Privacy Policy

1. Who we are

Tarqen Solutions ("Tarqen", "we") is based in Hindupur, Sri Sathya Sai District, Andhra Pradesh 515201, India. We operate three services: doctor-led Prescription Verification for pharmacy and quick-commerce platforms, ChathraCare student health screening for schools, and the APEX encryption protocol.

For prescription verification we normally act as a data processor on behalf of the platform or pharmacy that engages us. For ChathraCare we may act as a processor for the school, or jointly with it, depending on the agreement in place. For our own website and enquiries we act as a data controller.

2. What we collect

Prescription Verification

• Uploaded prescription images or documents
• Patient name, age and gender as shown on the prescription
• Prescriber name and registration number
• Medicines, dosages and directions
• Order reference supplied by the platform
• Where a doctor calls to confirm a prescription, a record that the call took place and its outcome

ChathraCare student health screening

• Student name, class, age and school
• Screening findings — growth measurements, vision, dental, dermatological and general health observations
• Longitudinal health records built from repeat screenings
• Parent or guardian contact details, for reports and alerts

Website and enquiries

• Name, email address, organisation and message when you use our contact form
• Standard server logs, kept for security and diagnostics

We do not run advertising trackers or sell data to anyone, and we do not use prescription or student health data to train machine-learning models.

3. Why we hold it

• To verify prescriptions — so a qualified doctor can check authenticity, dosage, contraindications and interactions before a non-OTC order is dispatched.
• To deliver screening programmes — to conduct camps, produce reports, and let schools and parents track a child's health over time.
• To meet legal and regulatory duties — including maintaining an audit trail of verification decisions.
• To respond to you — when you contact us.

4. Children's data

ChathraCare exists to screen school children, so much of what we hold is children's health data. We treat it as the most sensitive category we handle:

• Screening is carried out under an agreement with the school, on the basis of consent obtained from a parent or guardian.
• A parent or guardian may decline screening for their child, or ask us to delete their child's record.
• Records are shown only to the parent or guardian, authorised school health staff, and the clinicians involved in that child's screening.
• We do not profile children, target them with any communication, or use their data for marketing.

5. Who sees it

We share personal data only where necessary, and never for anyone's marketing:

• Our clinicians — the doctors and specialists carrying out verification or screening.
• The platform, pharmacy or school that engaged us, for the purpose they engaged us for.
• Parents or guardians, for their own child's records.
• Service providers who host or transmit data on our behalf, under contract and confidentiality obligations.
• Authorities, where the law requires it.

6. How we protect it

• API traffic is encrypted end-to-end using our APEX protocol — ECDH key exchange, AES-256-GCM authenticated encryption, and replay protection — on top of standard HTTPS.
• Access is role-based, so staff can only reach the records their role requires.
• Verification decisions are logged to an audit trail.

No system is completely secure. If a breach occurs that is likely to affect you, we will notify you and the relevant authority as required by law.

7. How long we keep it

Prescription verification records are retained for as long as the engaging platform or pharmacy requires, and for any period mandated by pharmacy and medical-records rules. Student health records are retained to provide longitudinal tracking across school years, and are deleted on request from the school or a parent or guardian, subject to any legal minimum. Contact-form enquiries are kept only as long as needed to deal with them.

8. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may ask us to give you a copy of your data, correct it, delete it, or withdraw consent. Where we act as a processor for a platform, pharmacy or school, we will redirect your request to them and support them in answering it.

Write to support@tarqen.com. We aim to respond within 30 days.

9. Changes

If we change this policy we will update the date at the top of this page, and tell our partner organisations directly where the change is significant.