Privacy Policy

1. Introduction & Entity Details

MindYatra (mindyatra.in) is a non-clinical digital mental wellness platform committed to protecting your privacy. Our registered office: Unit 101, Oxford Towers, 139, HAL Old Airport Rd, Kodihalli, Bengaluru, Karnataka 560008. For any privacy concerns, contact Support@mindyatra.in or Grievance Officer at grievance@mindyatra.in.

2. Data We Collect — By Service

• KYMH Phase 1 (Draw/Sketch/Voice): User-created drawings, sketches, uploaded images, voice recordings, freeform text, timestamp and session metadata.
• KYMH Phase 2 (Psychologist Report): Anonymised submission shared with reviewing psychologist; analysis report stored against user account. Non-clinical only.
• AI Self-Assessment Tools: Assessment responses, self-reported scores, mood/stress/sleep indicators, test results. No PII required.
• Wellness / Life Coaching / Therapy Sessions: Scheduling data (date/time), psychologist identity, session duration. Session content is NOT recorded by MindYatra.
• Activity Hub (Music, Games, eBooks, Meditation): Activities accessed, time spent, e-books downloaded, exercise completions.
• Account Registration: Name, age, date of birth, gender, email, mobile number, password (hashed). Optional profile details.
• Platform Usage: IP address, device type, browser type, OS, page views, session duration, analytics identifiers, engagement patterns.
• Written Journals: Journal entries stored securely, accessible only to the user.

3. Legal Basis for Processing (DPDP Act 2023)

• Providing platform services: Consent of the Data Principal (User).
• KYMH psychologist review: Consent explicitly obtained before submission.
• Improving AI assessments: Legitimate purpose (anonymised data only).
• Sending wellness reminders: Consent.
• Legal compliance: Legal obligation under applicable Indian law.
• Emergency safety alerts: Vital interest of the Data Principal.
• Anonymised research and platform development: Explicit consent obtained separately.

4. Purpose of Data Collection

• Provide and personalise MindYatra's wellness tools, programs, and services.
• Provide KYMH assessments and generate psychologist reports.
• Deliver AI self-assessment results (including AI tools) and track wellness trends.
• Generate self-awareness insights psychological and/or astrological for features such as UṇarAtma.
• Schedule and facilitate psychologist sessions on your behalf.
• Personalise Activity Hub recommendations based on usage patterns.
• Communicate service updates, recommendations, and session reminders (with consent).
• Improve AI models using anonymised, aggregated data only (with explicit consent).
• Address customer support requests and comply with Indian legal obligations, fraud detection.

5. Data Storage & Retention

• KYMH submissions (drawings, voice, sketches): 1 year from submission, or until deletion request.
• KYMH psychologist reports: 1 year from report delivery, or until deletion request.
• Voice & written responses (journaling/voice/AI tools): Deleted within 30 days of report generation unless explicit consent given for anonymised research.
• AI assessment responses: 1 year from last session; anonymised after 90 days.
• Session scheduling data: 1 year from session date.
• Account registration data: Duration of account + 6 months post-deletion.
• Activity Hub usage data: 1 year; anonymised after 90 days.
• Legally mandated records: As required by applicable Indian law.

All sensitive data is encrypted and stored securely using industry-standard measures.

6. Data Sharing & Disclosure

MindYatra does NOT sell your personal data. Sharing occurs only as follows:

• KYMH submissions shared with assigned reviewing psychologist only, bound by confidentiality agreement.
• Session facilitation data shared with session psychologist for scheduling purposes only.
• Anonymised, aggregated data may be used for platform improvement (no individual identification).
• Third-party technology providers (cloud hosting, analytics) operate under strict DP agreements with no independent access to SPDI.
• Data may be disclosed if required by law, court orders, or government authorities under applicable Indian law.
• Third-party partners and therapy providers follow their own privacy policies; review them before use.

7. Your Rights as a Data Principal (DPDP Act 2023)

• Right to Access: Request a copy of all personal data, including KYMH reports and assessment results.
• Right to Correction: Update inaccurate registration or profile data.
• Right to Erasure: Request deletion of your account, KYMH submissions, and session data.
• Right to Withdraw Consent: Withdraw consent at any time; may limit service availability.
• Right to Grievance Redressal: Lodge a complaint; we respond within 30 working days.
• Right to Nominate: Nominate a trusted individual to exercise your data rights.
• Right to Object: Object to certain uses of your data at any time.

To exercise rights, contact Support@mindyatra.in or grievance@mindyatra.in.

8. AI and Automated Insights

9. Security Measures

• Voice recordings and drawings stored in encrypted, isolated storage.
• Psychologist access to KYMH submissions restricted to the assigned reviewer only.
• Role-based access controls for internal staff; no general staff access to SPDI.
• Regular independent security audits and penetration testing.
• Data breach notification to the Data Protection Board within 72 hours as required by DPDP Act 2023. Affected users informed within appropriate timeframe.

10. Cookies & Tracking

We use essential cookies for platform functionality and optional analytics cookies with your consent. Manage preferences via browser settings or cookie consent manager on mindyatra.in. Information collected includes page views, session duration, device/browser type for improving platform experience.

11. Children's Privacy & Parental Responsibility

MindYatra is intended for individuals aged 18 and above. Minors may only use services with verified parental or guardian consent. We do not knowingly collect personal data from children without proper authorization. If a minor accesses the platform by misrepresenting details, the parent or legal guardian bears full responsibility. MindYatra shall not be held liable for any misuse by minors.

12. International Users

Although MindYatra may be accessed globally, all data processing is carried out in compliance with Indian data protection laws, including DPDP Act 2023 and IT Act 2000. By using MindYatra, you consent to transfer and processing of your data in India.

13. Grievance Redressal

To exercise data rights or raise a privacy grievance, email grievance@mindyatra.in. We acknowledge promptly and respond within 30 working days. For data deletion requests, send email to Support@mindyatra.in with subject line 'Data Deletion Request' from registered email.

14. Governing Law & Jurisdiction

This Privacy Policy is governed by laws of India, including IPC, IT Act 2000, DPDP Act 2023. Any disputes shall be subject to exclusive jurisdiction of courts in Bengaluru, Karnataka, India.

15. Policy Updates

We may update this Privacy Policy. Material changes will be notified via email or in-app notification with revised effective date. Continued use after notification constitutes acceptance.