Privacy Policy

At Sahaayikaa, we believe that emotional safety is impossible without absolute privacy. This Privacy Policy describes how we secure your data and what minimal information we collect when you use our platform.

1. Privacy-by-Design and Zero-PII Policy

We build our platform with data minimization. We do NOT collect, request, or store:

• Your real name, physical address, or phone number.
• Your government-issued identity cards.
• Your contacts, social media profiles, or geolocation logs.

2. What Information We Collect

We collect only the bare essentials needed to keep your support network functioning:

• Account credentials: A unique pseudonym (username) and your email address. The email is encrypted at rest and is used solely for secure login and password resets.
• Interactive Content: Anonymous posts and comments you share on the feed, as well as reaction clicks (e.g. Hugs).
• Journal Entries: Personal journal logs you write. These are stored securely and associated with your account in an encrypted database.
• Sentiment & Mood Scores: Tracked mood logs (e.g., Happy, Calm, Anxious) and calculated sentiment indexes to populate your visual healing graphs.

3. AI Processing & Third-Party Integrations

• Empathetic AI Chat: Conversations with the AI companion are processed via secure APIs. We strip all account identifiers before sending the text to AI models. Chats are not stored or used to train public models.
• Toxicity Verification: We use AI models to check for violations of guidelines. This happens on the fly and is not stored unless a warning is triggered.
• Payment Integration: If you perform any payment/support transaction, it is handled entirely by authorized secure payment providers (Razorpay). Sahaayikaa never sees or stores card numbers or bank credentials.

4. Session Security

We use secure, HTTP-only cookie mechanisms to manage user sessions. We do NOT run advertising tracking networks, behavioral remarketing tags, or third-party data profiling scripts.

5. Account Deletion Process

If you decide to leave the support network, we make sure you can exercise your right to be forgotten:

• Deletion Request: Initiating deletion will submit a request to our team to permanently remove your account.
• Permanent Purge: Within 2-3 business days of your request, your account record, email, journal logs, sentiment history, and contributions are permanently and irrevocably deleted from our database.