CONSENT NOTICE FOR REGISTERED MEDICAL PRACTITIONERS

Issued pursuant to the Digital Personal Data Protection Act, 2023
Section 5 & Section 6 - Notice to Data Principal
Version 1.0 | Effective Date: [Date of Publication]

A. WHO IS COLLECTING YOUR DATA
Pranik Technologies Private Limited, operating under the brand name Pranik.ai ("Company," "We"), with registered office at Plot No. 114-116, Gafoornagar, Hyderabad, Telangana - 500018, India, is the Data Fiduciary for the P4D (Pranik for Doctors) application.
We are seeking your free, specific, informed, unconditional, and unambiguous consent to collect and process your Personal Data - including, in certain cases, your biometric-like data (face and voice) for the creation of your Digital Twin - for the purposes listed below.

B. YOUR DUAL ROLE ON THIS PLATFORM
You occupy two distinct roles simultaneously on the P4D platform:
As a Doctor (Service Provider): You provide medical consultation services through the platform to patients who use the P4P App. In this role, you access Patient Personal Data for clinical purposes.
As a Data Principal: You are an individual whose own Personal Data - including your professional credentials, consultation records, and (if you opt in) your face, voice, and knowledge base - is collected and processed by the Company. This Consent Notice addresses your rights and choices in your capacity as a Data Principal.

Your obligations regarding Patient data (confidentiality, lawful processing, and compliance with the IT-SPDI Rules and DPDP Act as a professional) are set out in your Terms and Conditions and are separate from the consents you provide in this Notice.

C. HOW TO READ THIS NOTICE
Each consent item below lists the data we need, why we need it, the legal basis, and whether the consent is MANDATORY (required to use the service) or OPTIONAL (you may decline without losing core access). Please indicate your choice for each item.

You may withdraw any consent at any time by contacting dpo@pranik.ai or through Settings > Privacy in the P4D App. Withdrawal does not affect the lawfulness of processing already carried out.

This Notice is available in English. It will be made available in other scheduled languages upon request, in compliance with the DPDP Act, 2023.

D. CONSENT ITEMS - PLEASE READ AND INDICATE YOUR CHOICE FOR EACH

  1. Professional Account Registration and Authentication
    MANDATORY
    Purpose: To create and manage your P4D account, verify your identity and professional credentials, and provide secure access to the platform.
    DataCollected
    Full name, date of birth, gender
    Email address and mobile phone number
    Encrypted password
    Profile photograph
    Device identifier (Device ID, OS version)
    Legal Basis
    Consent (DPDP Act, S.6). This processing is a precondition to using the P4D App.
    ⚠️ Without this consent, you cannot create an account or access the P4D platform.
    ☐ I GRANT consent for this purpose ☐ I WITHHOLD / WITHDRAW consent
    Note: Withholding mandatory consent will prevent access to the relevant feature or service.

  2. Professional Credential Verification (KYC and NMC/State Council Verification)
    MANDATORY
    Purpose: To verify that you are a valid Registered Medical Practitioner by cross-referencing your registration details with the National Medical Commission (NMC) and/or relevant State Medical Council records.
    DataCollected
    State Medical Council Registration Number
    NMC Unique ID (UID)
    Medical qualifications and specialization
    Government-issued photo ID (Aadhaar [masked], Passport, or Voter ID)
    Proof of address
    Disclosure of any regulatory or disciplinary proceedings against your medical licence
    Legal Basis
    Consent; Legal Obligation under KYC regulations, Telemedicine Practice Guidelines 2020, and NMC regulations (DPDP Act, S.6 & S.7).

  3. Teleconsultation and Appointment Management
    MANDATORY
    Purpose: To provide you with the core teleconsultation platform: scheduling and managing appointments, receiving patient pre-consultation SOAP summaries from the P4P App, facilitating video/audio consultations, and managing your consultation calendar.
    DataCollected
    Appointment schedule data (accepted, rejected, and pending consultations)
    Patient pre-consultation SOAP summaries (patient-reported data; transmitted from the P4P App)
    Video and audio data during consultation sessions
    Chat messages exchanged with patients during consultations
    Post-consultation clinical notes entered by you
    Legal Basis
    Consent; Contract (DPDP Act, S.6 & S.7). Processing is necessary to deliver the core service.

  4. Live Scribe - Automated Consultation Transcription
    OPTIONAL
    Purpose: To automatically transcribe your consultation audio into a structured written record after the consultation, which you can review, edit, and approve as the official consultation note.
    DataCollected
    Audio recording of the consultation session (processed for transcription; recording is not retained after transcription is generated)
    Generated consultation transcript
    Your edits and approvals to the transcript
    Legal Basis
    Consent (DPDP Act, S.6). Both you and the patient must consent before Live Scribe is activated. Patient consent is obtained separately through the P4P App.

  5. CDSS Lite - Clinical Decision Support System
    OPTIONAL
    Purpose: To provide you with AI-assisted clinical decision support during consultations, including medicine recommendations, differential diagnosis suggestions, and draft treatment plans based on patient data, for your independent review and approval.
    DataCollected
    Patient pre-consultation data (received from P4P App)
    Your CDSS Lite interaction log: which recommendations you accepted, modified, or rejected
    Draft prescriptions generated by CDSS Lite (not finalized until you approve and digitally sign)
    Legal Basis
    Consent (DPDP Act, S.6). All CDSS Lite outputs are draft suggestions only and require your independent clinical review and approval before any clinical or prescriptive use.

  6. AI-Assisted Draft Prescription Generation
    OPTIONAL
    Purpose: To generate a draft post-consultation prescription based on the consultation record and CDSS Lite recommendations, for your review, editing, and digital signature before it is transmitted to the patient.
    DataCollected
    Consultation transcript or clinical notes
    CDSS Lite recommendations accepted or modified by you
    Your digital signature (applied by you on approval)
    Legal Basis
    Consent (DPDP Act, S.6). As mandated by the Telemedicine Practice Guidelines, 2020, you must review and digitally sign every prescription. The draft is a documentation aid only.

  7. Digital Twin Creation - Facial Image / Avatar Rendering
    OPTIONAL
    Purpose: To create a visual AI avatar (your Digital Twin) that replicates your appearance within the P4D platform, for use as your representative AI assistant in the App.
    DataCollected
    One or more facial photographs
    Optional: short video clips for more accurate avatar rendering
    Legal Basis
    Explicit Consent (DPDP Act, S.6). This is biometric-like Sensitive Personal Data and is processed ONLY with your separate, explicit consent. It is never shared with third parties for commercial use.

  8. Digital Twin Creation - Voice Samples and Voice Synthesis
    OPTIONAL
    Purpose: To create a synthesized voice model of your voice for your Digital Twin, enabling the avatar to communicate in a voice representative of yours within the P4D platform.
    DataCollected
    Voice samples: audio recordings of you speaking (minimum required duration will be stated in the App)
    Synthesized voice model generated from your recordings
    Legal Basis
    Explicit Consent (DPDP Act, S.6). Voice data is biometric-like Sensitive Personal Data. It is processed ONLY with this separate, explicit consent and is stored in encrypted, restricted-access environments.

  9. Digital Twin Training - Medical Knowledge Base
    OPTIONAL
    Purpose: To train your Digital Twin with your medical knowledge, clinical preferences, and expertise, enabling it to act as a personalised AI assistant that reflects your practice style and clinical approach.
    DataCollected
    Clinical guidelines and treatment protocols you upload or record
    FAQ responses and patient communication templates you provide
    Drug interaction notes and prescribing preferences you document
    Case summaries and anonymized clinical patterns you choose to contribute
    Legal Basis
    Explicit Consent (DPDP Act, S.6). You retain ownership of all knowledge base content you upload. The licence granted to P4D is limited to Digital Twin training and platform improvement (in anonymized form). See Section 5 of the Terms and Conditions.

  10. Use of Anonymized Consultation Data for AI Model Training
    OPTIONAL
    Purpose: To improve the clinical accuracy, safety, and performance of our AI models - including Live Scribe, CDSS Lite, and the PHA Avatar on P4P - by training them on anonymized, aggregated consultation data derived from your use of the P4D platform.
    DataCollected
    Consultation transcripts (irreversibly anonymized - all patient and doctor identifiers removed before use)
    CDSS Lite interaction logs (anonymized - recording which suggestions were accepted, modified, or rejected, without attribution to you)
    Post-consultation note structure (anonymized)
    Legal Basis
    Consent (DPDP Act, S.6). Your data is irreversibly anonymized before use. Anonymized data is not Personal Data under the DPDP Act and cannot be traced back to you.

  11. Consultation Fee Disbursement and Financial Processing
    MANDATORY
    Purpose: To process your consultation fee payments - on a per-consult or periodic (weekly/bi-weekly) basis - by transferring funds to your registered bank account.
    DataCollected
    Bank account number and IFSC code
    Account holder name
    GST registration number (if applicable)
    Payment disbursement records and transaction history
    Legal Basis
    Contract; Legal Obligation under GST, Income Tax Act, and financial regulations (DPDP Act, S.7).

  12. Appointment Reminders and Service Notifications
    MANDATORY
    Purpose: To send you timely reminders about upcoming consultations, schedule changes, prescription review alerts, and important platform notifications.
    DataCollected
    Name and contact details (email and mobile number)
    Appointment schedule data
    Legal Basis
    Consent; Contract (DPDP Act, S.6 & S.7). These are transactional communications, not marketing.

  13. Marketing and Promotional Communications (Opted-In Only)
    OPTIONAL
    Purpose: To send you information about new P4D features, professional development opportunities, health technology updates, and platform offers that may be relevant to your practice.
    DataCollected
    Name, email address, and mobile number
    Specialization and practice area (to personalise content relevance)
    Legal Basis
    Consent (DPDP Act, S.6 - opt-in only). You will receive marketing only if you actively consent here.

E. YOUR RIGHTS AS A DATA PRINCIPAL
As a Data Principal under the DPDP Act, 2023, you have the right to:
Access a summary of your Personal Data held by us, including the purposes for which it is processed.
Correct or update inaccurate or incomplete Personal Data.
Erase your Personal Data upon account deletion or withdrawal of consent, subject to mandatory legal retention obligations.
Obtain your Personal Data in a portable, machine-readable format.
Withdraw any consent granted here at any time without penalty, subject to the consequences described for each item above.
Request revocation and deletion of your Digital Twin data (face, voice, knowledge base) at any time - see Items 7, 8, and 9.
Seek redressal of grievances by contacting our DPO at dpo@pranik.ai.
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact dpo@pranik.ai or use Settings > Privacy in the App. We will acknowledge within 72 hours and resolve within 30 days.

F. HOW TO WITHDRAW CONSENT
You may withdraw consent for any individual purpose at any time by:
Navigating to Settings > Privacy > Consent Management within the P4D App.
Emailing dpo@pranik.ai with the subject line: "Consent Withdrawal - P4D".
For Digital Twin data specifically: Settings > Digital Twin > Manage / Delete, or emailing dpo@pranik.ai with subject line: "Digital Twin Data Request".

Withdrawal of consent is prospective - it does not affect processing already lawfully carried out. For Digital Twin biometric-like data, deletion or anonymization will be completed within 30 days of your request, subject to mandatory audit log retention (minimum 1 year).

G. DECLARATION AND SIGNATURE
I, the undersigned Registered Medical Practitioner, confirm that:
I have read and understood this Consent Notice and the associated Privacy Policy of Pranik.ai for the P4D platform.
I am providing my consent freely, without coercion, and with full understanding of the purposes, data involved, and consequences described for each item.
I understand that Digital Twin consents (Items 7, 8, and 9) involve biometric-like data and I am providing separate, explicit consent for each sub-item independently.
I understand that I may withdraw any consent at any time, and that withdrawal of certain mandatory consents may affect my access to platform services.
I acknowledge that as a Registered Medical Practitioner I have independent obligations regarding the confidentiality of Patient data accessed through the P4D platform, which are separate from this Consent Notice.

Doctor Full Name: _________________________
Date: ____________________________________

NMC / State Council Reg. No.: ______________
Mobile No. (for OTP verification): __________

Signature / Digital Signature: _____________________________________________

Privacy Policy: pranik.ai/privacy-policy | Terms & Conditions: pranik.ai/terms | Digital Twin Policy: pranik.ai/digital-twin

☐ I GRANT consent for this purpose ☐ I WITHHOLD / WITHDRAW consent for this purpose