Privacy Policy

Last updated: 24 October 2026

This policy explains how LILSTEPS CLINIC (I) PRIVATE LIMITED ("LilSteps", "we") handles personal data in the LilSteps app, on lilstepsclinics.com and during consultations. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

1. What we collect

• About you: name, mobile number, city, preferred language, relationship to the child.
• About your child: name, date of birth, sex, weight, height, blood group, allergies, conditions, medicines, vaccines, milestones, answers you give during onboarding, health log entries, and records or photos you upload.
• Consultations: booking details, check-in answers and the summary, messages with the clinic, visit notes and prescriptions.
• Payments: payment status and transaction IDs from Razorpay. We do not receive or store your card, UPI or bank credentials.
• Technical: device push-notification token, app version and error logs needed to keep the app working.

2. Why we use it

• To provide care: so the doctor can see your child's history, prepare for the visit and record advice and prescriptions.
• To run the app: sign-in, booking, reminders for vaccines and appointments, and messages.
• To process payments and keep accounting records required by law.
• For safety and security, and to fix problems.

We do not sell your data, and we do not use your child's health information for advertising.

3. Consent

You give consent when you create an account and enter your child's details. The AI check-in asks for separate consent before any answer is processed. You can withdraw consent by deleting your account; this stops further processing, but does not affect processing already done.

4. Who we share it with

Only with the doctors and staff of LilSteps Clinic who care for your child, and with service providers who process data for us under contract:

• Supabase (secure database, sign-in and file storage; servers in Mumbai, India).
• Google (Gemini AI for the check-in summary, and Google Meet for video consultations).
• Razorpay (payments).
• SMS and push-notification providers (sign-in codes and reminders).

We may also share data where the law requires it.

5. How long we keep it

We keep your account and your child's records while your account is active. Medical records may be kept for the period required by medical record-keeping rules even after you delete the app account; everything else is deleted when you delete your account.

6. Security

Data is encrypted in transit, access is limited by role (a doctor only sees the children who booked with them), and all access to stored data goes through access rules checked on the server.

7. Your rights

You can access and correct your and your child's information in the app, ask for a copy, and delete your account (Profile → Privacy). For anything else, write to us.

8. Children

The app is used by parents and guardians on behalf of children. We process children's data only with the parent's or guardian's consent and only to provide care.

9. Grievance officer

Madhav Chavan, Director · dev@lilstepsclinics.com · Shop No. 109–110, Ambrosiya Galaxy, Pan Card Club Road, Baner, Pune 411045, Maharashtra, India. We will acknowledge complaints within 48 hours and aim to resolve them within 30 days.

10. Changes

We will post updates here and tell you in the app about significant changes.