Privacy Policy
Last updated 2026-09-21
CheckMentalHealth.in is a flagship project of Bharat Neurotech and the private practice of Dr. Nitnem Singh Sodhi. We handle mental-health information with care, aligned to ISO 27001 (security) and ISO 27701 (privacy) controls and India's DPDP Act 2023.
1. Who we are
Data controller: Bharat Neurotech operating CheckMentalHealth.in. To reach us, open a ticket at /account → Support or message Dr. Sodhi's team on WhatsApp +91 92353 44444.
2. What we collect
- Anonymous AI chat: the free AI Psychologist works without sign-up. Conversations stay in your browser unless you sign in and choose to sync.
- Account: email, display name, and (optionally) phone when you register or book a session.
- Clinical intake: screener answers, journal entries, mood/insight data you submit — used only to personalise your care.
- Payments: Razorpay processes your card/UPI data directly; we never see or store your card number. We retain the payment ID, amount, and status for accounting and refund handling.
- Booking & session notes: visible to Dr. Sodhi and you only; encrypted at rest.
- Technical logs: IP address, user agent, and request metadata for security, rate-limiting, and abuse prevention.
3. How we use it
- Deliver the AI Psychologist, screeners, tools, courses and live sessions you asked for.
- Send transactional email (booking confirmations, receipts, reset links, session reminders) via Resend.
- Improve safety — e.g. rate-limiting to prevent abuse, and reviewing anonymised failures to fix bugs.
- Comply with legal, tax, and clinical-record retention obligations.
We do not sell your data. We do not use your personal chats, intake, or session content to train AI models.
4. Sub-processors
- Cloud database & auth — encrypted at rest, row-level access control, EU/US regions.
- Razorpay — payment processing (RBI regulated).
- Resend — transactional email delivery.
- Google Meet / Calendar — video sessions and reminders (only when you book).
- Cloudflare — CDN, DNS and edge compute.
- Private inference servers in France — AI model inference runs on Bharat Neurotech's private servers located in France, operating under EU GDPR and applicable data-privacy laws. Prompts are transmitted for the duration of the request only; no long-term retention on the inference side.
Employer-sponsored WorkWell access
When an employer sponsors WorkWell AI, its verified HR contact can administer seats and view company status, active-seat and pending-invitation counts, the billing period and company webinar details. The employer cannot access an employee's AI conversations, intake responses, screening results, clinical records, consultation details or Personal AI configuration. Employees activate their own accounts and give consent directly.
5. Retention
- Anonymous AI chats: stored only in your browser unless you sync.
- Account and clinical data: retained while your account is active. Delete on request; we then retain only the minimum required by tax/clinical law (typically 7 years for financial records).
- Webhook and security logs: 90 days.
- Test/ephemeral accounts: purged automatically within 12 hours.
6. Your rights (DPDP Act 2023 / GDPR)
You can request access, correction, export, or deletion of your data at any time. Open a ticket at /account → Support (signed in, so we can verify identity), or message Dr. Sodhi's team on WhatsApp +91 92353 44444. We respond within 30 days.
7. Cookies
We use strictly-necessary cookies for authentication (session token) and admin OTP verification. No advertising or cross-site tracking cookies are set by our first-party code.
8. Children
The service is intended for users aged 18 and over. Under-18s may use it only with a parent or guardian's consent and active involvement.
9. Contact & grievance officer
Grievance Officer: Dr. Nitnem Singh Sodhi. Raise a grievance by opening a ticket at /account → Support or messaging his team on WhatsApp +91 92353 44444. For clinical or safety concerns call Tele-MANAS 14416 (free, 24×7) or emergency 112.
Primary support: Grievances, data-rights requests and legal notices are logged fastest through a support ticket at /account → Support.
Official email (administrative only):
This address is for administrative, legal, press and partnership correspondence only — it is not a clinical or emergency channel. Unsolicited marketing, spam or junk mail sent to it will be reported directly to the Cyber Crime Police Cell.
See also: Terms of Service · Refund & Cancellation · AI Crawler Policy.