1. About Us
Care.Fi Pvt. Ltd. ("the Company", "we", "us", or "our"), based in India at DLF Cyber City, Tower B, Phase 2, Gurugram, Haryana 122002, India, operates the AI-powered hospital revenue cycle management platform at gocarefi.org (the "Platform").
Our Platform enables hospitals and health providers to automate insurance claim filing, predict likely rejections before submission, and obtain receivables-based financing on qualifying claims. We therefore process sensitive healthcare and patient data. This policy explains what we collect, why we use it, and how we protect it.
For privacy questions, contact us at: [email protected], or the address above.
2. Data We Handle
Account and registration data. When a hospital registers, we collect the authorised account holder's name, work email, phone number, and designation, plus the hospital's legal name and billing address. We use this to run and support the account.
Claims and clinical data. To operate our AI claims engine and rejection predictor, hospitals upload or connect discharge summaries, ICD-10 diagnosis and procedure codes, patient demographic data, pre-authorisation records, and past claim documents. This data belongs to hospitals and their patients. We process it only to code and submit claims, score rejection risk, provide remediation recommendations, and prepare billing performance reports.
Payer and TPA data. We work with TPAs and insurers for the hospital. The claims workflow records claim references, payer identifiers, approval or rejection decisions, and settlement amounts.
Financing data. For hospitals using gap financing, we collect and verify bank account details to disburse advances and collect insurer settlements. We handle this information under applicable RBI and financial regulations.
Platform usage and technical data. We automatically collect session tokens, API request logs, feature interaction data, and device and browser identifiers. We use these to operate the Platform, debug problems, and improve the service. We do not link usage data to patient records.
3. Data Use
We use data for these purposes:
- Running the Platform's AI claim filing, rejection prediction, and gap financing features;
- Updating hospital billing teams on claim status, risk alerts, and financing;
- Meeting our contractual duties to hospital clients under subscription agreements;
- Identifying and preventing fraud, unauthorised access, and claim submission errors;
- Meeting our obligations under the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDPA), DISHA (Digital Information Security in Healthcare Act) guidance, and other applicable Indian regulations;
- Improving rejection prediction accuracy with aggregated, anonymised claim patterns. We do not use identifiable patient data to train AI models without explicit written hospital consent.
We do not sell personal information or use clinical or patient data for advertising.
4. Data Sharing
We share data only in these cases:
- With TPAs and insurers, as the hospital directs, to submit and track claims;
- With financial partners as needed to disburse advances and collect hospital settlements;
- With contracted processors, including cloud hosting and analytics providers, who may use data only to provide services to us;
- With authorities when required by Indian law, court order, or regulatory direction.
We do not share patient health data outside the direct claims workflow without the hospital's written authorisation.
5. Retention and Security
We retain claim records and supporting clinical data as needed to complete the claims lifecycle and satisfy audit and healthcare data retention requirements in India. We keep account data throughout the subscription and for a reasonable period afterward to resolve outstanding obligations. Usage logs are rotated on a rolling basis.
We use encryption in transit (TLS) and at rest, role-based access controls, audit logs, and regular security reviews. These measures are designed to align with DISHA guidance for electronic health data and the IT Act's information security requirements.
6. Rights
Under applicable Indian law, including DPDPA 2023, you may have rights to access, correct, or erase personal data we hold about you, and nominate someone to act for you. Hospital account holders may request a summary of data processed for their facility. To request this, contact [email protected]. We respond within 30 days.
If we process certain data based on your consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal.
7. Cookies
We use cookies on this website. See our Cookie Policy for details.
8. Changes and Contact
We will show material policy changes by updating the "Last updated" date above and, when appropriate, notifying hospital account holders directly. Continued Platform use after a material change means acceptance of the revised policy.
Care.Fi Pvt. Ltd.DLF Cyber City, Tower B, Phase 2
Gurugram, Haryana 122002, India
Email: [email protected]
Phone: +91 124 462 3180