Privacy Policy
This notice explains the personal information handled by INSAAAJ Tech Private Limited ("DrSentio", "we") through the DrSentio Android app, drsentio.com and related support services. It describes the current implementation, including optional features when available. Feature availability is shown in the app; describing a feature here does not mean it is currently offered.
1. Information we handle and why
- Account and settings: your name, email, date of birth, account identifier and saved preferences, including notification and diagnostics choices. These support sign-in, the 18–70 age requirement, access controls and account management. Firebase Authentication processes sign-in credentials; staff do not need your password.
- Your wellbeing records: journal entries, mood check-ins, messages and any other information you choose to enter. These are stored to show your history and provide the features you use. Do not submit another person's private information without an appropriate basis.
- Support and website requests: the messages you send, your account email, and the optional name/reason on the deletion form. An institution enquiry can include organisation, contact name, email, optional phone, size and message. We use these to respond, verify requests and administer the service.
- Consultations, when available: professional choice, appointment time, booking reason, messages, call participants, connection/status/timing records and payment or included-credit status. A professional may keep restricted notes. Camera and microphone access are used for calls with your device permission; the current app does not enable call recording.
- Purchases: Google Play handles Android Premium checkout; Razorpay handles additional consultation checkout. DrSentio stores transaction references, amount, status, subscription/benefit periods and refund information for access, reconciliation and financial records. Our backend does not receive full card numbers, CVV or banking passwords. Checkout providers process payment details themselves; Razorpay Checkout can require a mobile number and collect payment-screen interactions, device/network information and installed UPI-app detection.
- Professional applications: photograph, biography, qualifications, education, experience, specialisations, languages, availability and credential documents. Staff review applications; approved public profile fields/photos may be visible to other users or website visitors. Verification documents and professional notes are not public profile content.
- Security and delivery information: IP/network information, request metadata, account/device identifiers, app version, notification tokens and logs needed for authentication, abuse prevention, service delivery and investigation. Notifications use a generic message prompting you to open the app rather than putting conversation text on the lock screen.
- Optional crash diagnostics: when enabled in Account, Firebase Crashlytics receives technical crash/error and device information. App error reporting is designed to use limited technical categories and stack traces rather than journal or message text. Product analytics collection is disabled in the current app. Turning diagnostics off does not erase reports already received by a provider.
Guest Calm tools: bundled exercises can be used without an account. The app does not upload or save exercise selections or session time. Online configuration/media requests still involve network processing and access logs. Public media/configuration requests do not attach your account identifier. Website pages load Google Fonts, which involves a request to Google's servers.
2. AI, safety checks and human access
AI is an optional wellness feature, not clinical care. When it is available and you use it, relevant message context is sent through our backend to Google Gemini for response generation and safety assessment. We do not add your account identity to the prompt, but what you type can identify you. Our verified AI service uses the paid Gemini API. Its terms say prompts and responses are not used to improve Google products, while allowing limited safety/security logging and processing in countries where Google or its agents operate. This does not mean that provider input/output is never retained or reviewed. See the AI Disclaimer.
Safety checks can pause AI and create a restricted risk record. They can miss risk or incorrectly flag it. They do not continuously monitor you, contact emergency services or guarantee a professional response. You can request a named approved professional's temporary access to an AI conversation; your consent and administrator approval are required. Approved access expires within its allowed window, at most 24 hours, and can be revoked.
A professional can read the direct conversation you have with them. Access to other private content is restricted by role and purpose. Authorised staff handle support, reported content, safety-review requests, security, payments and legal requests within their permissions. Reporting an AI reply shares that reply and your reason with authorised reviewers; it does not by itself open your entire conversation. Business membership administration does not provide an employer access to your individual journal or conversations.
3. Service providers and other disclosures
The services used for the relevant feature include Google/Firebase (authentication, database, files, hosting, security checks, notifications and optional diagnostics), Google Play (Android billing), Razorpay (consultation checkout/refunds), Google Gemini (AI), and Agora (real-time calls). Providers also process technical/service data under their own terms. If you contact us by email, your email provider and our email-hosting service process that correspondence. We share the information needed for the feature, rather than sending consultation notes or chat transcripts as payment metadata. A professional you contact receives the information needed for that interaction.
We may disclose information where required by applicable law, a valid legal request, or to investigate fraud/security incidents or protect legal rights. A lawful disclosure is limited to the relevant purpose. We do not promise absolute confidentiality in every legal or safety circumstance.
4. Storage, international processing and security
The current primary Firestore database and Storage bucket are configured in Mumbai, India. That does not locate every copy or provider operation there: Firebase Authentication is a US-based service, and hosting, security, messaging, diagnostics, AI, payment and real-time communication services can process information in other countries. Their locations and retention differ by service and configuration. Firebase privacy information explains this distinction.
We use access controls, server-side authorisation, encrypted transport for service requests, provider storage protections and privileged-action audit records. No online service can guarantee perfect security. Call media is streamed through Agora; the current DrSentio app does not request recordings. Call metadata and provider diagnostics are distinct from a recording, and another participant could use their own device to record. Do not record or share a session without appropriate permission and lawful authority.
5. Retention and deletion
Account information and records are held to provide your account and the features you use, handle disputes/refunds and meet applicable legal obligations. There is no blanket promise to erase all information after 90 days or immediately after account closure. Our operator-adopted financial/safety schedule retains only the limited categories described below after approved account deletion. A separate clinical-note decision is required if professional notes exist. A general automatic inactivity-deletion schedule has not been implemented.
After a verified deletion request is approved and processing completes, active account content is removed. Limited financial records are retained for 3,288 days from archival processing, and limited safety-event metadata for 180 days from that processing, with restricted access and hashed references. The financial period is a conservative operating period to support applicable accounting obligations, not a claim that the law requires every record for nine years. A documented legal requirement may need different handling. Hashed references and transaction identifiers are pseudonymised, not a guarantee of irreversible anonymity. Professional notes need a separately reviewed professional/legal retention or transfer decision; no universal note-retention period has been set by this notice. Professional consultations depend on an approved professional and an available, confirmed appointment; this notice does not promise availability. Administrative/security logs, backups and providers' own legally required records can follow different lifecycles. Contact us for the category, purpose and retention decision applicable to your request, including any legally required exception; we will explain restrictions or unresolved requirements.
Temporary app data-export files are scheduled for removal after their one-hour availability period. A minimal completed-deletion audit record is scheduled for removal after one year. These are separate from the financial/clinical retention decision; scheduled cleanup may not be instantaneous. See Delete your account for the request channels and scope. Deleting the app or your account does not cancel Google Play billing.
6. Your choices and requests
- Use Account → Your space to review available settings, export your personal data or request account deletion. Large exports can require support. An export excludes other people's private data and clinicians' private notes.
- Ask us to correct account information or explain/access the information we process. You can request deletion through the app, the website form without signing in, or email.
- Withdraw optional diagnostics/notification choices and approved AI-review access through the available controls. Device permissions can be changed in Android settings. Withdrawal stops the relevant future optional processing; it does not undo processing already performed or a lawful retention obligation.
- Ask about rights available under applicable Indian law, including access, correction, erasure, grievance redressal and nomination where the relevant provisions apply. India's DPDP framework has phased commencement; this notice is not a certification of legal compliance or a statement that every provision is already operative.
We may verify identity and authority before sharing, changing or deleting information. Supplying only a third person's email does not authorise access to their account.
7. Age and availability
DrSentio's account service is intended for adults aged 18–70 in India. We do not offer a child account or parental-consent flow. If you believe a child has supplied personal information, contact us so the account and appropriate deletion/safeguarding steps can be reviewed. Do not use a false date of birth.
8. Contact and grievances
INSAAAJ Tech Private Limited · support@drsentio.com
First Floor, Enkay tower, Plot B B1 Vanijya Nikunj, Industrial Complex Dundahera, Gurugram, Haryana – 122016, India.
Grievance Officer: Deepender Singh · support@drsentio.com. Write “Privacy grievance” or “Service grievance” in the subject and include enough information to identify the issue. Do not email your password, card details or unnecessary health information.
You may also use the applicable consumer or data-protection complaint mechanism when available under law. Nothing here removes a statutory right to approach a competent authority. Support is not an emergency or continuously monitored clinical service.
9. Changes
The published notice identifies its current date/version. Material changes require the applicable notice or consent process; they do not retrospectively establish consent for a new purpose.