Privacy Policy

1. Information We Collect

• Account data: name, email, phone, date of birth.
• Health and wellness data: birth profiles, session notes (with your consent).
• Usage data: device, browser, IP, interactions, cookies.
• Payment data: processed by Razorpay; we do not store card numbers.

2. How We Use Data

• Provide and improve services, personalization, and support.
• Process payments, send notifications, and prevent fraud.
• Comply with legal obligations and enforce our Terms.

3. Legal basis and consent

Where applicable, processing may rely on consent, contract performance, legal obligations, or a permitted legitimate use. You may withdraw consent for future processing through the relevant product control or by contacting us; withdrawal does not undo processing that was already lawful.

4. Data Sharing

We may share the minimum data needed with service providers for hosting, storage, payments, communications, analytics, support, and security. Their own terms and data-processing commitments apply. We do not sell personal data for third-party advertising.

5. Data Retention & Deletion

We retain data as long as necessary for the purposes above or as required by law. You can request deletion via your account or by emailing [email protected]. We will acknowledge and process verified requests according to applicable law. Timing can vary where records must be retained for security, fraud prevention, disputes, tax, other legal obligations, or limited backup cycles; we will explain any applicable exception.

6. Security

We use TLS encryption, hashed passwords, rate limiting, and access controls. No system is perfectly secure; please report vulnerabilities to [email protected].

7. International Transfers

Data may be processed in India and in other jurisdictions used by our service providers. Where a transfer safeguard is legally required, we use the contractual, organisational, or technical measure applicable to that provider and transfer. Contact us for the current transfer context.

8. Children

Under India’s Digital Personal Data Protection framework, a child is generally a person under 18. Consumer account features are not intended for children unless a specific guardian, school, or care flow provides the required notice, verified consent, and safeguards. If you believe a child’s data was submitted outside such a flow, contact us for review and deletion.

9. Your Rights

• Access, correct, or delete your personal data.
• Object to or restrict certain processing.
• Data portability in a machine-readable format.
• Lodge a complaint with your local data protection authority.