Last updated: March 19, 2026 | Effective: March 19, 2026
TALOE MED ("we," "us," "our") is a Clinical Decision Support System (CDSS) operated by TaloeMed Technologies Pvt. Ltd.. We assist registered medical practitioners by recording doctor-patient consultations, generating structured clinical notes, and providing AI-assisted clinical reasoning.
Data Fiduciary: TaloeMed Technologies Pvt. Ltd.
Contact: privacy@taloemed.com | privacy@taloemed.com
Address: Hyderabad, Telangana, India
| Data Type | Examples | Purpose |
|---|---|---|
| Audio Recordings | Doctor-patient consultation audio (Telugu-English) | Transcription and SOAP note generation |
| Patient Demographics | Name, age, sex, phone number (entered by doctor) | Clinical document identification |
| Clinical Data | SOAP notes, diagnoses, medications, ICD-10 codes | Clinical decision support and export |
| Doctor Profile | Name, qualifications, registration number, clinic details | Document letterhead and authentication |
| Usage Data | Session timestamps, consultation count, feature usage | Service improvement and usage metering |
| Device Data | Browser type, screen size (no device fingerprinting) | UI optimization only |
What we DO NOT collect: Aadhaar numbers (unless via ABDM consent flow), financial data, biometric data (beyond voice for transcription), location data, social media profiles.
We NEVER use patient data for advertising, marketing, or sale to third parties.
Under the Digital Personal Data Protection Act 2023 (DPDP Act), we process data based on:
| Category | Purpose | Data Shared | Retention |
|---|---|---|---|
| Speech Recognition Provider (India) | Proprietary ZeroLoss™ transcription pipeline | Audio segments (encrypted in transit) | Not retained after processing |
| AI Clinical Engine Provider | TaloeCore™ SOAP generation and clinical reasoning | De-identified clinical text (PHI redacted) | Not retained after processing |
| Redundancy AI Provider | Failover processing for service continuity | De-identified clinical text | Not retained after processing |
| Cloud Infrastructure Provider (Asia-Pacific) | Secure application hosting | Encrypted session data | Duration of service agreement |
| Content Delivery Network | Secure content delivery and DDoS protection | No patient data (static assets only) | N/A |
We do not sell, rent, or trade personal data to any third party.
Some of our service providers are located outside India (USA, Singapore). We ensure adequate protection through:
| Right | Description | How to Exercise |
|---|---|---|
| Right to Access | Request a copy of your data | Email privacy@taloemed.com |
| Right to Correction | Request correction of inaccurate data | Doctor can edit SOAP notes; or email us |
| Right to Erasure | Request deletion of your data | Email privacy@taloemed.com — processed within 30 days |
| Right to Grievance | File a complaint about data handling | Email privacy@taloemed.com |
| Right to Nominate | Nominate someone to exercise rights on your behalf | Email privacy@taloemed.com |
To exercise any right, contact our Data Protection Officer at privacy@taloemed.com. We will respond within 30 days.
| Data Type | Retention Period | After Expiry |
|---|---|---|
| Audio Recordings | 30 days from consultation | Auto-deleted from encrypted archive |
| Session Data (SOAP, reasoning) | 7 years (medical record requirement) | Securely deleted |
| Doctor Profile | Duration of account + 1 year | Deleted on account closure |
| Usage Analytics | 2 years (aggregated) | Anonymized and archived |
We implement industry-standard security measures aligned with OWASP ASVS 4.0 Level 2:
TaloeMed is advisory software, not a medical device. All AI-generated outputs (SOAP notes, diagnoses, drug recommendations) are suggestions only. The treating physician reviews, edits, and approves all clinical content before it becomes part of the patient record.
TaloeMed uses minimal cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| taloemed_token | Authentication (JWT) | Session (24 hours) |
| taloemed_user | User preferences (theme, language) | Persistent (localStorage) |
We do NOT use: Google Analytics, Facebook Pixel, advertising cookies, cross-site tracking, or any third-party analytics. We do not fingerprint devices.
TaloeMed processes pediatric patient data only when entered by the treating physician for clinical purposes. We do not directly collect data from minors. Pediatric consultations follow the same security and privacy standards as adult consultations.
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via:
Data Protection Officer: TaloeMed Technologies Pvt. Ltd.
Email: privacy@taloemed.com
Response Time: Within 30 days of receiving your request
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India under Section 8 of the DPDP Act 2023.
TALOE MED
TaloeMed Technologies Pvt. Ltd.
Email: privacy@taloemed.com
Website: taloemed.com
Hyderabad, Telangana, India
TALOE MED v0.8.2 | DPDP Act 2023 Compliant | HIPAA Aligned
© 2025-2026 TaloeMed Technologies Pvt. Ltd.. All Rights Reserved.