Privacy & Safety Policy

1. Confidentiality is the default

Every conversation you share with a Shrutsakha therapist is bound by the strictest professional confidentiality standards as outlined by the Rehabilitation Council of India (RCI) and the American Psychological Association (APA). Sessions are never recorded without your explicit, written consent.

Therapist case notes are encrypted at rest using AES-256, accessible only to your assigned clinician and (when required) their clinical supervisor.

2. What data we collect — and why

• Account data: Name, email, phone — to confirm bookings and send reminders.
• Clinical notes: Created by your therapist; visible only to them.
• Payment data: Processed by PCI-DSS compliant gateways. We never see your card numbers.
• Usage analytics: Anonymous, aggregated metrics to improve the platform.

We do not sell your data. Ever. To anyone. For any reason.

3. Cookies & tracking

We use only essential cookies (session, security, language) and a privacy-respecting analytics tool (no cross-site tracking, no advertising IDs). You can manage preferences from your account settings.

4. When we share information

The only situations in which we may break confidentiality are those legally and ethically mandated:

• Imminent risk of harm to self or others.
• Suspected abuse of a minor or vulnerable adult.
• A specific, lawful court order.

Where possible, we will tell you before disclosure, and share only the minimum necessary information.

5. Your rights

You have the right to access, correct, export or delete your personal data at any time. Requests are honoured within 30 days. Email shrutsakha@gmail.com.

7. Reach the privacy team

Questions, concerns or feedback? Write to our Data Protection Officer at shrutsakha@gmail.com. We aim to respond within 48 hours.