1. Information we collect
We collect the following information when you use Manovikalpa:
- Account information: name, email address, encrypted password
- Therapy chat messages and session history
- Mood logs including emoji, label, score, and optional notes
- Medical records: diagnoses, medications, and session notes you enter
- Blockchain hashes of your medical records (stored on Polygon)
2. How we use your information
- To provide and improve the Manovikalpa service
- To generate AI therapy responses (your messages are sent to Anthropic Claude API)
- To display your mood trends and history
- To store and retrieve your medical records
- To send password reset emails when requested
3. Third-party services
We use the following third-party services:
- Anthropic Claude — processes your chat messages to generate AI responses. Under our commercial API agreement, Anthropic does not use your conversation content to train its models. Manovikalpa's AI layer is built to support multiple providers (including OpenAI and Groq); if we route production traffic through an additional provider, we will update this section beforehand.
- Supabase — stores your data in a PostgreSQL database
- Vercel — hosts the application
- Resend — sends transactional emails
- Polygon blockchain — stores cryptographic hashes of medical records
- Upstash Redis — rate limiting to protect the service
4. Cross-border data transfer
Your data may be stored and processed on servers located outside India (including South Korea and the United States) as part of our infrastructure providers' global operations. By using Manovikalpa, you consent to this cross-border transfer of your personal data, in accordance with the DPDP Act, 2023.
5. Data security
We implement the following security measures:
- Passwords are hashed using bcrypt and never stored in plain text
- All data is transmitted over HTTPS
- Medical records are protected with blockchain integrity verification
- Rate limiting prevents unauthorized bulk access
- JWT sessions expire after 24 hours
- Access to raw chat content and medical records is restricted to authorized personnel and limited to resolving support requests you raise, investigating security incidents, or complying with a legal obligation — we do not routinely review individual users' conversations
6. Data retention
We retain your data for as long as your account is active. You may request deletion of your account and associated data by contacting us at support@manovikalpa.com, and we will complete this within 30 days. Note that blockchain hashes cannot be deleted as they are permanently recorded on the Polygon network. Security and audit logs are retained for a minimum of one year, as required under the DPDP Rules, 2025, even where deletion has been requested.
7. Your rights
Under the DPDP Act, 2023, you have the following rights:
- Right to access your personal data
- Right to correct inaccurate data
- Right to delete your data (right to be forgotten)
- Right to data portability
- Right to withdraw consent
- Right to grievance redressal
You can exercise your right to access by downloading a complete export of your data at any time from Settings, free of charge. To exercise any other right, contact us at support@manovikalpa.com.
8. Grievance Officer
For any data-related grievances or complaints, please contact our Grievance Officer at grievance@manovikalpa.com. We will acknowledge your complaint within 7 days and respond within 30 days, as required under applicable Indian data protection regulations.
9. Children's privacy
Manovikalpa is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.
10. Changes to this policy
We may update this privacy policy from time to time. We will notify you of significant changes via email. Continued use of Manovikalpa after changes constitutes acceptance of the updated policy.
11. Contact us
For privacy-related questions or to exercise your rights, contact us at support@manovikalpa.com