Privacy and data

Last updated: 2 November 2026

1. Who we are

PatientDesk is a product of MangoBrain, the software arm of Mango Media Digital, Uttara, Dhaka, Bangladesh. In this page “we” and “the PatientDesk team” mean that company. “The clinic” means the clinic, chamber or doctor who holds a PatientDesk account.

2. Whose data it is

The patient records, prescriptions, bills and documents in a PatientDesk account belong to the clinic. The clinic decides what is collected and why; we hold and process it on the clinic’s instructions in order to provide the software. Each clinic’s data is kept separate from every other clinic on the system.

We do not sell data. We do not use one clinic’s patient data to build anything for another clinic, and we do not use it for advertising.

3. What the PatientDesk team can access

This is the part clinics ask about, so it is stated plainly.

For maintenance, management and data quality, and in order to solve problems, the PatientDesk team can access and check all data in a clinic’s account — including patient records, bills and accounts.

Why: we are not a company that sells a licence and disappears. We work on our clinics’ revenue with them, which means checking whether data is being entered correctly and fixing it when it is not. This is part of the working arrangement, and it is stated in the written agreement with each clinic.

The limits that apply to our own team:

• We can never write, sign or approve a prescription, and we can never order a test. No member of the PatientDesk team can do these things in any clinic’s account, whatever their position in our company. Clinical content is the clinic’s alone.
• Every opening requires a reason, which is recorded in PatientDesk’s own audit log along with who opened the account and when.
• Opening a patient’s medical records has a time limit for our staff; the access ends by itself rather than staying open.
• The most sensitive permissions are closed to our staff entirely; others require a written reason and expire.

One thing to be clear about: the clinic’s own activity trail inside the app does not show these openings by our team. They are recorded in our own audit log, not in the clinic’s. We are telling you this here rather than letting you discover it.

4. What we collect through this website

If you send us a demo request, we receive what you typed into the form — your name, your clinic, your role, your phone number, your email and what you told us you need — and we use it only to contact you about PatientDesk. Please do not put any patient’s name or medical details into that form.

This website does not set advertising cookies and does not track you across other websites. Your browser may store your language and light-or-dark choice on your own device; that never leaves your device.

5. Where data is kept

PatientDesk runs on servers rented from a hosting provider, and uploaded files are kept in cloud storage. Connections to PatientDesk are encrypted. Databases are backed up regularly, and backups are also kept outside the main server.

If you need the hosting provider named, the country the data sits in, or our backup retention period in writing for your own records, ask us and we will provide it.

6. How long we keep it

A clinic’s data is kept while the account is open. If a clinic leaves, we agree a period with them in which they can export their data before it is removed, and that period is recorded in the agreement.

7. Patients

If you are a patient and want to know what a clinic holds about you, or want it corrected or deleted, contact the clinic — the records are theirs, and we cannot make that decision for them. If you are not sure who to ask, write to us and we will point you to the right clinic.

8. Security

Each person has their own login and sees only what their role allows and only the chambers they work in. Clinical and money actions are written to a trail that cannot be edited or deleted afterwards. Owners and doctors are required to use two-step sign-in.

No system is beyond reach. If we ever believe a clinic’s data has been exposed, we will tell that clinic.

9. The written agreement

Each clinic signs an agreement with us which states the access described in section 3, what we may and may not do with the data, and what happens if the clinic leaves. If anything on this page and that agreement disagree, tell us — it means we have made a mistake on this page, and we will fix it.

10. Contact

Questions about this page, or about data in a PatientDesk account: [email protected], or WhatsApp +880 1336 433710. Mango Media Digital, Uttara, Dhaka, Bangladesh.