Terms of use

By creating an account you agree to these terms. When they change in a way that matters, we tell you in the app and ask you to agree again; we keep a record of which version you agreed to and when.

RxKite is run by RxKite. Our grievance officer is Dr. Shounak Pal (dr@rxkite.com).

#Who can use RxKite

RxKite is for registered medical practitioners. You confirm that the registration number you enter is yours and valid, and that you will keep it up to date.

When you sign up or change your registration, we look the number up in the National Medical Commission's public Indian Medical Register. We may also ask you for your registration certificate and a photo ID, and pause signing until we have checked them: you can still write and save drafts meanwhile. If a registration is not yours, we block the account. It is disabled, and every prescription, certificate and bill signed on it shows as not valid when its QR code is checked. Its email and mobile number can then be used by another account, such as the doctor whose registration it is. If you think we blocked your account by mistake, write to support with your registration certificate and we will look at it again.

#What RxKite does, and what it doesn't

RxKite helps you write, print, email and keep prescriptions. Every clinical decision is yours: diagnosis, choice of medicine, dose and advice. Suggestions such as remembered medicines and allergy warnings are conveniences based on what you entered before; they are not medical advice and may be incomplete. Check every prescription before you sign it.

#Your data

You own the records you create. You can export them or delete your account at any time. You are responsible for keeping your password and devices secure. Promotional emails from us are optional, and agreeing to these terms does not sign you up for them.

RxKite is not an archive for records you must keep after you leave. Before your account is deleted, download the records your profession requires you to keep.

#Your patients' data: our role

Under India's Digital Personal Data Protection Act, 2023 (the DPDP Act), you are the data fiduciary for your patients' personal data and RxKite is your data processor. This section is our contract with you for that processing. We will:

1. Act only on your instructions. Your instructions are your use of RxKite and its settings, and anything else you ask of us in writing that the service can do. We process your patients' data only to provide the service to you.
2. Not use it for our own purposes. We do not sell it, use it for advertising or marketing, profile your patients, or use it to train any model. We look at it only when you ask us to (for example, to help with a support request), when it is needed to keep the service secure or working, or when Indian law requires it.
3. Keep it confidential and secure. Only the people who run the service can reach it, and they must keep it confidential. We protect it with the safeguards described on our security page.
4. Tell you about a breach as soon as we know. If we become aware of a personal data breach affecting your patients' data, we email you at your account email without delay, and in time for you to make the Data Protection Board's 72-hour report, with what we know: what happened and when, what data and roughly how many patients are affected, the likely consequences, what we have done to contain it, what your patients can do, and whom to contact. We send updates as we learn more. We also turn on a button in RxKite that lets you email a notice to every patient who has an email address on file, and help you inform the Data Protection Board of India. We report security incidents to CERT-In within 6 hours, as its directions require.
5. Help you with your patients' requests. You can see, correct and download one patient's records yourself, from the patient's record. "Remove from list" hides a patient but keeps their records. "Erase their data" erases a patient at their request: either everything except the signed prescriptions, certificates and bills you are required to keep, or everything; the PDF copies of signed prescriptions stay locked until their lock ends, as clause 6 describes, and cannot be opened meanwhile. An erasure stays in force if we ever restore an older backup. If a patient writes to us, we pass the request to you and act on it only as you instruct or the law requires.
6. Delete it when you leave. When you delete your account, your patients' data is deleted from the live service 30 days later, and from backups within 90 days after that, as they rotate. The one exception is the PDF copy of each signed prescription: it is kept in locked storage for at least 10 years from signing, so the medical record you signed cannot be changed or lost, and storage refuses any change or deletion until the lock ends. Once your account is deleted these copies can no longer be opened in RxKite, and each is deleted when its lock ends. We keep none of it for any purpose of our own.
7. Keep a record of who opened what. We log each sign-in, each change, and the opening or download of a patient's record, a signed prescription, a document or a bill, by you or your front desk: who, which record and when, never what it holds (the same person opening the same record again within half an hour may be noted once). We keep this log for at least a year, as the law asks, and use it only for security, to answer your questions and as the law requires. Your front desk's openings are in Front desk → Review.
8. Use only the providers we name. Your patients' data is handled only by the providers listed in our privacy policy, each bound by its terms to use it only to provide its service to us and to keep it secure. We update that list before a new provider starts handling it. Data is kept outside India only as the DPDP Act allows; where it is kept is also in the privacy policy.

#Your duties to your patients

As the data fiduciary, you are responsible for:

• Telling your patients what you record about them and why, and that you keep it electronically with a service provider. RxKite gives you a printable notice for this (Settings → Your data), which you can put up at reception or hand to each patient and mark as given.
• Having a lawful basis to record their data: their consent, or another ground the DPDP Act allows.
• Children and patients with a guardian. For a patient under 18, or a person with a disability who has a lawful guardian, you handle any consent from a parent or guardian that the law requires. The DPDP Rules let a doctor or clinic process a child's data to provide health services without a separate verified consent from the parent, to the extent needed to protect the child's health; anything beyond that needs it. We process their data only to provide the service to you, and never to track them, build profiles or target advertising.
• Answering your patients when they ask to see, correct or erase their data, or raise a grievance.
• Informing the Data Protection Board of India and your patients of a breach, using what we tell you.
• Keeping medical records for as long as the law and your professional rules require, including after you stop using RxKite.

#Video calls, chats and teleconsultation

If you consult patients by video, phone or chat, you follow the Telemedicine Practice Guidelines, 2020: you are responsible for identifying the patient, deciding whether a remote consultation is suitable, and what you prescribe. RxKite helps: the patient's call page asks them to agree to a teleconsultation and records when they joined; you or your front desk can mark a visit as a video, phone or chat consultation, kept with the prescription (it is not printed); and drugs of Schedule X and under the NDPS Act, which the guidelines do not allow in a teleconsultation, are flagged. We may ask for your registration certificate and check it with your council before video calls and chats are available to you, and we may suspend them if a registration cannot be confirmed.

#Acceptable use

Do not use RxKite to issue prescriptions you are not entitled to write, to impersonate another doctor, to attack or overload the service, or to store content unrelated to your practice.

#Plans and payment

A new account starts with a free trial. After it, Lite, Starter, Standard and Pro (and extra storage added to them) are paid for a month or a year in advance; without a paid plan, your records stay and can be read, printed and downloaded, but new prescriptions cannot be written. A payment made once does not renew; if you turn on AutoPay, the plan renews each period until you turn it off in Plan & subscription. Prices are shown on the pricing page and may change for future purchases; time you have already paid for is never shortened. Refunds and cancellation are described in the cancellation and refund policy.

The free prescription pad maker needs no account. Its free PDF carries a small rxkite.com line; a pad without it costs ₹10, paid once. That payment covers pads with the same registration number, made in the same browser (or unlocked again with the payment ID on Razorpay's receipt), for 30 days. You are responsible for what you put on the pad, including that the registration number is yours.

#Availability

RxKite runs on two servers in Mumbai, so one can be updated, or fail, while the other keeps working, and your data is backed up every night to separate storage. Planned maintenance is announced in the app beforehand.

You can see whether RxKite is up, and any incident, on our status page.

Even so, no online service can promise it will never be interrupted, and we cannot either. Keep a way to write a prescription by hand for emergencies; you can download your records at any time.

#Liability

To the extent the law allows, RxKite is provided as is, and our total liability to you for any claim is limited to what you paid us in the 12 months before it. We are not liable for clinical outcomes, which remain your professional responsibility.

#Ending the agreement

You can stop using RxKite and delete your account at any time. We may suspend or close accounts that break these terms, and will tell you why.

#Law and disputes

These terms are governed by the laws of India, and the courts of India have jurisdiction over any dispute about them.

Questions, and notices under these terms: support@rxkite.com. Complaints about how we handle personal data go to our grievance officer, named on the contact page.