Anahatam is the Data Fiduciary for this processing. This notice is written for India’s Digital Personal Data Protection Act, 2023 (DPDP Act). It is not legal advice.
The previous public policy described therapy, session notes, and emergency contacts. Anahatam is a digital wellness product, not a clinic. This version matches what the product actually does.
1. Who this applies to
It covers visitors to this website and people who use the Anahatam app, including:
- Guests who start an onboarding journey before creating an account
- Registered users (email or Google sign-in)
- People who buy a subscription
- People who join a personal or organisation waitlist on this website
- Participants in workshops or guided programmes we host — for individuals or for organisations — when we process their details for that engagement
- People exercising DPDP rights (access, correction, erasure, consent)
Anahatam is for adults. We do not knowingly create accounts for anyone under 18.
2. Data we collect
Account and identity
- Name, email, and sign-in identifiers
- Password (stored hashed) if you use email sign-in
- Google account identifiers if you sign in with Google
- Date of birth, used to confirm you are 18 or older
- Optional profile details you choose to share
Wellness and product data
- Onboarding answers and plan preferences
- Mood check-ins, daily progress, and wellness survey responses
- Chat messages you send in the product, including onboarding chat
- Generated plans, briefs, and related session records
- Consent choices (necessary, analytics, marketing) and when you changed them
Payments
- Subscription and order references processed by Razorpay. We do not store full card numbers.
Technical data
- Device, browser, and approximate network information
- Logs needed to keep the service secure and working
- Cookies or similar storage as described below
- Optional push-notification tokens if you enable them
We do not collect therapy notes, medication history, or emergency contacts. Wellness answers can still be sensitive. Treat them accordingly.
3. Why we use it
- To provide the service: create your account, generate and show a plan, save progress, and keep you signed in.
- To personalise with AI: send relevant onboarding and wellness text to AI processors so the product can draft plans and replies. This is part of the service you ask for when you use those features.
- To take payment: create and verify subscription charges.
- To keep the product safe: rate-limit abuse, debug failures, and prevent unauthorised access.
- Analytics (optional): understand how the site and app are used, only if you accept analytics cookies / consent.
- Marketing (optional, off by default): only if you accept marketing consent.
- Legal duties: tax, fraud, security, and responding to lawful requests.
We do not sell personal data. We do not use wellness answers to train public ads against you.
4. Consent and cookies
On the website and in the app you can choose:
- Necessary — always on. Needed to load pages, keep a session, remember this consent choice, and run the product.
- Analytics — optional.
- Marketing — optional and off unless you accept all.
You can change your mind later in app settings, or by clearing site data and answering the banner again. Withdrawing optional consent does not delete the account; use erasure for that.
5. Who we share data with
We share personal data only with processors who help us run Anahatam, for example:
- Hosting and delivery (the website and app run on cloud infrastructure)
- Database hosting for accounts and product records
- AI providers that process prompts to generate plans and chat replies
- Razorpay for payments
- Google, if you use Google sign-in or optional Google Calendar features
- Cloudflare Turnstile or similar, to reduce automated abuse
- Error monitoring, when enabled, to diagnose failures
We may disclose information if the law requires it, or if we reasonably believe it is necessary to protect someone’s vital interests. Anahatam is not a mandatory-reporting clinic; we are also not an emergency service.
6. Retention
- Active accounts: kept while you use the product and as needed to provide it.
- Abandoned guest / onboarding drafts: typically deleted after 90 days if they are never claimed by an account.
- Account deletion: the account is restricted immediately (soft-delete). Personal data is then hard-deleted after a 90-day recovery window, unless a longer legal hold is required.
- Withdrawn consent records: may be kept up to 12 months as an audit trail, then purged.
- Payment records: some references may be retained by Razorpay or as required for accounting.
7. Your rights (DPDP)
Subject to the Act, you may:
- Access a summary of personal data we hold about you
- Correct inaccurate account details
- Withdraw optional consent
- Request erasure of personal data
- Nominate someone to act if you are unable to (where the rules allow)
- Complain to our grievance contact below, and to the Data Protection Board of India
In the app, signed-in users can export data and request deletion from Settings. You can also email privacy@anahatam.ai. We aim to respond without undue delay, typically within 30 days.
After you request deletion you can restore the account during the 90-day window. After hard-delete, the data we control is gone and cannot be recovered from Anahatam.
8. Security
We use HTTPS in transit, access-controlled databases, hashed passwords, and session cookies designed to stay on our domains. No system is perfectly secure. Do not put information in chat that you would not want a processor to see.
We do not claim end-to-end encryption of wellness chat. AI features require sending text to a processor.
9. International processing
Some processors may be located outside India. We use them only to provide Anahatam, and we remain responsible as Data Fiduciary for personal data we decide to process.
10. Children’s privacy
If we learn that we hold an account for someone under 18, we will close it and delete associated personal data, subject to the retention rules above.
11. Changes
If this policy changes in a material way, we will update the date here and, where required, ask for consent again. The app’s consent version is currently 2026-09-19.
12. Contact
Grievance / privacy: privacy@anahatam.ai
Product support: support@anahatam.ai
App: app.anahatam.ai