Privacy

Your phone number

To sign you in — we send a code over WhatsApp — and to send session reminders.

Your name, date of birth, city, languages and billing country

Your name so your practitioner knows what to call you. Date of birth because Mannvartan is for adults and we have to check. Languages to match you well. Billing country to show you one price in your own currency.

An email address, if you give one

For receipts, confirmations and the calendar invitation to each session. Reminders on WhatsApp deliberately never say what kind of session it is or with whom; that detail goes in email, because a lock screen is not private.

What you tell us you want help with

One free-text answer at signup, in your own words. Seen only by the practitioner you book. Deleted outright if you ask us to erase your data.

Your bookings and payments

Which sessions you booked and when, and the payments for them. Card and UPI details are handled by Razorpay, a regulated Indian payment provider; we never see your card number.

Your practitioner’s clinical notes

Written by them, about your sessions. Encrypted before they reach our database with a key only their session can use, so nobody at Mannvartan can read them — not support, not an administrator. Kept for 7 years from your last session, as professional record-keeping requires; erased for practical purposes by destroying the key if you ask.

In India. Our database and files are in Mumbai, and payments are processed in India. The one thing that leaves is the video call itself, which runs on Google Meet: we create the link, sessions are never recorded, and nothing about the content of a session is stored there. We do not sell data and we do not share it with advertisers.

You

Everything about you, on your dashboard, and as a download on request.

Your practitioner

Your name, what you told us at signup, your bookings with them, and their own notes. Not your payment details, and nothing about any other practitioner you have seen.

Mannvartan

Enough to run the service and pay practitioners: bookings, payments, and that sessions happened. Never the notes — the encryption makes that a fact rather than a promise.

You can ask from your dashboard or by email. We respond within 30 days. This is exactly what happens to each kind of information — the same list our systems carry out, not a summary of it.

Erased

• Your name, contact details and profile

  Your name, phone number, email address, date of birth, city and language preferences are cleared. The account row itself stays as an empty placeholder, because payment records point at it and removing it would break the books.

• What you told us you wanted help with

  The free-text answer you gave when you signed up — what was going on, in your own words — is deleted outright.

• Messages we sent you

  The reminders and confirmations we sent, and the addresses we sent them to, are deleted.

• Assessments a practitioner suggested

  Any suggestion that you have an assessment, and the areas it named, is deleted. This is a message written to you rather than a clinical record, so nothing depends on keeping it.

Kept, and why

• Your practitioner’s clinical notesmade unreadable

  We destroy the key that decrypts them, immediately and irreversibly. What is left cannot be read by us, by your practitioner, or by anyone else, and it is deleted when the retention period ends. The notes are not readable again by anybody after this point.

  Basis: Professional records obligation: clinical notes are retained for 7 years from the last session (D-13).

• Your payments and receiptsretained

  Your receipts and payment records stay. They are financial records that tax law requires us to keep, and an issued invoice cannot be altered or removed without breaking the numbering of every invoice after it.

  Basis: Tax and accounting law. A GST invoice series must stay consecutive and complete, and financial records have their own statutory retention periods that are longer than any erasure request can shorten.

• That sessions happened, and whenretained

  We keep the fact that sessions took place and when, because that is what your practitioner was paid for. Once your profile is cleared these rows no longer identify you to anyone reading them.

  Basis: Needed to reconcile payouts to practitioners and to defend the financial record. Carries no health detail once the profile is cleared.

• What you agreed to, and whenretained

  We keep the record that you agreed to our terms, which version, and when. It is the evidence that we were allowed to hold your data at all, so destroying it would work against you rather than for you.

  Basis: The evidence that processing was lawful. Deleting the consent record would remove the proof that we had permission in the first place.

Under India’s Digital Personal Data Protection Act you may ask what we hold about you and receive a copy, ask for it to be corrected, ask for it to be erased, and withdraw the consent you gave — at which point we stop, apart from what the law requires us to keep, listed above. You may also nominate somebody to exercise these rights for you.

Signed in, the Your data page does all of this. Otherwise write to care@mannvartan.com. A person reads it, and we respond within 30 days. If you are not satisfied with our response you may complain to the Data Protection Board of India.

Mannvartan is for adults. We ask for a date of birth at signup and do not open an account for anyone under 18. If you are under 18, Tele-MANAS on 14416 can help and can point you to services set up for younger people.