Privacy Policy

Version 1.0 · Effective: 1 September 2026 · Last updated: 13 August 2026

This Privacy Policy explains how INSAAAJ Tech Private Limited ("DrSentio", "we") collects, uses, and protects your personal data when you use our Services. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian law.

Your mental-health conversations are among the most sensitive data there is. We minimize what we collect, store it in India, never sell it, and never use conversation content for advertising.

1. Data we collect

Provided by you

Account data: name, email, date of birth (to verify our 18–70 age policy), phone (optional), preferred name, language, timezone.
Device data for notifications: a push notification token, device platform and app version, so we can deliver appointment reminders, message alerts and safety notifications. You can revoke this by disabling notifications; tokens are deleted when you sign out.
Wellness content: AI companion conversations, messages with psychologists, journal entries, mood check-ins.
Payment data: processed by Razorpay; we store order references and status, never card numbers.
For psychologists: licence numbers, qualifications, and verification documents.

Collected automatically

Device and app information (platform, version, crash reports), and product analytics events (e.g., "session booked"). Analytics never include the content of your conversations or journal.

2. How we use your data

To provide the Services: AI conversations, therapy bookings, video sessions, journaling, and audio.
Safety: conversations are automatically screened for serious risk. If a high-risk situation is detected, relevant context is shared with a psychologist so they can help you, and a safety record is created.
To process payments and manage subscriptions.
To improve the Services using aggregated, de-identified usage data.
To comply with legal obligations.

AI responses are generated by sending relevant conversation context to our AI provider (Google Gemini) through our secure servers. Your identity is not included with this content, and it is not used to train the provider's models per our configuration.

3. Who can see your conversations

You.
Your psychologist — only with your explicit consent, which you can revoke at any time, except where safety escalation applies (Section 2).
A limited number of authorized staff for safety review and legal compliance, under strict access controls and audit logging.

Institutional customers (employers, colleges) never see individual conversations — only anonymous, aggregate wellbeing statistics.

4. Storage and security

Data is stored on Google Cloud in the Mumbai (asia-south1) region, India.
Live video and audio sessions are carried by Agora's real-time network and are not recorded or stored by DrSentio.
Encryption in transit (TLS) and at rest; role-based access controls; server-side authorization; audit logs for privileged actions.

5. Retention

Operational data is retained for a minimum of 30 days.
Conversation data (AI and chat messages) is automatically deleted after a maximum of 12 months.
Account records are retained while your account is active. Records required for legal, tax, or safety-audit purposes may be retained as required by law, limited to what is necessary.
When you delete your account, personal data is deleted or anonymized within 30 days, except where retention is legally required.

6. Your rights (DPDP Act)

Access a summary of your personal data and processing activities.
Correct or update inaccurate data.
Erase your data (subject to legal retention requirements) — see Delete your account for the exact steps, what is removed and what we must keep.
Withdraw consent at any time, including consents granted to psychologists.
Nominate a person to exercise your rights in case of death or incapacity.
Grievance redressal (Section 9).

Exercise these rights in-app (Settings → Privacy) or by emailing privacy@drsentio.com.

7. Sharing

We share personal data only with: our processors (Google Cloud/Firebase for infrastructure, Razorpay for payments, Google Gemini for AI generation, Agora for carrying live video and audio sessions), psychologists you engage with, and authorities where legally required. We do not sell personal data, and we do not permit advertising use of your content.

8. Children

The Services are strictly for users aged 18–70. We do not knowingly process data of minors; accounts found to belong to minors are deleted.

9. Grievance officer

Deepender Singh · grievance@drsentio.com · First Floor, Enkay tower, Plot B B1 Vanijya Nikunj, Industrial Complex Dundahera, Gurugram, Haryana - 122016, India. If unresolved, you may complain to the Data Protection Board of India.

10. Changes

Material changes will be notified in-app or by email before they take effect. Consent records are versioned.