HMSERP Mobile — Privacy Policy

Last updated: 21 September 2026

This policy explains how the HMSERP mobile app (package com.keycodehms.hmserp, "the App") handles information. The App is published by Keycodetech Pvt Ltd ("we", "us").

The App is a read-only reporting tool for hospitals that use the HMSERP hospital management system. It lets authorised hospital owners and administrators view summary reports (for example OPD, IPD, pharmacy, billing, inventory, HR and accounts figures) of their own hospital. The App cannot create, change or delete any hospital record.

1. Who can use the App

The App is for hospital staff who already have an HMSERP login issued by their hospital. You cannot create an account in the App. Accounts are created, managed and removed by your hospital's administrator in the HMSERP system.

2. Information the App handles

Information	What happens to it
User ID and password	Sent over an encrypted (HTTPS) connection to your hospital's HMSERP server only to sign you in. Your password is never stored on your phone.
Sign-in token	After sign-in, the server gives the App a session token. It is stored in your phone's secure, encrypted storage (Android Keystore / iOS Keychain) and is used only to request reports from your hospital's server. It is deleted when you sign out.
User ID for "Remember me"	If you tick "Remember me", only your User ID (not your password) is stored in secure storage on your phone so you do not have to type it again.
Report data	Reports are downloaded from your hospital's server and a copy is kept on your phone so they can be shown when your connection is slow or offline. This copy is deleted when you sign out, when your session ends, or when you choose "Clear cached data" in Settings. Reports show totals and counts; the App does not display patient names, phone numbers or diagnoses.
Fingerprint / Face unlock	Optional. Handled entirely by your phone's operating system. The App only receives a "success" or "failed" answer and never sees or stores your biometric data.
Notifications	Optional and off by default. The App asks for notification permission only if you turn it on in Settings. No notification data is sent to any server at present.

3. What we do not do

We do not sell, rent or share your information with third parties.
The App contains no advertising and no third-party analytics or tracking.
The App does not access your location, contacts, camera, microphone, photos or files.
The App does not collect information from anyone other than the signed-in user.

4. Where the data lives

All hospital data belongs to your hospital and is stored on your hospital's HMSERP server. The App only displays it. Questions about the hospital data itself, or requests to access, correct or delete it, should be directed to your hospital's administrator.

5. Security

All communication between the App and the server uses HTTPS encryption. Sign-in tokens are kept in the phone's encrypted secure storage. When a session ends on the server, the App signs out and deletes the cached reports from the phone.

6. Deleting your data

Signing out of the App deletes the sign-in token and all cached reports from your phone. Uninstalling the App removes everything it stored. To have your HMSERP login removed, contact your hospital's administrator, or write to us at the address below and we will pass your request to your hospital.

7. Children

The App is intended for hospital staff and is not directed at children under 18.

8. Changes to this policy

If this policy changes, the updated version will be posted at this address with a new "Last updated" date.

9. Contact

Keycodetech Pvt Ltd
Email: [SUPPORT EMAIL]
Website: https://hmserp.in