This started as a personal tool — a frustration with clinic software that was either too complex, too expensive, or simply not built the way a pediatrician actually thinks. IAP immunization schedules, growth charts, weight-based dosing and quick prescriptions, in one place.

When colleagues found it useful, I released it for other doctors. It stayed single-specialty for a long time — built, tested and trusted purely for pediatric practice.

That changed as more doctors outside pediatrics — general physicians, an OB-GYN, and most recently an infertility specialist — asked for the same care I'd put into their own workflows. Rather than bolt on generic fields, each new module (Adult, OB-GYN, and now Infertility) has been built the same way the original was: sitting with the specialist, reviewing their real paper forms and workflow, and shaping the software around how they actually practice — not the other way round.

What began as one pediatrician's personal tool is now Vitalis — a multi-specialty platform, still built one specialty at a time, with a real clinician in the room for each one.

Last updated: May 2026 · Effective from account creation / patient registration

Vitalis is a multi-specialty electronic medical records platform (Pediatrics, Adult medicine, OB-GYN, Infertility and Dental), operated by the clinic owner / doctor who registered the account (“Data Fiduciary”). Each doctor operates their own independent data account. No third-party AI or advertising service has access to your patient data.

• Doctor / Clinic: Name, email, clinic name, address, registration number.
• Patient: Name, date of birth, sex, blood group, phone, address, and parent/guardian name for children.
• Health records: Visit notes, diagnosis, prescriptions, vaccinations, growth, pregnancy and fertility records, lab reports, and details patients share through the pre-visit form.

Data is collected solely to provide outpatient electronic medical record services. No data is shared with third parties, sold, or used for advertising.

Processing is based on explicit consent obtained from the patient (or a parent/guardian for a child) at the time of registration, recorded with the date. Doctors (Data Fiduciaries) are responsible for obtaining informed consent before entering patient data.

Patient records are stored encrypted on Supabase's secure cloud. Data travelling between your device and the cloud is encrypted (HTTPS). Only the doctor's account, and the reception logins the doctor creates, can see a clinic's records. Passwords are hashed and never stored in plain text.

As a Data Principal (or guardian of a minor patient) under the DPDP Act, 2023, you have the following rights. To exercise any of these rights, submit a written request to shruthi.rai@gmail.com — we will respond within 48 hours.

• Right to Access — Request a copy of all health records held for you or your child.
• Right to Correction — Request correction of inaccurate or incomplete data.
• Right to Erasure — Request permanent deletion of records (subject to statutory 7-year retention requirement).
• Right to Withdraw Consent — Withdraw consent at any time; this will result in record deletion per your instruction.
• Right to Grievance Redressal — Raise a grievance with the Data Protection Officer within 48 hours.

Medical records are retained for a minimum of 7 years from the date of last visit as required by Indian medical regulations. Upon account deletion, all records are permanently removed within 30 days.

Vitalis does not use any tracking cookies, advertising cookies, or third-party analytics cookies.

• Session token — Stored in browser localStorage to keep you signed in. Essential for the app to function. Cleared on sign-out.
• Patient data cache — A local copy of records is stored in the browser (localStorage and IndexedDB) so pages open quickly. This data never leaves your device except when it is saved to your clinic's cloud account.
• No third-party cookies — No Google Analytics, Facebook Pixel, advertising networks, or marketing trackers of any kind are loaded.

As required under the DPDP Act, 2023, a Data Protection Officer has been designated to oversee compliance and handle data-related requests.