Privacy Policy
Effective date: 16 September 2026
This Privacy Policy explains how SilicoSoft Technologies Private Limited (“SilicoSoft”, “we”, “us” or “our”) handles personal data when you use silicosoft.in and our software products and services.
Our current product portfolio covered by this policy includes Education Management Software, SilicoMed™ — Hospital Management System, ArogyaVeer™ — Marketing CRM Management / CRM & Sales Booster Field App, Asarfi HRMS™ — Human Resources Management, and RakshaRath™ — Ambulance Management.
The exact data processed depends on the functions enabled by the subscribing organisation, the user's role, integrations and permissions granted. Listing a data category here does not mean every product collects that category.
Applications covered
1. Our role
For data collected directly by SilicoSoft for our own purposes, such as website enquiries, customer support, security and service administration, SilicoSoft may determine why and how that information is processed.
For enterprise deployments, the subscribing hospital, employer, educational institution or other customer generally determines the business purpose of processing. In those cases, SilicoSoft normally processes data on that organisation's instructions as its technology/service provider.
2. Personal data that may be processed
| Category | Examples | Typical purpose |
|---|---|---|
| Identity and contact data | Name, identifiers, email, phone, organisation, designation, patient/student/employee details. | Registration, account administration, communication and workflows. |
| Healthcare data | Patient registration, appointments, clinical/diagnostic information, reports, treatment and hospital workflow data. | SilicoMed and healthcare functions where enabled. |
| Workforce and HR data | Employee profile, attendance, roster, leave, payroll-related records, work allocation, performance and documents. | Asarfi HRMS and HR workflows. |
| Education data | Student profile, admission, attendance, academics, examinations, fees and institutional records. | Education Management Software workflows. |
| CRM, field-sales and visit data | Employee/field-user profile, agencies, visit plans, visit codes, visit dates, targets, products, remarks, Start/Stop GPS and turnaround times. | ArogyaVeer CRM, field-sales, visit and DSR workflows. |
| ArogyaVeer attendance data | Punch In/Out times, GPS coordinates, periodic live location while punched In, and low-resolution front-camera attendance selfies. | Attendance verification, workforce accountability and authorised manager visibility. |
| Ambulance and transport data | Patient/contact information, pickup and destination details, ambulance/crew assignment, trip status, emergency details and timestamps. | RakshaRath ambulance coordination. |
| Location data | Pickup location, vehicle/device location or route information where the relevant feature is enabled. | Ambulance dispatch, routing and location-dependent functions. |
| Account and technical data | Login events, OTP/authentication status, IP address, device type, app version, crash, security and audit logs. | Security, reliability and troubleshooting. |
| Files and permissions | Camera, photos/files, notifications, location or other device permissions where required by a feature. | Only for the relevant enabled feature. |
3. Product-specific notices
Education Management Software
May process student admission and profile information, attendance, academics, examinations, fees, faculty/staff information and related institutional records where those modules are enabled.
SilicoMed™ — Hospital Management System
May process patient registration, appointment, clinical, diagnostic, pharmacy, billing, insurance/TPA, discharge, document, authentication and operational information where those functions are enabled. Health information must be handled only for authorised healthcare and related operational purposes.
ArogyaVeer™ — Marketing CRM Management / CRM & Sales Booster Field App
ArogyaVeer is a field-sales CRM used by employers to manage agency visits, visit plans, products and field attendance for authorised employees. It may process employee ID, name, email, phone, role, unit/territory, device/session information, visit/DSR records, attendance Punch In/Out data, GPS coordinates, periodic live location and attendance selfies.
Location: Location is required for the field app. Visit Start/Stop captures GPS at the time of the action. After Punch In, ArogyaVeer sends periodic location updates approximately every 3 minutes, including while the app is in the background, so authorised reporting managers/Admin can view live field presence. Punch Out stops continuous attendance location tracking. Android may use foreground/background location with a persistent notification; iOS may request Always location access during an active Punch In.
Camera and selfies: The front camera is used for Punch In and Punch Out attendance selfies. Selfies are compressed to low-resolution JPEGs, are used as operational proof of presence, are not used for advertising or facial-recognition matching in the current version, and are retained for 60 days before automatic deletion from server storage.
Biometrics: Optional MPIN/Face ID/fingerprint unlock is performed by the device operating system. Biometric templates are not uploaded to ArogyaVeer servers; only the preference that biometric unlock is enabled may be stored.
Visibility and sharing: Attendance live location and operational records may be visible to authorised Admin and reporting-tree managers according to the organisation’s configuration. ArogyaVeer does not share this data with advertisers or data brokers.
Audience: ArogyaVeer is intended for authorised adult workforce users and is not directed to children.
Asarfi HRMS™ — Human Resources Management
May process employee identity, employment, department/designation, attendance, roster, leave, payroll-related records, work allocation, documents, performance, authentication and technical information. If the product is renamed in the future, this policy will continue to apply to its successor or renamed HRMS product unless a replacement policy states otherwise.
RakshaRath™ — Ambulance Management
Designed to connect patients, ambulances and hospitals. It may process patient/contact details, ambulance requests, pickup/destination details, ambulance and crew assignment, trip status, timestamps, emergency information and location data where necessary for dispatch, routing, tracking or hospital coordination.
4. How we use personal data
- Provide, configure, operate and support the products.
- Authenticate users and administer accounts.
- Perform hospital, education, HR, CRM and ambulance workflows enabled by the customer.
- Maintain security, audit trails, troubleshooting and service reliability.
- Provide customer support and operational communications.
- Comply with legal, regulatory and contractual requirements.
We do not sell personal data.
5. Consent and device permissions
Where consent is required, the relevant notice should identify the data requested and the purpose before collection. Device permissions such as camera, files, notifications or location should be requested only where a product feature requires them and can be controlled through device settings.
For ArogyaVeer specifically, denying Location blocks field-app use by design. Continuous attendance location can be stopped by Punching Out. Camera access is required only for attendance Punch In/Out selfies where that module is enabled.
6. Sharing and service providers
We may process or share information only as reasonably necessary with the subscribing organisation, authorised hosting/cloud/database providers, messaging providers, security providers, integrations enabled by the customer, professional advisers or authorities where required by law. Third-party SDKs and processors used in a production app must be reflected in the relevant app-store disclosures.
7. Retention and deletion
Retention depends on customer instructions, healthcare/employment/education obligations, audit requirements, legal obligations and backup cycles. Where deletion is permitted, data should be deleted, anonymised or securely disposed of when no longer required.
For ArogyaVeer, attendance selfies are retained for 60 days and then deleted automatically. Attendance location pings/sessions are retained according to the employer’s configured operational need; visit Start/Stop GPS is retained with the visit record; login/session audits follow the applicable security policy; and account profiles are retained while active and thereafter according to the employer’s policy.
Account or data-deletion requests may be submitted through an in-app deletion mechanism where available or through our Privacy & Data Deletion Request page.
8. Security
We use reasonable technical and organisational safeguards including authentication, access controls, role-based permissions, audit logs, monitoring, backups and secure communications appropriate to the service and risk.
9. Children and minors
Education and healthcare products may be used in contexts involving children or minors. The responsible institution or lawful guardian must provide any consent or authorisation required by applicable law. SilicoSoft does not knowingly use children's personal data for behavioural advertising.
10. Digital Personal Data Protection framework
SilicoSoft is aligning its products and processes with the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 as applicable provisions come into force, including purpose-specific notices, consent/withdrawal mechanisms where applicable, reasonable safeguards, grievance handling and applicable Data Principal rights.
11. App-store disclosures
Apple App Store privacy disclosures and Google Play Data Safety declarations must match each actual production build, including permissions, SDKs, integrations, data collection, data sharing and deletion practices.
12. Contact and grievance redressal
SilicoSoft Technologies Private Limited
Ranchi Smart City, Jharkhand, India
Email: it@silicosoft.in
Please mention the relevant product, subscribing organisation and registered email/mobile number. Do not send passwords, OTPs or unnecessary medical records by email.