Privacy at Emoneeds

The short version: your records belong to you, only your care team can see them, and we never sell your data.

Last updated: TODO (set at publish)

1. What we collect

We collect what we need to give you care and run the service: your account and contact details, your booking and session information, and the messages you exchange with us. If you become a client, your care team also creates clinical records (assessments, session notes, and care plans) as part of your treatment. We collect minimal, privacy-respecting analytics about how the site is used, covered in section 8.

We try to collect only what we genuinely need. We don't ask for information that isn't relevant to your care or the service.

2. How we use your information

We use your information to provide care, schedule and run your sessions, process payments, keep you informed about your treatment, and improve how the service works. That's it.

We never sell or rent your information, and we never use your clinical records for advertising.

3. Health data and confidentiality

This is the most important part. Your clinical records are sensitive personal health data, and we treat them that way. They are accessible only to the care team assigned to you, and to the limited staff who need access to keep the service running safely (for example, to schedule a session). They are not visible to your employer, your family, or anyone else.

The only exceptions are narrow and serious: where there is a genuine risk to your safety or someone else's, or where the law requires disclosure. Wherever possible, we will talk to you first.

4. Consent

We ask for your consent before we collect or use your information, in plain language, at the point it matters. You're agreeing to let us provide care and run the service as described here, nothing more. You can withdraw your consent at any time by contacting us, and we'll explain what that means for your care and your data.

5. Who we share with

Your care team, always. Beyond that, we share only with the service providers we genuinely need to operate, such as our payment processor and secure infrastructure providers, and only to the extent required to do their job. They are bound to protect your data.

To be plain: no data is sold, no data is shared with third-party advertisers, and we run no advertising pixels on the site.

6. Data retention

We keep your records for as long as we need them to provide your care and to meet our clinical and legal obligations, and no longer than that. When you ask us to delete your data, we will, except where we are required by law to retain certain records (for example, some clinical or financial records), in which case we'll tell you what we're keeping and why.

7. Your rights

Under India's DPDP framework, you have the right to access the personal data we hold about you, to ask us to correct it, and to ask us to erase it, subject to the legal limits noted above. You also have the right to raise a concern or complaint.

To exercise any of these, contact our Grievance Officer, Anupam Gupta, at contact@emoneeds.com (a monitored inbox). We'll respond within the timelines the framework requires.

8. Cookies and analytics

We use PostHog in a cookieless configuration to understand how the site is used in aggregate, which is why you won't see a cookie banner. We do not use a Meta pixel, Google Analytics, or other third-party advertising trackers.

TODO: confirm at build time that the site ships with PostHog only and no other trackers.

9. Children's privacy

For anyone under 18, we involve a parent or guardian in line with the law and with good clinical practice, and we handle their data with the same care. Where a young person is in our care, what they share with their clinician is protected, within the safety limits described in section 3, and we're clear with both the young person and the parent about how that works.

10. Contact us about privacy

For anything to do with your privacy or your data, contact our Grievance Officer, Anupam Gupta, at contact@emoneeds.com (a monitored inbox), or reach us through our contact page. We take these messages seriously and we'll get back to you.