1. About this policy
MedTech LLC ("MedTech", "we", "us") makes PAIR, a mobile app that hospitals, clinics and their staff use to record and transcribe patient consultations, scan medical forms and manage appointments. This policy explains what information PAIR collects, how we use and protect it, and the choices available to you.
It covers the PAIR apps for Android and iOS and related services at pairnexus.com. Effective date: October 6, 2026.
PAIR is for healthcare organizations and their authorized staff. Accounts are issued by the organization; the app has no public sign-up. Patients do not use the app directly, but PAIR processes information about them on behalf of their healthcare provider (see section 5).
2. Information we collect
PAIR handles health information, which is sensitive personal data. We collect only what is needed for the features your organization uses.
| Category | Examples | Where it comes from |
|---|---|---|
| Staff account information | Name, work email, organization, department, sign-in tokens | Your organization; you, when you sign in |
| Patient details | Name, mobile number, date of birth, gender, hospital ID (UHID), registration date, consulting doctor | Entered or scanned by staff, or from the organization's systems |
| Consultation audio | Recordings made with the in-app recorder | Staff, using the microphone |
| Transcripts and extracted information | Text produced from recordings and documents | Generated by PAIR |
| Documents and images | Scanned or uploaded forms, prescriptions, reports | Staff, using the camera or photo library |
| Appointments and patient lookups | Appointment dates, patient phone numbers, one-time codes (OTP) used to find a patient's record, prescribed investigations and the patient's preferences | Staff and patients |
| Usage statistics | Number of uploads and transcriptions per user | Generated by PAIR |
| Device and diagnostic data | Device model, operating system and app version, app and advertising identifiers, crash reports, in-app events | Collected automatically |
Device permissions
PAIR asks for the camera (to scan documents), the microphone (to record consultations) and notifications (to report upload progress). It records only while you are actively recording. You can turn permissions off in your device settings; the related features then stop working.
On the device
Recordings and scans are kept on the device only until they finish uploading, so they are not lost if the connection drops. Sign-in tokens are kept in the device's secure storage.
3. How we use information
We use information to run PAIR for your healthcare organization, and for no unrelated purpose.
- Provide the service:record consultations, turn audio and scanned documents into text and structured information, show results to authorized staff, and deliver them to the organization's systems.
- Accounts and security: sign users in, keep sessions secure, and detect misuse.
- Support and reliability: troubleshoot problems, fix crashes, and improve performance.
- Reporting for the organization: usage statistics, such as transcriptions per user.
- Legal obligations: comply with laws, regulations and valid legal requests.
Transcription and document processing use automated speech-recognition and document-processing technology. This technology is operated by us or by service providers acting on our behalf (section 4).
We do not sell personal information. We do not use it for advertising or to build marketing profiles. We use only de-identified information to improve our models, as permitted by our agreements with healthcare organizations.
5. Our role and your healthcare organization's role
For patient information, the healthcare organization decides what is collected and why; MedTech processes it on the organization's behalf. Under India's Digital Personal Data Protection Act, 2023, the organization is the Data Fiduciary and MedTech is its Data Processor. Our agreement with each organization sets how we handle, protect and return or delete this information.
- Patients who want to see, correct or delete their information, or who have questions about how it is used, should contact their healthcare provider. We help the provider respond.
- Organizations and their staffare responsible for giving patients any required notice and obtaining any required consent before recording a consultation or scanning documents. This follows applicable law and the organization's own policies.
For staff account information and device and diagnostic data, MedTech decides how the information is used and is responsible for it under this policy.
6. Security, storage and retention
We protect information with technical and organizational safeguards suited to health data.
- Encryption: information is encrypted in transit between the app and our services (HTTPS/TLS). It is also encrypted at rest on our servers.
- Access control: only authenticated staff of the organization can see its information. Our own access is limited to personnel who need it to run and support the service.
- On the device: sign-in tokens are kept in secure storage. Recordings and scans stay on the device only until they upload.
- Storage location: information is stored on servers in India (Amazon Web Services, Mumbai region).
No system is perfectly secure. If a breach affects your information, we will notify the healthcare organization and, where the law requires, the affected people and regulators.
How long we keep information
| Information | Kept for |
|---|---|
| Staff account information | While the account is active, then 30 days, unless the law requires longer |
| Patient information, recordings, transcripts and documents | The period the healthcare organization specifies; if it specifies none, 30 days after upload. Longer only where the law requires. |
| Device and diagnostic data | Up to 14 months (crash reports: 90 days) |
7. Your rights and choices
Under India's Digital Personal Data Protection Act, 2023 and related rules, you have the right to:
- access the personal information we hold about you;
- correct or update it;
- delete it;
- withdraw consent;
- nominate someone to act for you;
- raise a grievance or complaint.
Staff: deleting your account and data
PAIR accounts are managed by your healthcare organization, so ask your organization's administrator. The organization emails info@med-technologies.com with "Delete PAIR account" and your work email address. If you cannot reach your organization, email us directly and we will work with it. We then delete your account and the personal information linked to it within 30 days. We keep only what the law or our agreement with your organization requires; any such information is protected and deleted when no longer required.
Patients
Please contact your healthcare provider, which controls your information in PAIR. If you contact us directly, we will pass your request to the provider and help it respond.
Device choices
You can withdraw camera, microphone and notification permissions in your device settings at any time.
We respond to requests within the time the law requires. If we do not resolve your grievance, you may complain to the Data Protection Board of India.
8. Children, transfers, changes and contact
Children
PAIR is for healthcare professionals aged 18 or over, not for children. When a healthcare organization treats minors, PAIR may process their information on the organization's instructions. The organization is responsible for any parental or guardian consent the law requires.
International transfers
MedTech is based in the United States, and our service providers may operate in other countries. When information moves across borders, we use safeguards required by applicable law, such as contractual protections. We store information in India. Some service providers, for example for sign-in and crash reporting, process information in other countries, including the United States.
Changes to this policy
We will post updates on this page and change the effective date. If a change is significant, we will tell organizations and users in the app or by email before it takes effect.
Contact us
- Address
- MedTech LLC, 1600 Driskill Drive, Irving, TX 75038, USA
- Privacy
- info@med-technologies.com
- Grievance Officer
- Alok Khare (India)
alok.khare@med-technologies.com - Website
- pairnexus.com