Introduction
What ArogyaKosha does, how your records are protected, and the four ideas the rest of this guide builds on.
ArogyaKosha is a private vault for your family's medical records — prescriptions, lab reports, medications, hospital admissions, diagnoses, insurance papers and certificates — organised by person and by date, and available on the web and on Android.
Four ideas to know
| Idea | What it means for you |
|---|---|
| Vault PIN | A 6-digit PIN that encrypts your records on your own device before they are uploaded. ArogyaKosha's servers only ever store the encrypted version. You enter it each time you open the app. More about the Vault PIN → |
| Family vault | One shared space for a household. Adults get their own login; children and elderly parents can be added as dependents without one. The whole family shares one Vault PIN. More about families → |
| Active member | You always view and add records for one person at a time. The bar at the top of the screen shows whose records you're looking at — tap it to switch. |
| Documents | Every visit, medication and report is filed under a document — either a real scan/PDF you uploaded, or one created automatically when you type details in by hand. Deleting a document removes everything filed under it. More about documents → |
What you can store
- Documents — prescriptions, lab reports, certificates (medical, fitness, disability, government scheme…) and insurance policies, as PDF or image.
- Current medications — what someone is taking right now, with schedule and time of day.
- Prescriptions — every course a doctor prescribed, with tablets, schedule and an optional end date.
- Lab reports — test name, result, unit and reference range.
- Medical records — hospital admissions, doctor's diagnoses and long-term conditions.
- Profile health details — date of birth, blood group and allergies for each person.
How your data is protected
Medical details and uploaded files are encrypted on your phone or in your browser with a key derived from your Vault PIN, using AES-256-GCM. The key never leaves your device and is never sent to ArogyaKosha. This means:
- Not even ArogyaKosha staff can read your records.
- If you forget your PIN, the only way back in is your recovery code. Without either, your records cannot be recovered by anyone — including us.
- Your name, email, phone number and subscription details are not end-to-end encrypted, because we need them to run your account. See the Privacy Policy for full details.
Web portal or Android app?
Use whichever is convenient — they share everything. A few features exist on only one of them:
| Feature | Web portal | Android app |
|---|---|---|
| Scan with the camera | ✓ (phone browsers) | ✓ |
| AI auto-fill from a document | ✓ | ✓ |
| Fingerprint / face unlock | — | ✓ |
| Search across all of a person's records | Per list | ✓ (one search box) |
| Backup & restore to a file | — | ✓ |
| Share records | Health summary by WhatsApp, email or print / PDF | Password-protected PDF of a visit or report |
| Move yourself to another family | ✓ | — |
| Pay for a plan | Razorpay (cards, UPI, net banking) | Google Play |
The web portal works in any modern browser on a computer, tablet or phone. The Android app is on Google Play as ArogyaKosha.