Skip to content

Privacy Policy

Your health, your data, your choice. This policy explains in plain language what we collect, why we collect it and the control you have.

Last updated: 15 October 2026For adults 18+By IDC INDIA · Innovation Development Council

1About this policy

This Privacy Policy explains how Bestie by MediCaps ("Bestie", "we", "us") handles your personal data when you use our website, app, WhatsApp service and programmes. Bestie is operated by IDC INDIA Innovation Development Council, based at GL-7, Ashoka Estate Building, Barakhamba Road, Connaught Place, New Delhi – 110001.

We follow India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. Under that law, we are the Data Fiduciary and you are the Data Principal.

2Who can use Bestie

Bestie is for adults aged 18 and above. We verify age at sign-up. We do not knowingly collect data from children. If we learn that we have, we delete it and close the account.

3What we collect

  • Account details: name, age, mobile number, email, language and city.
  • Health information you choose to share: cycles, symptoms, journal entries, lab reports, prescriptions and programme progress.
  • Conversations with the AI companion, your navigator and doctors.
  • Connected data such as sleep and steps, only if you link a wearable or lab.
  • Payment details handled by payment partners. We do not store full card numbers.
  • Technical data: device type, app usage and cookies.
  • Employer eligibility: if your employer pays, we use your work email or employee ID only to confirm you are covered.

Health data is sensitive. We collect it only with your consent and only for features you choose to use.

4How we use your data

  • Run the AI companion, reminders and tracking.
  • Let navigators book tests and consults, explain results and follow up.
  • Connect you with registered doctors and process cashless claims you request.
  • Spot warning symptoms and crisis language so we can reach you quickly.
  • Improve Bestie using de-identified data.
  • Send service messages and, with your consent, programme updates.
  • Meet our legal duties.

We do not sell your data and we do not use it for advertising.

5Consent and withdrawal

We ask for consent in clear language, for each purpose, before we collect your data. You can withdraw consent at any time, and withdrawing is as easy as giving it. We support consent managers under the DPDP framework.

After you withdraw, we stop the related processing and delete the data unless the law requires us to keep it.

6Your rights

  • Get a summary of the data we hold and who we shared it with.
  • Correct, complete or update your data.
  • Ask us to erase your data.
  • Raise a grievance and get a response.
  • Nominate a person to exercise your rights if you die or cannot act for yourself.

Use app settings, write to info@idcindia.net or call +91-9870263399.

7Who we share data with

  • Doctors and care partners (labs, hospitals, registered ART clinics) only as needed for care you ask for.
  • IDC ecosystem services such as Sthira, CyberShield, LaunchBuddy, Grasa, IDC Capital and MSMEPC only when you choose their service and consent.
  • Insurers and TPAs for claims you start.
  • Service providers such as cloud, messaging and payments, under contracts that protect your data.
  • Authorities when the law requires it.

8Employers and insurers

If your employer or insurer pays for Bestie, they see only aggregated, anonymised outcomes in dashboards. They cannot see your conversations, records or symptoms. Individual-level data is shared only if you give separate consent for a specific purpose, such as a claim.

9AI and safety review

The AI companion educates, tracks and organises. It never diagnoses or prescribes, and clinical suggestions are reviewed by a navigator or doctor before they reach you. Trained staff may review conversations for safety and quality.

If you describe warning symptoms or a crisis, we may alert a doctor or emergency services, as the law permits, to protect your life.

10Storage, security and retention

  • Your data is stored in India.
  • It is encrypted in transit and at rest, with access controls and regular audits.
  • If a breach affects you, we will tell you and the Data Protection Board as the law requires.
  • We keep data only as long as needed for the purpose or required by law, then erase or anonymise it.

11Cookies

We use essential cookies to run the site. We use analytics cookies only with your consent. We do not use advertising trackers. You can control cookies in your browser settings.

12Grievance Officer

For questions or complaints about how we handle your data, contact our Grievance Officer:

Grievance Officer
Deepti Anand
Organisation
IDC INDIA Innovation Development Council

If we do not resolve your concern, you may approach the Data Protection Board of India.

13Changes to this policy

We will post updates on this page and change the date at the top. For material changes, we will tell you in the app or by email and ask for fresh consent where the law requires.

Terms & Conditions
The rules for using Bestie.
Read Terms & Conditions