1. Introduction
Welcome to CalmAlly. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
2. Information We Collect
   1. Personal Information
* Name
* Contact information (email address, phone number)
* Age
* Gender
* Emergency contact information
* Other demographic information

   2. Health Information
* Mental health history, concerns and symptoms
* Treatment preferences
   1. Usage Information
* Log data
* Device information
* IP address
   1. Therapist Information
* Professional credentials
* Specializations
* Availability
* Therapeutic approach
* Other data related to their practice
* Demographic information
3. How We Use Your Information
We use the information we collect for the following purposes:
* To create and manage your account
* To match you with appropriate therapists
* To facilitate therapy sessions, including online sessions
* To improve our services and user experience
* To communicate with you about our services
* To process payments and refunds
* To schedule and manage appointments
* To generate and manage session notes and summaries
* To comply with legal obligations
To provide these services effectively, we work with trusted third-party service providers. These providers assist us with various aspects of our platform operations, including but not limited to:
* Hosting and maintaining our platform
* Facilitating online therapy sessions
* Processing payments and refunds
* Scheduling and managing appointments
* Generating and storing session summaries
* Analyzing platform usage to improve our services
These third-party providers are carefully selected and are required to adhere to strict confidentiality and data protection standards. They are only permitted to use your information for the specific purposes outlined in our agreements with them.
4. Information Sharing and Disclosure
We want to assure you that we do not sell your personal information to any third parties. However, we may share your information in the following circumstances:
* With therapists you are matched with (limited to necessary information for therapy purposes)
* With third-party service providers who assist in platform operations, as described in Section 3. These providers are bound by confidentiality agreements and are only permitted to use your information to provide services to CalmAlly.
* When required by law, such as to comply with a subpoena or similar legal process
* To protect our rights, privacy, safety or property, and that of our users or others
* In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company
* With your explicit consent
We take steps to ensure that any third party with whom we share information maintains adequate data protection measures to safeguard your information.
5. Data Security
At CalmAlly, we recognize the importance of protecting your personal and health information. We are committed to implementing and maintaining reasonable security practices to safeguard your data. Our approach to data security includes:
* Hosting Platform: We have carefully selected a reputable service provider to host our platform. This provider implements industry-standard security measures to protect data stored on their systems.
* Data Encryption: We ensure that data transmitted between you and our platform is encrypted using standard protocols.
* Access Controls: We limit access to personal information to authorized personnel who need to know that information to operate, develop, or improve our services.
* Password Protection: We require all users to create strong passwords and encourage regular password changes to enhance account security.
* Third-Party Compliance: We require our third-party service providers to maintain appropriate security measures to protect the information they process on our behalf.
* Ongoing Monitoring: We stay informed about emerging security threats and best practices in data protection.
While we strive to use commercially acceptable means to protect your personal information, it's important to note that no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but are committed to taking reasonable steps to protect your information.
We encourage users to also take steps to protect their own data, such as maintaining the confidentiality of their account credentials and using secure internet connections when accessing our platform.
If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us using the contact information provided in this Privacy Policy.
6. Compliance With IT Rules
CalmAlly complies with the Information Technology (Intermediaries Guidelines) Rules, 2011. We exercise due diligence in accordance with these rules to ensure the security and privacy of our users' data. This includes:
* Publishing our rules, regulations, privacy policy, and user agreement for access or usage of our platform.
* Informing users not to host, display, upload, modify, publish, transmit, update or share any information that is harmful, objectionable, or unlawful in any way.
* Removing any non-compliant information within 36 hours of obtaining knowledge by itself or when brought to actual knowledge by an affected person in writing.
7. Your Rights and Choices
You have the right to:
* Access and update your personal information
* Request deletion of your data
* Opt-out of certain data uses
* Withdraw consent (where applicable)
To exercise these rights, please contact us using the information provided in the "Contact Us" section.
8. Data Retention and Deletion
CalmAlly retains personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention periods for different types of data are as follows:
* Account information: Retained for the duration of your account plus 30 days after account closure.
* Health information: Retained for 7 years after your last interaction with our platform, in compliance with medical record retention laws.
* Usage information: Retained for 2 years for analytical purposes. 
You can request deletion of your account and associated data at any time. Upon receiving a verifiable request, we will delete your personal information from our records unless retention is required by law or necessary for legitimate business purposes. The deletion process will be completed within 30 days of the verified request.
9. Data Localization
CalmAlly is committed to complying with Indian data protection laws and regulations. To this end: 
* We store all personal and sensitive personal data of our Indian users on servers located within India.
* In cases where data processing occurs outside India, we ensure that it is done with the express consent of the user and in compliance with applicable Indian laws.
* We maintain a copy of all user data on servers in India, even if a copy is maintained elsewhere for operational efficiency.
10. Cookies and Similar Technologies
We use cookies and similar technologies to enhance your experience on our platform. You can manage your cookie preferences through your browser settings.
11. Grievance Officer
In accordance with Information Technology Act, 2000 and the rules made thereunder, we have appointed a Grievance Officer to address any concerns or complaints regarding our privacy practices. You can contact our Grievance Officer at: 
* Ankit Agrawal 
* Email: ankit@calmally.in
* Phone: +91-8447735016
The Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 15 days from its receipt.
12. Consent for Sensitive Personal Data
CalmAlly collects and processes sensitive personal data, including mental health information, as part of our services. We obtain explicit, separate consent from users for the collection and processing of this sensitive personal data. This consent is obtained through clear affirmative action (such as checking a box or clicking a button) at the time of data collection. You have the right to withdraw this consent at any time. However, please note that withdrawing consent may impact our ability to provide certain services to you.
13. Age Restriction and User Eligibility
CalmAlly's services are designed for users who are 18 years of age or older. We do not knowingly collect or solicit information from individuals under 18. If we learn that we have collected personal information from an individual under 18, we will promptly delete that information.
If you are under 18, please do not attempt to use our services or provide any personal information about yourself to us. If you believe that we might have any information from or about an individual under 18, please contact us using the information provided in the "Contact Us" section.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our platform and updating the "Last Updated" date.
15. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at: support@calmally.in
By using CalmAlly, you affirm that you are at least 18 years old and agree to the terms of this Privacy Policy. If you do not agree with this policy or are under 18, please do not use our services.