This policy explains what the White Coats Chits app collects, why, who it is shared with, and the choices you have. The app is run by White Coats Chit Funds Private Limited (“we”), a chit fund company for registered doctors. We follow the Digital Personal Data Protection Act, 2023.
What we collect
| What | Why |
|---|---|
| Mobile number | To sign you in with a one-time code, and to reach you about your chit. |
| Name, email, city, medical council and registration number | To confirm you are a registered doctor, as membership is for doctors only. |
| PAN, bank account number, IFSC and account name | For identity checks required for chit members, and to send your payout only to your own account. |
| Nominee's name, relationship and phone | So your chit can be settled if something happens to you. |
| Documents you upload (medical registration, PAN card, bank proof) | For our office to verify your details. |
| Name and the last 4 digits of your Aadhaar, from DigiLocker | To verify your identity. We never receive or keep your full Aadhaar number. |
| Signed chit agreements and withdrawal undertakings | These are the legal records of your chit. |
| Instalments, payouts and payment references | To keep your chit's accounts, as the law requires. |
| Your savings goals | To show your progress on the home screen. |
| Device name, sign-in times and internet address | To keep your account secure and spot sign-ins that are not you. |
Your app PIN and fingerprint stay on your phone. They are never sent to us. We do not collect your contacts, location, photos you do not choose, or your card or UPI details.
Checks with licensed providers
- Aadhaar eKYC and eSign go through Setu, a licensed provider, with DigiLocker and Aadhaar. You give consent in the app each time.
- PAN and bank account checks also go through Setu. To confirm your bank account, ₹1 is credited to it.
- Payments go through Razorpay. Razorpay handles your card, UPI or bank details; we only receive the payment result.
Who can see your information
- Our office staff, only as their role needs. Every time staff view a full PAN, bank number or document, it is recorded.
- Other doctors in the same chit group see your name, ticket number, and the month you have asked to withdraw in, so withdrawals stay fair and open.
- Service providers who run the app for us: Setu (identity checks), Razorpay (payments), Meta's WhatsApp (sign-in codes and messages), Supabase (our database, in Mumbai), Render (our server, in Singapore) and Cloudflare (private document storage and backups). They may use your data only to provide their service to us.
- Authorities, such as the Registrar of Chits, tax authorities or the police, when the law requires it.
We do not sell your data, and we do not use it for advertising.
How we protect it
- PAN and bank account numbers are encrypted in our database.
- Documents are kept in private storage and opened only through short-lived links.
- All traffic is encrypted. Staff sign in with a password and a second step.
- Encrypted backups are made every night.
How long we keep it
We keep your information while you are a member. After you leave, we keep the records that chit and tax laws require us to keep, such as agreements, payments and accounts, for as long as those laws require. Everything else is deleted.
Your choices
- See and correct your details in the app. Verified details can be changed through our office.
- Withdraw a consent you gave. This may stop a service that depends on it, such as eKYC.
- Ask us to delete your account. See how to delete your account.
- Ask a question or raise a complaint with us at whitecoatschits@gmail.com. If you are not satisfied, you may approach the Data Protection Board of India.
Changes
If we change this policy, we will update the date above and tell you in the app when the change matters to you.