their use to providing the service.
- Authorities, where the law requires it.
How long it is kept
Clinic records are kept for as long as the clinic uses Tottr and any period Indian law requires for medical records. When a clinic leaves Tottr, it can ask for a copy of its records, and they are then deleted from Tottr after the agreed period.
Your rights
Under the DPDP Act you can ask to see, correct, complete or erase your information, withdraw consent, nominate someone to act for you, and raise a complaint. For your child’s health record, start with your clinic, as the record is theirs. We will help the clinic respond. For anything about your Tottr account, contact us directly.
Security
Information is encrypted in transit and at rest. Access is limited by role and every view or change of a record is logged. If a breach affects your information, we will tell the clinic and, where required, the Data Protection Board of India and you.
Contact and grievances
Email privacy@tottr.in. We aim to reply within 7 days and resolve grievances within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Changes
We will post any change here with a new date, and tell clinics and app users about important changes before they take effect.