Privacy policy

Arogyaminds Health Technologies Pvt. Ltd. ("Arogyaminds", "we") operates an online counselling platform. This policy is written to be read, not skimmed past — if any part of it is unclear, write to care@arogyaminds.com and we will explain it.

1. What we collect

• Account data — your mobile number, name, email address and, if you provide one, an emergency contact.
• Booking data — the counsellor you booked, the time, the session format and what you chose to write in the "what would you like to talk about" field.
• Session data — clinical notes written by your counsellor. Sessions are not recorded unless you and your counsellor both explicitly consent.
• Payment data — handled by our PCI-DSS compliant payment partner. We store the transaction reference and invoice, never your full card number.
• Technical data — device type, browser and IP address, used for security and fraud prevention.

2. Why we process it

To provide the service you asked for: matching you with a counsellor, holding your appointment, taking payment, sending reminders, and enabling your counsellor to provide continuity of care. We also process a minimal set of data to meet legal, tax and clinical record-keeping obligations.

3. Who can see your information

• Your counsellor sees your name, the concern you wrote, and their own notes. They do not see your mobile number or email address.
• Other counsellors see nothing. Notes are not pooled across the platform.
• Your employer, on a corporate plan, receives aggregate usage only, with any segment below five sessions suppressed. They never learn who attended or why.
• We never sell your data, and we do not use session content to train models.

4. When confidentiality has limits

A counsellor may break confidentiality only where there is an immediate and serious risk to your life or to someone else's, or where disclosure is required by a court. Where it is safe to do so, they will tell you before doing it.

5. Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access by our staff is role-based, logged and audited. Our security programme is aligned to ISO/IEC 27001, and we run independent penetration tests annually.

6. How long we keep it

Clinical records are retained for three years after your last session, in line with professional record-keeping standards. Financial records are retained for eight years as required by Indian tax law. Everything else is deleted when you close your account.

7. Your rights

Under the Digital Personal Data Protection Act 2023 you may access your data, correct it, withdraw consent, nominate someone to act for you, and request erasure where no legal obligation requires us to keep it. Write to care@arogyaminds.com and we will respond within 30 days.

8. Grievance officer

If you are unhappy with how we have handled your data, contact our Grievance Officer at care@arogyaminds.com or call +91 97909 88653. You may also escalate to the Data Protection Board of India.