SOCH – Strengthening Overall Care for HIV beneficiaries

Privacy Policy for the ISHTH Mobile App

App Name (Google Play): ISHTH Mobile App / NACO MPR P&OCS App
Legal Entity / Developer: National AIDS Control Organisation (NACO), Ministry of Health & Family Welfare, Government of India
Official Portal: https://sochnaco.mohfw.gov.in

1. Introduction & Overview

National AIDS Control Organisation (NACO), Ministry of Health & Family Welfare, Government of India, respects your privacy rights and is committed to protecting your personal and health-related information collected through the ISHTH Mobile Application (hereinafter referred to as "ISHTH App").

This application is hosted on secure Government-approved cloud infrastructure and the content is managed by NACO. The terms and conditions shall be governed by the laws, rules, and regulations applicable in India, including the Digital Personal Data Protection Act, 2023, where applicable.

Any dispute arising under these terms and conditions shall be subject to the jurisdiction of the courts in New Delhi, India.

2. User Account & Personal Information Collected

Using the ISHTH App requires authorized users to log in to the system. The application collects and processes the following personal and administrative data:

Login Credentials & Identifiers: Username / Email address, password, User ID (UID), and system-generated authentication tokens.
Profile Information: Full Name, Contact Number, Designated Role, and State / District / Facility / Centre Name.
Purpose: User authentication, role-based access control, session management, retrieving forgotten account credentials, preventing unauthorized access, and official program coordination.

3. Health & Program Data Collection

The ISHTH App is designed for healthcare service delivery and national program monitoring across prisons, closed settings, and related healthcare facilities. The application collects:

Aggregated Health Statistics: Screening, diagnosis, and treatment counts for STI, HIV, TB, and Hepatitis services.
Camp & Facility Reports: Date of camp, target population numbers, and service uptake indicators.
Purpose: Program monitoring, epidemiological tracking, statutory reporting, resource allocation, and policy formulation under the National AIDS Control Programme (NACP), National Tuberculosis Elimination Program (NTEP), and National Viral Hepatitis Control Program (NVHCP).

4. Emails, SMS & Notifications

By registering and using the ISHTH App, you consent to receiving official emails, SMS, and in-app communications. NACO ISHTH will use your registered email address and mobile number to send essential service-related communications, OTP verifications, password resets, system alerts, and program updates.

5. Passwords & Access Security

Your user account is protected by strict authentication controls:

Passwords must meet organizational complexity standards.
Users are responsible for maintaining the confidentiality of their login credentials and preventing unauthorized access.
Any initial system-generated password must be changed immediately upon first login.

6. Technical Log & Device Data

When accessing the ISHTH App, standard technical logs may be collected for security, auditing, and diagnostic purposes:

IP (Internet Protocol) address, device model, operating system version, app version, date and time stamps, and error/crash reports.
Location: The app does not collect background GPS location from your device. Location details (state, district, facility) are administrative attributes associated with your authorized user account.

7. Data Security & Encryption in Transit

The ISHTH App employs industry-standard security measures and administrative safeguards:

Encryption in Transit: All data transmitted between the mobile application and government servers is encrypted using modern TLS / HTTPS protocols.
Storage Security: Server-side data is stored on secure government cloud infrastructure with role-based access controls and perimeter security.
Confidentiality: Personal data and health information are treated as strictly confidential and are never sold, rented, or shared for commercial or marketing purposes.

8. Disclosure of Information

Information collected through the ISHTH App is accessible only to:

Authorized healthcare providers and application personnel.
State AIDS Control Societies (SACS) and NACO program implementation and monitoring teams.
Regulatory or law enforcement authorities as mandated under applicable Indian law, court order, or official Government directive.

9. Account and Data Deletion Request Procedure (Google Play Compliance)

Users have the right to request the deletion of their user account and associated personal data at any time.

How to Submit a Deletion Request:

To request account and personal data deletion, please submit an official request via email:

Email: helpdesk@naco.gov.in
Subject Line: ISHTH Mobile App - Account & Data Deletion Request
Information to Include:
1. Full Registered Name
2. Registered Username / User ID / Mobile Number
3. Associated State, District, and Facility/Prison Name
4. Reason for deletion request (optional)

What Gets Deleted:

Upon receipt and verification of the request:

User login account, authentication credentials, personal profile information, and session tokens will be permanently deleted from active servers within 90 days.
Notification and communication preferences associated with the account will be cleared.

Statutory Health Data Retention Notice:

In compliance with Government of India statutory health record retention guidelines and public health governance standards, aggregated epidemiological data and public health reporting statistics submitted prior to account deletion are retained in secure, archived Government repositories for official healthcare program evaluation. Retained records are strictly anonymized/restricted and cannot be accessed via any deleted login account.

10. Children's Privacy

The ISHTH App is designed for authorized healthcare professionals, program officers, and institutional personnel. It is not intended for direct use by children under the age of 18 without institutional supervision.

11. Changes to Privacy Policy

NACO reserves the right to update this Privacy Policy to reflect changes in regulatory requirements, security standards, or app functionality. The latest version will always be published at the official URL with an updated effective date. Continued use of the application constitutes acceptance of any revisions.

12. Contact Information & Grievance Redressal

If you have any questions, feedback, grievance, or data deletion requests regarding this Privacy Policy, please contact:

National AIDS Control Organisation (NACO)
Department of Health & Family Welfare
Ministry of Health & Family Welfare, Government of India
6th & 9th Floor, Chanderlok Building, 36 Janpath, New Delhi, India – 110001
Tel: 011-43509999, 011-23731778
Email: helpdesk@naco.gov.in
Official Web Portal: https://sochnaco.mohfw.gov.in

PUBLISHED DATE: 3rd July, 2023
PUBLISHED BY: National AIDS Control Organisation (NACO)
LAST UPDATED ON: 19th August, 2026