Last updated: 3 November 2026
यह सार सुविधा के लिए है; पूरी शर्तें नीचे अंग्रेज़ी में हैं।
Goli Time ("Goli Time", "we", "us") is a medicine reminder service on WhatsApp, available at golitime.com. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), Goli Time is the Data Fiduciary for the personal data described here. You are the Data Principal.
This notice is written in clear language as required by the DPDP Act. It also serves as our privacy policy under the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"). Health information such as your medicines is treated as sensitive personal data.
This policy covers the Goli Time WhatsApp service, the website golitime.com, and messages you send to us by email. It does not cover WhatsApp itself, which is run by Meta under its own privacy policy.
| Data | Why we need it |
|---|---|
| WhatsApp phone number (WhatsApp ID) | To identify your account and send your reminders. |
| Name (your WhatsApp profile name, or the name you give us) – encrypted | To address you in reminders and voice notes. |
| Language and time zone | To send messages in your language at the right local time. |
| Medicines you confirm: name, dose, how often, before/after food, number of days – encrypted | To create your reminder schedule. This is health information. |
| Dose times (for example, your "morning" time) | To send reminders when you want them. |
| Reminder history: date and time, medicines in that reminder (encrypted), and your reply – Taken, Skip or Snooze | To follow up on missed doses, show your history, and send reports you ask for. |
| Consent record: when you tapped "I agree" and which version of this notice you saw | To prove your consent, as the law requires. |
| Account details: free-trial start date, paused/active status, time of your last message | To run your trial and plan, and to follow WhatsApp's 24-hour messaging rules. |
| Family member numbers you approve (when you use family sharing), and the date you approved each one | To let only the people you chose see your doses on the family dashboard, and (if turned on) alert them when a dose is missed. |
| Family dashboard sign-in records: a one-time login link and a browser session, both stored only as a secure hash (never in readable form), and a record of changes made from the dashboard (what was changed and by whom – you or a family member) | To sign people in safely, keep the dashboard secure, and show who changed your medicines or times. |
| Service records: message IDs and event types such as "reminder sent" or "photo read – 3 medicines" (no medicine names), and technical logs in which phone numbers are masked | To prevent duplicate messages, fix errors and keep the service secure. |
| Emails and demo requests (name, pharmacy/clinic, phone, city) that you send us | To reply to you. |
| Payment details (only when paid plans are available) | Payments are processed by Razorpay. We receive the payment status, amount, plan and a transaction reference. We do not receive or store your card, UPI PIN or bank login details. |
We do not collect your location, your phone's contact list, your other WhatsApp chats, or any data from your phone beyond the messages you send to Goli Time.
When you send a prescription photo, we fetch it from WhatsApp into our server's memory and send it to an AI service (Google Gemini API) to read the medicine names, doses and timings. The photo is not written to our disk or database, and we do not keep it after it has been read. Google processes the image under its API terms to return the result to us.
A family member you have approved can also upload a photo of your prescription on the Goli Time family page (golitime.com/app). It is handled the same way: read in memory, sent to the AI service only to read it, and never stored.
To catch spelling mistakes, the names that are read or typed are also checked against a medicine reference list kept on our own server (built from public lists such as the Govt of India Jan Aushadhi product list and the National List of Essential Medicines). This check happens on our server and sends no data to anyone. If a name is not in the list, we keep it exactly as written and ask you to check it; we never change a medicine on our own.
This product uses publicly available data from the U.S. National Library of Medicine (NLM), National Institutes of Health, Department of Health and Human Services; NLM is not responsible for the product and does not endorse or recommend this or any other product.
The medicines the AI reads are shown to you first. They are held (encrypted) only until you confirm or cancel. Only the list you confirm is saved. AI can make mistakes, so please always check the list against your prescription. A copy of the photo stays in your own WhatsApp chat on your phone, which you control.
We do not sell or rent your data, show you ads, build marketing profiles, or use your data to train AI models. We do not send promotional messages on WhatsApp unless you have separately agreed to receive them.
Before we save anything about your health, Goli Time shows you a notice on WhatsApp and asks you to tap "I agree". That is your free, specific and informed consent under Section 6 of the DPDP Act, for the purposes listed above only. If you tap "No thanks", we save no health information. If we change this notice in an important way, we show you the new notice and ask you again.
You can withdraw consent as easily as you gave it: type DELETE in the chat. This stops all processing and erases your data (see section 10). Withdrawing consent does not affect processing done before it. Without consent we cannot send reminders.
We may process limited data without consent only where the DPDP Act allows it, for example to comply with a law or court order, or to respond to a medical emergency involving a threat to life.
We share data only with service providers that help us run Goli Time ("Data Processors"), under contracts or terms that require them to protect it, and only as much as each needs:
| Provider | What they receive | Why |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform / Cloud API) | Your number, and the messages, picture cards and voice notes exchanged with Goli Time | To deliver WhatsApp messages |
| Google (Gemini API) | Your prescription photo | To read medicines from the photo |
| Microsoft (Edge text-to-speech) and, as a backup, Google (text-to-speech) | The text of a voice reminder: your first name, the time, and medicine names and doses | To create the voice note in your language |
| Hetzner Online GmbH | Our encrypted database and server | Server hosting (Germany, EU) |
| Razorpay (only when paid plans are available) | Payment details you enter on Razorpay's page | To process payments |
| Our email provider | Emails you send to support@golitime.com | To answer you |
We also share alerts with family members you approve, and we may disclose data if required by law, court order or a government authority, or to protect someone's life or safety. If Goli Time is merged or transferred, your data would move only under this policy, and we would tell you first.
Our server and database are hosted by Hetzner in Germany (European Union). Our providers (Meta, Google, Microsoft) may process data in other countries, including the United States. This means your data may be processed outside India. Section 16 of the DPDP Act allows this, except to countries the Government of India restricts. We will follow any such restriction.
These are reasonable security safeguards under the DPDP Act and the SPDI Rules. No system is 100% secure, but we work to prevent unauthorised access, loss or misuse.
Messages already delivered stay in your WhatsApp app on your phone until you delete them there. Meta handles its own copies under the WhatsApp terms.
Under the DPDP Act you have the right to:
To use a right by email, write to support@golitime.com from any address and include your WhatsApp number. To protect you, we confirm the request by sending a message to that WhatsApp number before acting. We reply within the times in section 17, and never later than the time allowed by the DPDP Rules.
If you are not satisfied with our answer, you may complain to the Data Protection Board of India, after first using our grievance process. As a Data Principal you also have duties under the Act, for example to give accurate information and not to file false complaints.
Only numbers you approve. Nobody can see your medicines or doses unless you approve their WhatsApp number. To share, you send FAMILY ADD with their number, and we ask you to confirm with a "Yes, allow" button. We record when you approved. A family member cannot add themselves.
What an approved member can do: on the family dashboard they can see your medicines, today's doses, your 7 and 30-day history and your plan status, and they can change your medicines and reminder times to help you. Every change is recorded with who made it. They cannot see anyone else's data, and they cannot add other people.
Remove anyone, any time. Type FAMILY to see who can see your data, and FAMILY REMOVE with the number (for example FAMILY REMOVE 1) to remove someone. Their access ends immediately, even if they are signed in. Typing DELETE removes all family links together with your data.
Signing in: the dashboard has no password. A person sends DASHBOARD to Goli Time on WhatsApp and gets a login link that works only once and only for a short time. Please do not share it.
You can set reminders for a parent, elder or other adult family member. When you do, you confirm that you have their permission and that they understand this notice. Family alerts are sent only to numbers that the person taking the medicine (or the person managing reminders with their consent) has approved. Anyone receiving alerts can ask us to stop at any time. If the person cannot decide for themselves, consent must come from their lawful guardian.
If you start Goli Time with a clinic or hospital code (for example by sending "Hi HOSP01" or scanning a poster), we save that code with your account so we can tell which clinic programme you joined through. The clinic or hospital can only see totals for its code, such as how many people joined, how many are active and the overall share of doses marked taken. Totals under 5 are hidden. They never see your name, phone number, medicines or any individual reminder.
Goli Time is for adults. You must be 18 or older to use it. We do not knowingly process the personal data of children (under 18) and we do not track children or show them ads. Please do not register a child or send a child's prescription. If we learn that we hold a child's data without verifiable consent of a parent or lawful guardian, we will erase it.
If a personal data breach happens, we will inform affected users without delay, in clear language, on WhatsApp or email: what happened, what data was involved, its likely impact, what we are doing about it, and what you can do. We will also report it to the Data Protection Board of India (and to CERT-In where required) within the time limits set by law.
golitime.com does not use advertising or tracking cookies or analytics. The family dashboard uses only a strictly necessary sign-in cookie (secure, not readable by scripts, removed when you log out or when it expires) and a cookie that remembers your language. If you choose a language on the site, that choice is saved only in your own browser. Our hosting provider may process technical information such as your IP address to deliver pages and protect against attacks.
We may update this policy. The "Last updated" date will change, and if the change is important we will tell you on WhatsApp and ask for your consent again where needed.
For any question about your data, or to use your rights: support@golitime.com.
Grievance Officer, Goli Time
Email: support@golitime.com (subject line: "Grievance")
Working hours: Monday to Saturday, 10:00 AM – 6:00 PM IST
We acknowledge every complaint within 24 hours and resolve it within 15 days of receipt. If we need more information we will tell you, and we will keep you updated until it is closed.
Goli Time is operated by FAB11 FANTSY PRIVATE LIMITED, India.