Privacy Policy

Last updated 11 September 2026

HealthGo is a practice-management and analytics platform for mobile medical units and rural clinics, provided by iarani, Inc. (“HealthGo”, “we”, “us”). This policy explains what information we handle, why, and what control you have over it. It covers this website and the HealthGo platform.

We handle two quite different kinds of information: the patient records that healthcare organisations keep on HealthGo, and information about the people who visit this site or sign in to the platform. They are treated separately below.

1. Patient records

Patient records are entered by the staff of the organisations that run clinics and medical units on HealthGo — our programme partners. The partner decides what is recorded and why; we store and process those records on the partner's behalf and on its instructions.

What a record can contain

• Identity and contact details: name, age or date of birth, sex, phone number, village and address, and a HealthGo patient ID.
• Clinical information: vitals such as blood pressure, blood sugar and haemoglobin, existing conditions, diagnoses and their ICD-10 codes, counselling and immunisation.
• Medicines dispensed at each visit, and referrals to other facilities.
• Attendance at health education and awareness sessions.

How we use it

Only to provide HealthGo to the partner that entered it: keeping the record, showing it to that partner's authorised staff, flagging abnormal readings, suggesting diagnosis codes, and producing that partner's reports and dashboards. We do not sell patient information, we do not use it for advertising, and we do not share one partner's records with another.

Aggregate figures

The impact figures on our homepage are counts and proportions calculated across records. They are published only in aggregate, and no individual patient can be identified from them.

2. People who use the platform

Staff sign in to HealthGo through Auth0. When you do, we receive the details your sign-in provider shares — typically your name, email address and profile picture — and we use them to identify you and to decide which projects and screens you can see. Your organisation decides who is given access.

Like any web service, our servers also record technical information when you use the platform, such as your IP address, browser type and the pages requested. We use it to keep the service running and secure.

3. Visitors to this website

You do not need to give us anything to read this site. If you write to us, we keep the correspondence so that we can reply and follow up.

The site loads its typefaces from Google Fonts, which means Google receives your IP address when the page loads. We do not use advertising cookies. The only cookies we set are the ones that keep you signed in to the platform, and they are created only when you sign in.

4. Service providers

We rely on a small number of providers to run HealthGo. Each receives only what it needs to do its job:

• Amazon Web Services hosts the platform and its database. AWS Comprehend Medical reads the diagnosis text a clinician writes in order to suggest ICD-10 codes; no code is saved to a visit unless the clinician accepts it.
• Auth0 (Okta) handles sign-in for platform users.
• Google Fonts serves the website's typefaces.

Where the law or a court requires it, we may disclose information to the authorities. If HealthGo is involved in a merger or sale, information may transfer to the new owner, who will remain bound by this policy.

5. Security

Data is encrypted in transit and at rest, and access inside HealthGo is limited to authorised users on each partner's access list. Our PHI and PII page describes our security practices and subprocessors in more detail.

6. How long we keep information

Patient records are kept for as long as the partner's agreement with us specifies. When that agreement ends, or when the partner asks, we delete or return them. A user's access ends when their organisation removes them. Correspondence is kept for as long as it is useful for the conversation it belongs to.

7. Your choices and rights

If you are a patient, the clinic or organisation that treated you controls your record. Ask them to see, correct or delete it; we will help them respond. If you cannot reach them, write to us and we will pass your request on.

If you use the platform or have written to us, you can ask us for a copy of the information we hold about you, or ask us to correct or delete it.

Depending on where you live, laws such as India's Digital Personal Data Protection Act, 2023 may give you further rights, including the right to complain to a data protection authority.

8. Children

Partners may record care given to children. The partner is responsible for obtaining any consent needed from a parent or guardian. This website and the platform are not directed at children.

9. Changes to this policy

We will update this page when our practices change and revise the date at the top. Material changes will be communicated to partners directly.

10. Contact

Questions or requests about privacy: hello@healthgoapp.com.