# StockMed — Official Privacy Policy

**Entity:** StockMed Technologies Private Limited  
**Website:** https://stockmed.store  
**Application:** StockMed (Android & Web)  
**Category:** B2B Pharmacy / Healthcare Supply Chain / Inventory Management  
**Effective Date:** 20 August 2026  
**Last Updated:** 06 September 2026  
**Statutory Compliance:** Google Play User Data Policy & Digital Personal Data Protection (DPDP) Act, 2023 (India)  
**Public Policy URL:** https://stockmed.store/privacy-policy  
**Account Deletion URL:** https://stockmed.store/delete-account.html  

---

## 1. Healthcare Scope & Non-Medical Advice Disclaimer
StockMed is strictly a digital **B2B pharmaceutical inventory management, shortage coordination, and trade communication platform** connecting licensed retail chemists and authorized pharma stockists.  
**StockMed DOES NOT provide medical diagnosis, medical advice, clinical treatment recommendations, or direct patient dispensing.** StockMed is not a medical practitioner.

---

## 2. Personal & Business Data Collection
We collect only the minimum information required to operate B2B pharmacy workflows:
- **Personal Profile Data:** Full Name, Contact Person, E.164 Phone Number, Email Address, Physical Store Address, and 6-digit PIN code.
- **Commercial Regulatory Data:** Medical Store / Agency Name, Drug License Numbers (Form 20/21/20B/21B), and GSTIN.
- **Device Location (Optional):** Captured once during registration to pin pharmacy GPS coordinates for Haversine distance sorting ("450 m away"). No continuous background tracking.
- **Camera & Invoices (Optional):** Used exclusively when user chooses to scan printed medicine bills. On-device Google ML Kit text recognition parses lines locally. Optional Google Gemini 1.5 Flash Vision extracts tabular invoice rows ephemerally. **Raw document images are NEVER stored on cloud servers or Firebase Storage.**
- **PrivacyGuard PII Masking:** On-device filter masks Aadhaar numbers, PAN cards, payment cards, passwords, and tokens before any text processing.
- **Biometrics (Optional):** Handled strictly by Android OS `BiometricPrompt` hardware keystore. StockMed never accesses or stores raw biometrics.
- **Diagnostics:** Firebase Crashlytics stack traces and FCM tokens for push notification updates. **Zero advertising SDKs, zero third-party trackers, zero data sales.**

---

## 3. Data Retention Schedule
- **Account Profile:** Active subscription lifetime; purged within 7 business days of deletion request.
- **Camera / Bill Images:** 0 minutes (Ephemeral in device RAM; never stored).
- **Shortage Notes:** Active lifecycle until fulfilled or manually deleted.
- **Commercial GST Tax Invoices:** 72 months mandated by Section 36 of CGST Act, 2017. **Strictly anonymized** with personal identifiers permanently removed.
- **Diagnostics:** 90 days per Google Firebase lifecycle.
- **Security Audit Logs:** 180 days per Indian CERT-In guidelines.

---

## 4. Google Play Account Deletion
- **In-App Real-Time Deletion:** Open App -> Menu (⋮) -> Privacy Center -> Delete Account & Personal Data -> Confirm.
- **Web Portal Request:** Accessible at [https://stockmed.store/delete-account.html](https://stockmed.store/delete-account.html) without installing the app. Processed within 7 business days.

---

## 5. Third-Party Service Providers
- **Google Firebase:** Authentication, Cloud Firestore (TLS 1.3 in transit, AES-256 at rest), Cloud Messaging, Crashlytics.
- **Google Gemini AI:** Ephemeral multimodal text parsing over TLS.
- **Google ML Kit:** 100% on-device, offline OCR text recognition.

---

## 6. Grievance Redressal Officer
- **Officer:** Grievance Redressal Officer, StockMed Technologies Private Limited
- **Address:** StockMed Pharma Hub, Connaught Place, Varanasi, Uttar Pradesh 221001, India
- **Email:** `enchhi4@gmail.com`
- **Hotline:** +91-7860188716
- **Statutory Resolution Window:** 30 calendar days