Privacy policy
Effective 24 September 2026
MantraMed is pharmacy billing and inventory software made by MantraSphere Innovations Pvt. Ltd. (“we”, “us”). It runs on the web, as a Windows desktop app and as an Android app. This policy explains what information the service holds, why, and what control you have over it.
MantraMed is used by pharmacies, not by the public. A pharmacy that signs up is responsible for the information it records about its own customers and patients. We store and process that information on the pharmacy’s behalf and only to run the service for them.
1. Information we collect
Staff accounts
- Name, email address and role (owner, manager, cashier and so on).
- Your password, stored only as a one-way hash. We cannot read it.
- When you last signed in, and a record of the bills, returns, purchases and other entries you made. Every bill is recorded against the account that raised it.
Pharmacy business details
- Trading and registered names, address, phone, email, PAN and VAT numbers, company registration and drug licence numbers.
- For account administration only: the owner's phone number and citizenship number. The pharmacy's staff cannot see these.
Information pharmacies record about their customers
- Customers: name, phone, address, PAN number and notes.
- Prescriptions: patient name, phone, age and gender; the prescribing doctor's name, registration number and hospital; the medicines prescribed and dispensed.
- Sales, invoices, returns and amounts owed.
Business records
Medicines, stock batches, suppliers, purchases, payments and expenses. These describe the business rather than people, but they can include supplier contact details.
2. How we use it
- To run the service: sign you in, raise and print bills, track stock and produce reports.
- To send account emails, such as password reset links.
- To keep the service secure, investigate misuse and fix faults.
- To meet legal obligations, such as keeping tax invoices.
We do not sell personal information. We do not use it for advertising. We do not use customer or patient records for any purpose other than providing the service to the pharmacy that entered them.
3. The Android app
The Android app shows the same service as the website and stores the same information, on our servers, not on the phone. It asks for these permissions:
- Bluetooth, only to print receipts to a Bluetooth thermal printer you choose. It is marked as never being used to find your location, and the app does not ask for location access.
- Internet, to reach the service.
The app has no advertising or analytics code.
4. Cookies and local storage
When you sign in we set one secure, httpOnly session cookie. It keeps you signed in and expires after your session ends. We also store small interface preferences in your browser, such as which menus you left open. We do not use tracking or advertising cookies.
5. Who else sees it
We share information only with:
- Service providers that host our servers and database and deliver our emails. They process data only to provide those services to us.
- Authorities, when the law requires it.
- A buyer or successor, if the business is sold or merged, under the same protections as this policy.
Each pharmacy’s data is kept separate. Staff of one pharmacy cannot see another pharmacy’s records.
6. How we protect it
- All traffic uses HTTPS encryption.
- Passwords are hashed and never stored in readable form.
- Access inside a pharmacy is limited by role, so a cashier sees less than an owner.
- Password reset links expire and work only once.
No system is perfectly secure. If a breach affects your information, we will tell the affected pharmacies without undue delay.
7. How long we keep it
We keep information while the pharmacy’s account is active. Tax invoices and related records may need to be kept for as long as tax law requires. When a pharmacy closes its account, it can ask for a copy of its data, and we will then delete it, apart from anything we are legally required to keep.
8. Your rights
You can ask to see, correct or delete personal information about you.
- If you are a pharmacy's staff member or owner, contact us directly.
- If you are a pharmacy's customer or patient, contact that pharmacy first. They control your records and can correct or delete them. You can also contact us and we will pass your request on.
9. Children
MantraMed is for pharmacy staff and is not intended for children. Pharmacies may record prescriptions for patients of any age as part of their normal work.
10. Changes to this policy
We will update the date at the top when this policy changes. If a change is significant, we will notify pharmacy owners before it takes effect.
11. Contact
MantraSphere Innovations Pvt. Ltd.
Email: mantrasphere.official@gmail.com