Privacy Policy

1. Who we are

Data controller: Bharat Neurotech operating CheckMentalHealth.in. Contact: privacy@checkmentalhealth.in.

2. What we collect

• Anonymous AI chat: the free AI Psychologist works without sign-up. Conversations stay in your browser unless you sign in and choose to sync.
• Account: email, display name, and (optionally) phone when you register or book a session.
• Clinical intake: screener answers, journal entries, mood/insight data you submit — used only to personalise your care.
• Payments: Razorpay processes your card/UPI data directly; we never see or store your card number. We retain the payment ID, amount, and status for accounting and refund handling.
• Booking & session notes: visible to Dr. Sodhi and you only; encrypted at rest.
• Technical logs: IP address, user agent, and request metadata for security, rate-limiting, and abuse prevention.

3. How we use it

• Deliver the AI Psychologist, screeners, tools, courses and live sessions you asked for.
• Send transactional email (booking confirmations, receipts, reset links, session reminders) via Resend.
• Improve safety — e.g. rate-limiting to prevent abuse, and reviewing anonymised failures to fix bugs.
• Comply with legal, tax, and clinical-record retention obligations.

We do not sell your data. We do not use your personal chats, intake, or session content to train AI models.

4. Sub-processors

• Cloud database & auth — encrypted at rest, row-level access control, EU/US regions.
• Razorpay — payment processing (RBI regulated).
• Resend — transactional email delivery.
• Google Meet / Calendar — video sessions and reminders (only when you book).
• Cloudflare — CDN, DNS and edge compute.
• NVIDIA NIM — inference backend for our NeuroCortex + EQCortex models. Prompts are transmitted for the duration of the request only; no long-term retention on the inference side.

5. Retention

• Anonymous AI chats: stored only in your browser unless you sync.
• Account and clinical data: retained while your account is active. Delete on request; we then retain only the minimum required by tax/clinical law (typically 7 years for financial records).
• Webhook and security logs: 90 days.
• Test/ephemeral accounts: purged automatically within 12 hours.

6. Your rights (DPDP Act 2023 / GDPR)

You can request access, correction, export, or deletion of your data at any time. Write to privacy@checkmentalhealth.in with proof of identity; we respond within 30 days.

7. Cookies

We use strictly-necessary cookies for authentication (session token) and admin OTP verification. No advertising or cross-site tracking cookies are set by our first-party code.

8. Children

The service is intended for users aged 18+. Users under 18 should use it only with a parent/guardian's involvement.

9. Contact & grievance officer

Grievance Officer: Dr. Nitnem Singh Sodhi — grievance@checkmentalhealth.in. For clinical or safety concerns call Tele-MANAS 14416 (free, 24×7) or emergency 112.